Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33362d3336203d3e20323730383939.roa
File:                     323830343a373332383a3a2f33362d3336203d3e20323730383939.roa (raw, json)
Hash identifier:          nOUMiKYyQaHPskujFPWN51YChYNj3U0EbMZwgubzP4o=
Subject key identifier:   FA:92:30:D7:DD:9D:44:0B:2F:32:90:FB:A4:63:F1:A5:D0:35:8A:AD
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       1EC89C468ABD705E00C2B5FC8905E41FB7137153
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33362d3336203d3e20323730383939.roa
Signing time:             Thu 04 Apr 2024 03:55:55 +0000
ROA not before:           Thu 04 Apr 2024 03:50:55 +0000
ROA not after:            Thu 03 Apr 2025 03:55:55 +0000
asID:                     270899
IP address blocks:        2804:7328::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c8:9c:46:8a:bd:70:5e:00:c2:b5:fc:89:05:e4:1f:b7:13:71:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Apr  4 03:50:55 2024 GMT
            Not After : Apr  3 03:55:55 2025 GMT
        Subject: CN=FA9230D7DD9D440B2F3290FBA463F1A5D0358AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:0a:50:fe:33:59:08:89:c7:c0:da:9a:27:
                    3c:2d:07:60:9b:d6:fc:29:9b:59:e2:52:a7:8d:9f:
                    5f:d1:73:db:b7:f4:47:7c:c6:10:f6:74:f9:7c:68:
                    b0:9b:a8:70:ff:97:99:78:00:4e:14:60:74:99:a1:
                    21:20:3c:36:af:3d:37:e1:22:73:44:ef:e1:1c:7e:
                    65:8f:10:16:f8:07:2d:7c:d8:84:82:bb:b9:b9:77:
                    00:f6:4a:51:93:fc:5b:87:e2:2a:12:09:cf:5a:c7:
                    41:7e:c6:f6:6a:83:d8:c3:4a:ee:c8:48:e9:d1:6a:
                    fd:de:46:a0:cc:07:85:c4:f6:27:a5:dc:4b:45:6c:
                    de:c3:99:0d:6a:59:f1:59:f9:f4:9f:d8:2f:17:67:
                    4e:10:21:7d:0d:02:2e:11:97:f5:c2:48:63:81:d1:
                    5b:42:41:09:de:5d:62:47:37:e9:c0:26:85:60:58:
                    4a:b4:79:72:6f:4c:b1:0d:34:54:d9:32:4b:d7:48:
                    a5:19:0f:8b:51:41:1b:7a:cd:fc:5d:39:51:57:86:
                    32:ce:de:99:26:95:83:8e:0b:04:e5:fb:8f:d8:5c:
                    59:be:b9:63:fe:04:cf:1c:e5:f2:ef:68:03:57:06:
                    ed:d3:38:60:b8:70:87:4e:97:7a:9f:a7:fe:76:74:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:30:D7:DD:9D:44:0B:2F:32:90:FB:A4:63:F1:A5:D0:35:8A:AD
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33362d3336203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7328::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:81:53:e1:b8:d0:da:31:ae:07:87:d4:e0:81:2c:b8:95:35:
         21:68:b7:f9:10:69:d0:de:4f:34:12:0f:44:b8:79:65:26:7e:
         77:ad:af:55:63:d5:26:43:69:ac:7e:b3:2a:29:1e:c1:a5:69:
         7b:cf:b2:93:2c:01:e5:e7:e3:4e:6c:d9:99:43:b1:33:56:b6:
         fa:bc:61:fc:82:e5:e9:97:a3:61:64:3c:9f:db:81:da:3f:72:
         5c:a3:8e:84:0f:56:8c:99:c5:31:b1:8e:64:76:b8:af:fe:82:
         f6:9f:5d:6a:27:0f:be:27:e9:62:7b:3a:48:ce:c8:e5:ae:ca:
         52:cb:cd:72:47:e4:f9:ef:f1:db:28:12:59:f9:b1:59:b3:a7:
         13:6f:72:10:79:f5:bc:1d:7b:18:62:30:8d:cf:ac:e1:0e:1d:
         f7:71:8a:99:97:2d:96:a6:3e:5e:f8:40:8b:3e:70:fc:eb:88:
         98:49:c9:14:ae:37:c4:b5:b4:67:57:50:a4:8e:2a:f0:59:79:
         23:ca:e7:42:9c:62:e4:b2:26:66:c6:df:1a:44:fe:cc:fa:00:
         1d:ef:84:02:bd:8b:b3:d5:da:08:72:b6:40:c3:57:ae:42:4b:
         55:34:2c:80:6d:58:98:e5:9d:77:0d:c8:08:8f:8c:ad:81:70:
         fb:ce:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:44:14 2024 by rpki-client on console-ams.rpki-client.org