Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa
File:                     323830343a326364343a3a2f33322d3438203d3e20323635323436.roa (raw, json)
Hash identifier:          tP8G7C/yXY7Bgi+d3kYpBX5TCu+NmJYbAOzoaQPSch0=
Subject key identifier:   02:AF:8A:88:65:10:D6:3A:CE:88:88:21:4E:0B:F4:3A:8B:AE:3E:A0
Certificate issuer:       /CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
Certificate serial:       3218B0D3148E4AC853E490946C8EC62C1D52769D
Authority key identifier: 08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa
Signing time:             Thu 04 Apr 2024 12:40:35 +0000
ROA not before:           Thu 04 Apr 2024 12:35:35 +0000
ROA not after:            Thu 03 Apr 2025 12:40:35 +0000
asID:                     265246
IP address blocks:        2804:2cd4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.crl
                          rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:18:b0:d3:14:8e:4a:c8:53:e4:90:94:6c:8e:c6:2c:1d:52:76:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
        Validity
            Not Before: Apr  4 12:35:35 2024 GMT
            Not After : Apr  3 12:40:35 2025 GMT
        Subject: CN=02AF8A886510D63ACE8888214E0BF43A8BAE3EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:cb:07:80:1f:84:80:bb:cf:ef:55:0f:9f:
                    89:d3:89:5c:1a:4c:24:d6:ee:3f:4f:98:fc:6c:1a:
                    ef:1e:9d:10:4a:13:e9:fe:d8:ea:24:3f:21:37:a0:
                    70:30:1b:6c:04:4e:56:26:1b:87:d3:25:08:4b:b4:
                    8f:03:9c:c7:1e:3a:98:ed:a4:76:5b:2c:70:78:72:
                    23:ec:c9:df:27:92:03:31:5f:ce:2c:c1:64:24:f1:
                    e5:73:f4:e7:88:b2:8d:99:ed:1e:2d:f7:71:85:38:
                    0a:93:03:19:73:8e:d2:ba:42:ec:0a:7e:41:5b:07:
                    18:89:ed:2f:fd:2a:90:7d:d0:1a:df:8c:d5:32:94:
                    61:73:c7:11:fb:ab:50:be:f6:14:2a:2a:e8:1f:ad:
                    f7:3a:54:8b:de:a9:7f:e1:fd:4b:a5:18:76:5a:e8:
                    c5:c4:cd:b4:ca:2c:0d:e6:e8:7f:8c:d8:c5:92:e8:
                    4a:02:c8:0d:48:95:b8:bf:5f:1e:d3:11:d5:fe:90:
                    ef:72:0d:29:41:f0:f2:86:a6:17:55:32:57:21:e3:
                    62:28:f4:a9:b4:1a:52:35:50:0f:ac:af:c0:52:8c:
                    b0:d6:de:87:fa:c8:1f:30:ba:71:81:f4:6e:e0:f4:
                    f4:2a:c0:be:88:cd:1c:74:97:7e:84:fe:37:00:75:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:8A:88:65:10:D6:3A:CE:88:88:21:4E:0B:F4:3A:8B:AE:3E:A0
            X509v3 Authority Key Identifier:
                keyid:08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:3c:6a:6b:e0:0a:8f:b1:40:e1:ca:a3:82:91:b4:c7:70:
         87:77:ea:f9:ad:92:51:b9:fd:cb:87:a0:11:12:ad:f7:c0:ae:
         62:ef:82:3a:e0:02:c9:b2:12:ae:02:f2:78:74:7c:5e:94:f9:
         bb:1e:04:42:a5:d5:34:09:33:68:84:9c:93:e9:f8:5b:77:d3:
         85:fa:6d:ee:45:a9:11:88:86:84:91:43:f7:22:9f:fe:ca:9b:
         db:b2:55:cc:c5:26:bb:39:eb:35:1a:5d:1b:05:76:51:64:8d:
         61:57:2c:14:fd:c2:58:04:03:ae:d4:b4:c3:3b:e9:90:9c:62:
         36:c5:2a:33:69:96:a1:30:0c:9b:74:e8:07:0a:14:73:43:87:
         7c:9b:53:d9:d6:ac:33:fc:e4:24:d2:ff:78:88:e0:71:98:b5:
         e2:e4:62:2a:d9:20:58:db:06:8b:be:89:2f:ba:57:6b:f2:e8:
         f2:f2:17:c8:a1:87:2d:f8:4c:fd:c7:c6:bf:9f:53:57:c4:55:
         eb:b2:16:a8:f6:4a:60:ad:1e:9f:3c:f5:78:0f:3a:b8:fd:ba:
         33:a2:e4:a1:30:27:5e:f3:85:e9:6a:51:67:2f:5c:6c:39:c5:
         3f:e0:f1:28:95:e1:c6:b9:7b:a7:b6:4a:2c:03:02:de:77:0f:
         ca:2a:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:03 2024 by rpki-client on console-fra.rpki-client.org