Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa
File:                     323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa (raw, json)
Hash identifier:          ZdqP7l/I9BOcaJrvS0rfV3JbjmiIEZcAN9yBalruBcw=
Subject key identifier:   22:A4:82:BC:A8:C6:ED:E8:76:11:91:D9:D4:76:EC:56:E9:9E:62:F1
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       5D5DF6528FDDA838DD44E66D52C56DD1EB47B175
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa
Signing time:             Thu 04 Apr 2024 03:55:55 +0000
ROA not before:           Thu 04 Apr 2024 03:50:55 +0000
ROA not after:            Thu 03 Apr 2025 03:55:55 +0000
asID:                     270899
IP address blocks:        2804:7328:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5d:f6:52:8f:dd:a8:38:dd:44:e6:6d:52:c5:6d:d1:eb:47:b1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Apr  4 03:50:55 2024 GMT
            Not After : Apr  3 03:55:55 2025 GMT
        Subject: CN=22A482BCA8C6EDE8761191D9D476EC56E99E62F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:4e:59:09:af:83:d5:b6:1b:95:4f:58:b5:
                    27:96:cc:8a:86:32:be:02:2b:01:fe:a7:d4:08:a5:
                    34:cb:11:48:f4:8e:51:89:06:d0:11:f4:9e:7c:bd:
                    15:51:9b:05:05:27:c2:7f:56:95:4b:58:53:b6:80:
                    4a:32:8a:3c:d5:5b:49:b9:ef:5a:68:f0:38:72:94:
                    6a:6a:16:64:e1:d6:96:33:3c:15:43:44:6b:b9:e7:
                    cb:89:3f:a7:ad:aa:df:70:a4:d5:30:fc:f6:c1:a8:
                    f6:27:c2:66:1d:fe:f9:69:9e:92:c0:f5:1f:ea:b7:
                    5a:49:14:c5:8b:1a:41:35:e3:47:1b:06:d7:86:40:
                    cb:57:bd:5c:9e:6e:87:bb:c8:d0:7a:2d:55:6f:9c:
                    a2:0f:7f:0c:02:c2:08:d4:cc:79:46:c2:80:35:5a:
                    b2:8c:c3:97:65:44:d6:9f:eb:03:47:ef:01:f7:3a:
                    6b:b0:06:a0:cc:95:f0:a2:14:fc:2e:d0:ae:9f:99:
                    cb:0c:c7:f8:48:8e:b3:b9:25:46:69:30:3f:74:f4:
                    1c:69:22:df:a8:5f:2d:87:6f:1d:4d:96:61:5a:7d:
                    a3:77:56:ec:4d:e9:14:78:e6:30:33:fc:93:14:23:
                    f1:f8:9d:e9:4a:34:d3:de:e6:b8:bd:ab:17:68:fd:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A4:82:BC:A8:C6:ED:E8:76:11:91:D9:D4:76:EC:56:E9:9E:62:F1
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7328:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:b8:61:c5:85:cf:c3:d2:af:a1:89:82:14:6e:0d:2b:f1:
         e9:19:6a:fa:31:a3:47:e3:80:6f:32:f2:26:d1:f0:22:54:15:
         25:ac:2b:da:c1:36:fb:ac:7c:f5:88:ac:5a:44:2e:34:a5:bd:
         23:11:54:01:2e:f5:a2:7b:1c:db:a8:dc:4f:3e:2c:14:3b:76:
         fd:97:fc:6d:de:b6:9b:5b:39:48:1f:4f:fc:1b:63:51:04:51:
         cf:02:e5:8d:9d:d5:cb:21:cf:55:b5:49:3a:e2:92:fc:43:3e:
         5f:76:3a:d9:74:a1:af:9d:b4:5b:ad:2d:42:54:b0:4b:42:8c:
         da:2d:3a:e9:07:3e:36:5a:9a:cc:6a:6a:0f:a9:9b:87:28:1b:
         c1:b7:0a:82:f0:0f:6f:cb:80:04:d0:57:8f:44:80:3d:8d:e3:
         ea:3d:9a:d7:f9:a1:0c:f2:9b:41:5b:2e:54:6f:3c:4d:08:f9:
         1f:44:08:0f:b1:4f:f4:0c:e3:48:0f:9b:a2:2b:e6:20:8d:d1:
         01:61:c4:01:68:42:41:32:8e:b1:d6:60:3f:a5:69:8e:56:9a:
         71:c3:e1:c1:d9:22:f4:74:86:97:ae:a1:ab:1c:51:0f:ea:bd:
         56:37:df:cc:db:8c:98:03:db:40:62:2f:f0:bb:6f:d4:c8:c5:
         d6:ba:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:44:14 2024 by rpki-client on console-ams.rpki-client.org