Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33322d3332203d3e20323730383939.roa
File:                     323830343a373332383a3a2f33322d3332203d3e20323730383939.roa (raw, json)
Hash identifier:          v4mSI02SjozAGaxdXDEGZXFUOcRSBdwTJNfKOIQk908=
Subject key identifier:   8C:5B:99:4C:D0:23:E1:9E:80:93:18:D8:F3:BC:64:EA:D8:C1:BF:AF
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       2F6866F5B5F4BF7CBB98B2DD2DA0FD699A553ECB
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33322d3332203d3e20323730383939.roa
Signing time:             Wed 08 May 2024 13:11:59 +0000
ROA not before:           Wed 08 May 2024 13:06:59 +0000
ROA not after:            Wed 07 May 2025 13:11:59 +0000
asID:                     270899
IP address blocks:        2804:7328::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:68:66:f5:b5:f4:bf:7c:bb:98:b2:dd:2d:a0:fd:69:9a:55:3e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: May  8 13:06:59 2024 GMT
            Not After : May  7 13:11:59 2025 GMT
        Subject: CN=8C5B994CD023E19E809318D8F3BC64EAD8C1BFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:c3:af:92:8f:19:95:ac:a4:24:40:9f:8a:
                    11:34:ef:91:04:81:07:08:46:91:85:7d:61:5e:73:
                    b5:14:72:29:a6:db:36:6e:8a:b9:18:38:f5:81:8c:
                    c3:73:35:6d:20:bf:33:36:2d:d9:74:db:4a:91:66:
                    67:f6:e6:21:ce:13:e7:85:a4:c4:3b:db:55:68:08:
                    18:2f:35:ff:72:fa:3e:f3:78:ac:91:97:09:3e:64:
                    8f:f6:7d:1a:d3:f7:54:75:60:be:5b:18:e6:2e:2a:
                    ea:2d:e9:9c:ff:da:b9:d5:25:34:c4:f4:f2:44:14:
                    34:67:bb:1d:de:52:f3:60:a7:ff:a6:b5:7b:21:14:
                    06:dc:e5:33:81:79:74:ca:32:27:ec:4f:9a:3b:77:
                    ac:5e:ac:d7:60:14:82:04:3e:a8:e2:94:d6:41:cd:
                    9d:83:9f:f3:1e:fb:91:c0:20:15:b5:4e:f1:db:f4:
                    c4:f7:c3:be:d8:01:f0:49:6c:90:55:ea:1e:14:3b:
                    4d:4c:17:21:09:7b:42:e2:6c:c4:30:21:2b:e0:a6:
                    6a:55:f2:f7:3a:75:08:d6:55:d8:a9:19:cb:b9:c7:
                    dd:d5:1c:b0:aa:a4:93:aa:2c:c5:07:19:f4:f2:1b:
                    b8:2a:65:5d:55:5c:21:93:27:b9:9d:53:ae:af:12:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5B:99:4C:D0:23:E1:9E:80:93:18:D8:F3:BC:64:EA:D8:C1:BF:AF
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33322d3332203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7328::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:86:54:49:ec:9d:32:36:c3:27:70:a4:46:32:9e:55:66:2b:
         5c:62:34:f1:28:4e:34:1d:70:19:0c:90:95:60:47:9f:0f:45:
         de:d8:ac:d2:35:ba:8c:fd:77:d2:b2:7f:75:d3:e3:41:f7:1c:
         4e:a8:3a:c4:bd:51:c7:3d:41:64:d6:7e:07:40:76:70:66:bc:
         d7:b2:84:ec:31:28:74:5e:e1:fe:ec:b7:ef:26:1c:dc:93:3d:
         21:06:2d:9c:7f:c6:89:f8:82:85:11:ca:49:9f:6e:c8:45:91:
         93:d5:fb:47:ec:f3:55:b0:77:9a:6e:6f:71:9f:3f:66:8f:f6:
         e6:17:d1:cc:33:7b:28:54:76:99:6c:68:1b:db:21:d3:28:a7:
         3c:65:b9:9d:f6:c9:11:88:ec:1f:f9:e1:e1:49:b8:32:24:65:
         4d:c2:ce:d8:e9:45:c9:81:06:67:5b:7e:11:88:95:0f:fd:24:
         ba:67:6c:1f:29:a1:67:ed:c8:d6:60:aa:67:96:30:ca:c0:d5:
         1c:b9:5f:69:e7:dc:f3:9f:8d:09:76:a5:a3:b0:71:bf:32:55:
         48:0d:ce:f9:d5:fe:4c:c7:ef:86:3a:09:d9:5e:1b:89:85:66:
         a3:d1:02:d8:85:5e:de:d6:74:44:a3:53:13:f6:ff:48:2f:10:
         2d:c5:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org