Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/323830343a383738303a3a2f33322d3634203d3e20323732373133.roa
File:                     323830343a383738303a3a2f33322d3634203d3e20323732373133.roa (raw, json)
Hash identifier:          vzOa1bUEh50yCr8CTz9efcmvJLf5LvID0kivLbVzRls=
Subject key identifier:   A9:8A:BF:56:C7:2A:5F:73:E5:2E:74:D0:BB:4F:64:0C:B7:9B:7C:7E
Certificate issuer:       /CN=5F747E40A246A0CA7811CAAD9BEE953DCF8DB849
Certificate serial:       687086D6462DD49A0BADD7930AE5E174DDAA3F04
Authority key identifier: 5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/323830343a383738303a3a2f33322d3634203d3e20323732373133.roa
Signing time:             Mon 04 Nov 2024 15:55:58 +0000
ROA not before:           Mon 04 Nov 2024 15:50:58 +0000
ROA not after:            Mon 03 Nov 2025 15:55:58 +0000
asID:                     272713
IP address blocks:        2804:8780::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl
                          rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:70:86:d6:46:2d:d4:9a:0b:ad:d7:93:0a:e5:e1:74:dd:aa:3f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F747E40A246A0CA7811CAAD9BEE953DCF8DB849
        Validity
            Not Before: Nov  4 15:50:58 2024 GMT
            Not After : Nov  3 15:55:58 2025 GMT
        Subject: CN=A98ABF56C72A5F73E52E74D0BB4F640CB79B7C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:1a:6d:f7:5c:a5:21:f8:20:a9:69:56:e2:
                    92:28:7d:13:02:78:99:a2:0a:17:40:42:35:a8:c8:
                    c9:73:f7:39:c5:8b:86:47:6d:ca:bb:75:80:25:53:
                    c1:40:d0:03:50:36:91:31:f1:b1:17:f6:c2:59:d6:
                    bb:43:98:0d:57:8f:f7:28:0e:f9:e0:91:31:6d:55:
                    75:dd:c6:18:d0:e9:1f:76:30:9f:b5:c6:93:08:0d:
                    b6:2a:b9:7b:3f:71:fa:63:d4:c2:6e:04:45:81:88:
                    09:54:90:fc:fd:d4:dd:93:2b:dc:4f:40:cc:e0:5a:
                    e1:36:ff:58:f1:f3:68:e7:a0:c5:b4:c1:40:47:79:
                    19:1e:2a:53:48:81:45:67:88:50:3e:a2:2b:fc:e1:
                    72:16:cb:0e:31:44:5a:ed:19:ec:c3:b1:d7:81:32:
                    96:ca:cb:35:e4:03:d0:49:5e:b5:d7:22:21:8b:55:
                    99:e3:39:fb:d2:2b:fe:cc:75:08:01:0d:67:a8:9f:
                    1c:cf:57:c3:fc:0a:4b:81:1e:c3:d7:22:03:d4:e1:
                    1d:0b:3c:63:12:87:91:d6:47:d8:5a:df:15:7c:81:
                    32:f5:13:fb:f3:31:7e:9c:dc:0b:1e:50:33:27:4c:
                    d5:68:57:af:77:8f:7e:e0:a8:db:c2:91:61:0f:b7:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8A:BF:56:C7:2A:5F:73:E5:2E:74:D0:BB:4F:64:0C:B7:9B:7C:7E
            X509v3 Authority Key Identifier:
                keyid:5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/323830343a383738303a3a2f33322d3634203d3e20323732373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8780::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:04:5b:96:39:44:9d:70:09:37:fe:67:5b:b2:68:e4:df:e7:
         9e:c2:1b:75:b6:d3:73:aa:31:df:63:69:eb:47:38:be:8b:09:
         8f:3d:35:00:0d:d0:44:6f:4d:c4:41:3c:f5:d9:1f:65:fa:72:
         57:27:9b:fc:dc:01:a3:e6:66:87:a8:9d:88:7e:9e:07:e7:dc:
         ba:5b:f6:88:50:a0:45:cf:d5:db:c9:be:8c:b2:bc:94:9b:d0:
         8d:0c:76:d5:5e:d1:48:ac:99:ca:58:d2:94:a0:0c:f0:23:2f:
         5e:f3:a5:7a:8b:ad:c7:45:bd:f4:16:f8:89:d5:10:ef:c3:34:
         83:81:35:b1:1d:2e:78:02:e4:eb:6d:6b:51:e2:28:64:50:a1:
         6e:04:6a:d0:0e:34:7e:bd:59:ca:05:23:9c:db:3b:e2:12:11:
         ff:5f:19:dd:b6:d7:0a:be:0d:2c:21:66:6b:12:48:60:85:8a:
         74:1f:52:c8:ff:5f:3a:eb:f0:86:f6:63:7f:57:c4:8a:6d:00:
         f0:f6:01:30:4c:97:a9:d2:6f:6c:ec:b9:59:90:e6:45:80:4c:
         23:ed:01:23:3a:69:3c:0c:fd:6c:75:eb:48:d5:09:82:ad:d8:
         54:55:17:4b:cd:26:ab:f7:15:ac:2d:34:e7:3c:f5:30:40:6a:
         9a:23:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:09 2024 by rpki-client on console-ams.rpki-client.org