Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          4bLWabhggWMdk72O+LPe8SlTfdV4o1q2Crw2dv36EyU=
Subject key identifier:   F0:19:EB:8C:D7:B6:2E:9E:39:32:89:59:B2:39:7E:0D:4F:DC:C7:AF
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       06C86540C34CEC63FE3B12FFC65C116EE7FF7B60
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 29 Jul 2024 17:09:22 +0000
ROA not before:           Mon 29 Jul 2024 17:04:22 +0000
ROA not after:            Mon 28 Jul 2025 17:09:22 +0000
asID:                     269144
IP address blocks:        2804:6014:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c8:65:40:c3:4c:ec:63:fe:3b:12:ff:c6:5c:11:6e:e7:ff:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jul 29 17:04:22 2024 GMT
            Not After : Jul 28 17:09:22 2025 GMT
        Subject: CN=F019EB8CD7B62E9E39328959B2397E0D4FDCC7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:bd:3b:b9:ae:5f:60:10:4a:91:ba:a5:36:
                    57:7c:85:79:91:4c:a4:6c:45:83:1f:30:16:81:41:
                    bb:31:2f:b4:58:47:fb:96:2f:c0:1f:28:c0:5e:c9:
                    6c:70:a3:50:5d:e5:f7:b0:98:fc:0d:98:e6:fc:98:
                    80:d5:36:89:32:89:a6:2c:bf:7d:43:96:55:27:ce:
                    1f:a1:ca:ee:32:d4:3e:29:08:27:c4:c2:81:7f:7c:
                    d3:5f:86:b1:eb:31:03:b8:d8:8b:6a:18:8a:1e:4e:
                    b2:81:49:52:ea:e2:42:cd:cc:f6:92:63:ce:01:cb:
                    30:24:f5:5b:ce:1b:02:33:c0:76:58:9c:47:82:5f:
                    ad:4e:67:49:7a:17:8b:3e:54:4e:32:7b:60:47:29:
                    cc:42:e5:2f:f5:82:5b:b8:c9:49:b4:3a:9f:b6:15:
                    d4:94:4e:68:5a:c4:8a:43:4d:fb:bc:39:f1:7a:53:
                    97:8f:db:13:a6:96:31:31:2b:b3:7f:95:f0:d9:67:
                    35:a4:e7:3f:fe:6f:4c:7c:8d:4e:33:3a:6b:cf:36:
                    ac:11:f4:b0:70:68:ef:6e:57:49:5a:fe:4e:fd:23:
                    83:c7:34:08:5c:db:09:2e:70:e7:7b:0e:a2:b0:a5:
                    3d:ff:70:07:d5:26:da:bf:90:6d:0c:ca:8e:3e:a1:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:19:EB:8C:D7:B6:2E:9E:39:32:89:59:B2:39:7E:0D:4F:DC:C7:AF
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:5d:8b:54:b8:cb:7c:b2:c3:87:53:ed:38:a4:93:dd:d5:73:
         e7:31:fc:2c:12:94:dd:7c:6a:13:3b:13:4b:ae:26:f8:e6:d6:
         66:49:53:82:9f:d8:a1:7e:46:bb:82:b7:fa:75:22:da:ab:73:
         0f:ce:fa:77:8a:9f:cc:f2:e8:ae:2b:b0:a4:b9:77:9c:b5:ab:
         ce:ea:fc:4c:3d:23:41:3e:b7:6c:df:47:3f:dc:60:41:01:de:
         cf:5e:14:6b:87:5e:e5:74:50:24:e5:3d:67:4e:e3:c5:03:04:
         59:80:6a:c5:57:b0:f6:c5:1a:14:04:49:f9:3a:aa:03:08:eb:
         50:a0:a6:10:5b:cc:0c:57:65:e4:a7:3c:db:fa:7c:04:8d:64:
         8e:d9:a4:ad:d3:cb:78:54:19:ba:a2:83:3e:0c:17:16:be:a5:
         0d:3c:ce:52:dc:51:31:b8:56:a7:1d:8c:40:10:d5:fa:39:27:
         d8:50:fb:0b:f5:ce:9f:d6:b3:98:70:9c:77:09:f3:7a:74:f3:
         20:d7:23:93:38:b8:bf:93:41:ca:4d:65:4b:d0:67:52:c8:41:
         82:bb:95:19:bc:78:26:9d:31:90:00:78:c1:6f:4d:08:a3:44:
         36:44:f9:5f:06:72:d7:e5:f3:f1:21:a7:0c:9b:a1:9d:c7:07:
         f3:ba:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:14 2024 by rpki-client on console-fra.rpki-client.org