Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          GPN5PhY/3cJ5yYM5RMIkARrJ1QkQ62Anp60MJ9z/cb0=
Subject key identifier:   08:B9:94:45:BA:18:E0:C5:D4:69:23:EB:84:64:9D:20:A8:5B:1A:68
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       7D1C7AB9989FCB29DDDB08B3BB06B3CC1D1EDCB6
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 29 Jul 2024 17:10:06 +0000
ROA not before:           Mon 29 Jul 2024 17:05:06 +0000
ROA not after:            Mon 28 Jul 2025 17:10:06 +0000
asID:                     269144
IP address blocks:        2804:6014:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1c:7a:b9:98:9f:cb:29:dd:db:08:b3:bb:06:b3:cc:1d:1e:dc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jul 29 17:05:06 2024 GMT
            Not After : Jul 28 17:10:06 2025 GMT
        Subject: CN=08B99445BA18E0C5D46923EB84649D20A85B1A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:cf:0d:db:79:f6:6f:2e:a7:8f:fa:f5:56:
                    33:68:b7:b0:d6:54:14:b7:4f:59:69:2d:24:a7:da:
                    46:b6:60:d2:cd:14:04:55:1f:b1:28:6b:16:ef:4e:
                    41:d9:ce:62:fb:00:f2:65:fc:a2:38:6d:43:ff:0e:
                    0d:18:a1:5c:fa:e3:9a:0f:db:37:b3:d4:09:7b:e2:
                    db:22:a2:40:0f:45:4f:dd:a3:5e:df:3c:2b:d5:d5:
                    c0:3b:2d:37:ad:ed:15:1d:03:76:d4:5e:3e:2e:0f:
                    d6:55:e6:08:cd:ca:1d:03:f1:1c:47:5f:c0:94:2e:
                    05:8f:85:83:7f:41:e0:6b:56:37:38:25:cc:da:13:
                    4b:ec:f8:4a:23:3d:28:39:6c:57:78:e4:3b:65:67:
                    66:11:d9:bf:14:b0:e5:ff:9e:05:e2:cb:fe:63:f3:
                    17:af:5a:f2:0d:5a:e9:e7:57:b8:17:0c:39:30:e2:
                    b0:aa:66:25:2d:70:59:c0:72:94:6d:3c:ee:c0:13:
                    29:d9:0a:70:6b:06:e7:b0:8c:7a:4f:5e:96:f8:a8:
                    95:c0:04:4e:e3:65:53:06:88:32:78:db:21:4e:3b:
                    fe:c3:41:a4:7b:b2:c8:f7:f6:45:49:c1:0c:29:b5:
                    3b:d9:d6:cb:ec:03:ab:95:28:0f:d5:bb:80:f8:1c:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B9:94:45:BA:18:E0:C5:D4:69:23:EB:84:64:9D:20:A8:5B:1A:68
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:09:b7:f3:e2:ac:44:a4:0d:90:8f:a8:c5:f2:c6:fa:15:
         a0:c9:61:54:26:80:92:bf:5e:e7:b6:db:92:62:21:7e:62:99:
         2a:d9:d9:48:75:7d:be:16:ab:a1:7e:32:e4:b5:a7:28:4b:75:
         73:94:75:2d:d3:31:1a:2f:51:19:c0:5b:90:fd:4b:21:b0:f9:
         30:3c:62:21:a0:b5:0a:67:aa:e0:d9:da:a0:78:65:28:9c:af:
         6f:3e:a3:36:e1:1f:2a:bd:55:c3:dc:14:b3:2f:36:a3:57:f5:
         82:49:3d:f9:b0:01:11:16:f4:26:8d:cd:8e:b9:05:40:97:60:
         a9:4a:60:03:87:b1:47:d5:bf:b3:c2:36:2f:fd:10:33:c4:d6:
         c5:34:52:42:fe:58:6e:60:25:85:24:65:82:40:69:fd:c9:10:
         b2:62:1d:0b:02:ac:bf:5e:4c:cf:e6:63:4d:df:a6:0b:f7:09:
         a3:84:ef:95:3e:9c:76:d9:3f:c1:f8:f6:ce:58:d3:6b:73:16:
         7e:92:93:31:bf:df:32:66:fd:6e:13:63:b4:73:59:bd:4c:a4:
         a0:e3:3b:34:ed:79:23:f7:4e:7d:9d:98:16:33:48:ef:eb:25:
         94:5d:59:25:b4:94:2d:f0:59:8f:f5:2a:38:f9:cd:fb:e3:89:
         fe:5b:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:14 2024 by rpki-client on console-fra.rpki-client.org