Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/323830343a363730303a3a2f33322d3438203d3e20323639353937.roa
File:                     323830343a363730303a3a2f33322d3438203d3e20323639353937.roa (raw, json)
Hash identifier:          97GRf8t83TJ9CrD+Wfbw2D46fsBrpVkDUBzoSoxt44U=
Subject key identifier:   C4:A3:A1:96:A1:57:F7:9A:58:71:BC:31:42:67:09:D9:5F:09:A0:2D
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       3DA93B3AA3CFFC030909F6EE8457D795DE5B9382
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/323830343a363730303a3a2f33322d3438203d3e20323639353937.roa
Signing time:             Thu 04 Apr 2024 14:27:13 +0000
ROA not before:           Thu 04 Apr 2024 14:22:13 +0000
ROA not after:            Thu 03 Apr 2025 14:27:13 +0000
asID:                     269597
IP address blocks:        2804:6700::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a9:3b:3a:a3:cf:fc:03:09:09:f6:ee:84:57:d7:95:de:5b:93:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Apr  4 14:22:13 2024 GMT
            Not After : Apr  3 14:27:13 2025 GMT
        Subject: CN=C4A3A196A157F79A5871BC31426709D95F09A02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:92:1e:a8:26:b0:f2:e4:ac:bb:fa:de:5c:
                    36:b9:f1:f4:2f:54:7b:a0:40:41:dc:25:90:a4:b1:
                    01:88:26:56:6e:98:70:10:c5:78:4a:72:38:62:19:
                    4b:2f:c8:e7:73:0f:61:2c:3f:dd:d0:83:7c:1b:b2:
                    f1:f1:11:4f:1e:3d:25:59:79:88:3b:01:f8:63:35:
                    87:95:4a:8f:09:b1:4b:4c:a4:cd:11:c7:b9:ab:5d:
                    62:40:2f:1e:87:09:41:44:66:8c:fe:e8:6f:dc:a0:
                    77:40:59:c1:3f:aa:66:8a:e6:52:7b:07:ed:e3:c2:
                    c3:26:53:cd:31:27:17:55:19:55:12:ac:6f:77:9b:
                    3b:e5:30:a4:51:1f:9b:6c:90:46:05:68:c3:d6:ec:
                    ef:9a:57:b4:37:d6:9a:0d:fe:7e:92:cc:b9:94:08:
                    62:4f:65:30:7f:09:ee:be:ad:a7:14:e1:ed:b8:f5:
                    0a:62:05:af:62:98:f4:3c:0e:be:fa:11:65:aa:58:
                    4c:04:cf:6b:8c:19:5e:c9:f4:bf:9e:9a:53:f3:2c:
                    3a:6d:4d:18:5d:9f:67:f8:3d:f6:57:42:76:b1:89:
                    fb:c5:c3:84:21:bc:76:4d:f4:4e:83:ed:c1:69:8d:
                    59:3b:cf:8e:ca:61:d5:9f:96:ce:51:c1:ff:05:ad:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:A1:96:A1:57:F7:9A:58:71:BC:31:42:67:09:D9:5F:09:A0:2D
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/323830343a363730303a3a2f33322d3438203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:fd:c9:46:9e:39:09:e8:d3:8f:15:b5:2a:30:c6:8a:c3:
         5f:dc:b9:3b:54:8c:33:9e:fe:fa:85:9f:77:7b:6e:50:fb:da:
         41:26:05:49:a8:a9:9f:b9:ee:01:11:ce:41:ea:97:c6:75:8c:
         76:ca:e4:90:16:70:25:ce:74:8c:85:9f:16:9f:22:53:10:7c:
         47:4a:9b:af:94:b8:2d:2e:06:76:04:46:26:d6:3f:cd:b2:5e:
         94:3c:20:ba:d1:ad:5d:a3:73:6f:61:89:18:56:32:c4:02:45:
         af:f5:df:f1:bb:b7:e5:8f:a3:40:d8:66:be:1c:4c:34:47:c3:
         3c:1f:0f:33:71:7f:04:c7:db:9d:7f:97:0c:f2:e6:43:d4:1f:
         64:4a:77:c8:d9:fd:32:9f:d9:5b:09:18:32:f0:5a:63:61:05:
         a4:5a:e5:4a:47:56:e3:8f:8a:c5:02:39:d7:93:5e:aa:22:0e:
         38:f0:d4:53:8e:42:17:4c:ad:b8:92:7c:cc:23:0d:fb:09:10:
         57:9f:62:b5:f8:39:06:1f:1b:8e:62:9b:c7:6b:bc:97:1c:a8:
         09:c3:0d:62:bb:f0:f6:23:85:e9:f6:b7:a9:30:2f:b2:b0:f1:
         1e:69:6c:a5:78:bb:57:c6:4c:05:ec:70:27:5a:2a:8d:64:b2:
         7c:a8:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org