Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa
File:                     323830343a343364383a3a2f33322d3438203d3e20323637353934.roa (raw, json)
Hash identifier:          vNQzxQsDcEtznC5k2tRDUz9M6/8y5IWo6p+bMM/TGug=
Subject key identifier:   AD:E2:B2:76:B8:0C:99:26:DB:22:59:53:54:33:E6:FF:B1:BC:35:E9
Certificate issuer:       /CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6
Certificate serial:       4598B2E95B73E52CEA9A67D0D00CC4455AB0BA62
Authority key identifier: 1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa
Signing time:             Thu 04 Apr 2024 04:09:29 +0000
ROA not before:           Thu 04 Apr 2024 04:04:29 +0000
ROA not after:            Thu 03 Apr 2025 04:09:29 +0000
asID:                     267594
IP address blocks:        2804:43d8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl
                          rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:98:b2:e9:5b:73:e5:2c:ea:9a:67:d0:d0:0c:c4:45:5a:b0:ba:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6
        Validity
            Not Before: Apr  4 04:04:29 2024 GMT
            Not After : Apr  3 04:09:29 2025 GMT
        Subject: CN=ADE2B276B80C9926DB2259535433E6FFB1BC35E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:31:dd:96:05:a2:ba:d4:2a:d4:8b:0c:83:
                    55:a5:32:6c:11:6b:ae:2f:d0:47:ea:5a:70:66:df:
                    19:8e:20:e9:a7:96:24:60:20:02:7e:e1:ea:23:7b:
                    de:e4:75:8e:d5:26:50:89:3c:11:02:57:2b:4f:fe:
                    31:26:1b:97:b0:0b:3c:c0:7b:7f:e6:bb:e1:31:fd:
                    d5:e1:44:b9:4a:80:9b:b6:df:13:e9:5b:f0:36:ea:
                    b2:2c:57:a4:05:d1:c3:61:9f:6c:01:4b:b0:b2:d9:
                    55:14:c4:28:1e:4a:0f:48:8a:a6:d3:bb:48:11:45:
                    70:36:7e:20:10:4a:b6:4f:f0:d0:7b:57:37:92:63:
                    95:28:a7:99:9b:4c:20:58:6e:5a:49:de:b3:42:61:
                    c7:4b:ab:cb:05:2b:e8:e9:1a:25:64:0a:70:fe:8e:
                    1d:5e:6f:02:40:2a:8d:81:3e:a2:ee:8b:b6:0b:78:
                    be:67:5c:56:25:3c:7d:1e:5b:cf:a5:a1:cb:02:ab:
                    84:f1:ff:8d:c9:6f:56:e5:13:07:77:94:b0:18:bc:
                    4e:75:bf:0f:43:a8:3e:a5:aa:2d:71:ec:06:05:40:
                    3e:eb:58:15:f1:cc:21:67:e4:52:37:fd:f4:d6:9c:
                    65:8b:6c:60:51:ac:8a:c9:40:eb:3a:63:7d:2c:20:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:B2:76:B8:0C:99:26:DB:22:59:53:54:33:E6:FF:B1:BC:35:E9
            X509v3 Authority Key Identifier:
                keyid:1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:9d:8d:a7:82:5a:0d:46:0b:6b:f9:69:e6:9f:40:5b:53:
         4c:20:2b:17:5a:f0:5a:ee:0a:a5:15:98:93:25:33:0e:5d:27:
         ce:cc:99:0c:ae:b0:78:ef:a2:1b:f7:d2:ea:9f:93:13:b1:00:
         13:e5:c6:6c:9f:18:71:b6:79:01:e0:28:ad:c2:1d:1a:33:0e:
         c2:ab:02:3a:84:17:82:64:a8:a8:21:ae:e5:f8:7f:f2:fb:c4:
         30:aa:03:c3:df:87:66:f5:f0:58:f9:21:ca:d0:a3:ab:f0:8a:
         ef:93:d9:1b:cb:52:76:09:28:40:4f:63:b5:8a:a1:f8:40:60:
         79:11:0f:6b:61:30:cb:da:a5:f3:49:b0:81:91:6c:25:ea:d6:
         d5:8e:f4:1d:6c:b4:4d:bd:ac:a8:7b:17:da:1e:1a:33:2c:8e:
         30:fe:57:a8:2c:53:eb:b5:71:47:6f:16:c0:88:07:1b:f6:7f:
         ec:3d:ce:46:db:a4:47:15:eb:a1:81:ed:af:77:b8:30:d1:f0:
         a6:43:04:19:cf:a1:7d:27:3e:f0:01:67:9a:35:03:46:50:6f:
         ac:59:f5:90:ce:50:f4:b2:85:51:b8:5e:c0:d2:b8:5a:e9:92:
         c3:f3:95:2e:8c:85:a5:36:43:12:1b:88:10:b5:57:28:0c:54:
         fd:5b:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:52 2024 by rpki-client on console-ams.rpki-client.org