Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa
File:                     323830343a64303a3a2f33322d313238203d3e203238313435.roa (raw, json)
Hash identifier:          bz5u4guPw3UP9Nz0rbNa+8+Ia6xicUf48X3Bxc47oak=
Subject key identifier:   74:8D:48:C2:F9:EF:99:97:05:32:28:93:AD:AB:90:06:96:BE:75:65
Certificate issuer:       /CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
Certificate serial:       4DB68EEB550361F826D984B019409AEC7F29D19C
Authority key identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa
Signing time:             Thu 30 May 2024 23:23:31 +0000
ROA not before:           Thu 30 May 2024 23:18:31 +0000
ROA not after:            Thu 29 May 2025 23:23:31 +0000
asID:                     28145
IP address blocks:        2804:d0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b6:8e:eb:55:03:61:f8:26:d9:84:b0:19:40:9a:ec:7f:29:d1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
        Validity
            Not Before: May 30 23:18:31 2024 GMT
            Not After : May 29 23:23:31 2025 GMT
        Subject: CN=748D48C2F9EF999705322893ADAB900696BE7565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d6:8d:41:55:43:99:93:4a:f5:53:3d:3f:74:
                    b4:27:2a:3b:f3:eb:a8:0e:1e:d9:e1:b1:48:ac:41:
                    8c:8c:00:7b:66:45:b6:b0:14:6f:0c:c4:de:17:ae:
                    94:63:fe:f0:58:c1:93:4c:9b:dd:fc:b2:88:3a:13:
                    ef:80:8d:24:9c:67:f9:55:08:36:17:67:9d:8a:bb:
                    8e:03:6d:fa:90:d9:f3:03:32:bc:2a:e6:0d:19:42:
                    74:1b:21:4b:9f:e1:d9:6f:b7:78:fc:9c:3f:3b:96:
                    41:41:d3:d2:4c:47:ab:24:6f:31:5c:a9:45:d4:d6:
                    38:ea:1a:45:7b:ac:56:34:95:93:e5:32:de:65:b6:
                    ec:98:bd:1c:ec:46:19:0a:07:d4:53:8c:cd:38:f8:
                    75:dc:34:9e:b7:4e:13:be:11:0d:fe:f9:0a:fd:89:
                    f0:9a:d6:ea:9c:d7:0b:4b:b6:db:e9:63:2f:ae:b2:
                    17:15:63:97:78:07:f8:15:e5:ba:4c:a6:af:7f:04:
                    1e:46:90:63:c3:14:f1:22:1b:29:98:11:3d:d0:41:
                    62:43:ec:2f:5c:c8:9c:d8:ea:ea:1f:19:4a:d8:56:
                    e0:3f:66:fe:2e:ee:b7:c3:3a:9c:63:80:65:52:4e:
                    7e:fc:4f:8b:71:ec:38:9d:38:80:66:c2:04:00:12:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8D:48:C2:F9:EF:99:97:05:32:28:93:AD:AB:90:06:96:BE:75:65
            X509v3 Authority Key Identifier:
                keyid:64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:66:d6:d3:97:53:b5:f7:2b:d8:b0:81:39:49:50:50:0b:cc:
         ca:d4:b7:22:39:d2:ef:0a:24:e0:11:33:1e:ff:50:64:47:37:
         32:ee:14:f4:17:d1:41:92:62:3c:06:74:49:9c:51:fe:37:92:
         19:31:03:a5:0a:5f:7c:85:51:66:90:f2:6d:42:46:3d:66:61:
         c2:22:07:76:38:85:03:8d:78:1c:10:c8:26:23:0c:dc:2b:f4:
         3b:0a:cf:33:c4:cf:18:17:62:1c:da:e2:fa:f7:46:9a:be:29:
         e2:15:93:a9:72:45:fa:6e:ab:78:1c:a5:7d:24:1f:dd:a6:b5:
         21:9b:4e:0b:c7:ce:09:f0:3a:2b:5e:28:b0:66:b1:08:65:e5:
         86:cf:22:03:72:44:df:3b:41:63:3d:b8:9e:30:b1:4b:89:f4:
         bd:d7:40:ff:16:ce:f7:58:c8:76:3c:ee:fc:67:72:ef:63:06:
         36:0e:d1:55:38:5f:69:fe:ae:d6:d9:ca:6a:ce:3b:a5:21:3f:
         bf:e6:e4:a6:da:33:91:25:3a:4e:1c:cb:ac:d6:5a:68:17:3d:
         71:ea:62:71:1b:9e:83:a2:ea:29:43:36:d0:6e:22:0f:75:0b:
         31:1e:64:48:71:41:85:ae:70:28:a9:2b:5e:a5:ae:ab:7f:d5:
         97:8f:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:36 2024 by rpki-client on console-ams.rpki-client.org