Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa
File:                     323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa (raw, json)
Hash identifier:          j4TcCVKj7MF9XtnRSoyosLoxdvQmHgtg37mf3fa4D9M=
Subject key identifier:   99:80:EF:07:64:96:F9:21:65:F7:CF:25:97:B0:C5:71:F2:C0:72:B8
Certificate issuer:       /CN=B576170C915419B17FE7F1127C766A8859F42C4E
Certificate serial:       2A0D61A90DC0FBC673522ECF33ACAF07146CE544
Authority key identifier: B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa
Signing time:             Sun 18 Aug 2024 14:40:08 +0000
ROA not before:           Sun 18 Aug 2024 14:35:08 +0000
ROA not after:            Sun 17 Aug 2025 14:40:08 +0000
asID:                     271150
IP address blocks:        2804:7708:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0d:61:a9:0d:c0:fb:c6:73:52:2e:cf:33:ac:af:07:14:6c:e5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B576170C915419B17FE7F1127C766A8859F42C4E
        Validity
            Not Before: Aug 18 14:35:08 2024 GMT
            Not After : Aug 17 14:40:08 2025 GMT
        Subject: CN=9980EF076496F92165F7CF2597B0C571F2C072B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:0d:6a:b8:16:26:01:e0:97:9e:7d:77:79:
                    07:b8:f6:b7:6a:29:27:93:da:1f:ab:b2:96:65:d4:
                    dc:7a:e2:33:e2:e6:0e:93:f6:2c:ca:84:01:9f:a4:
                    59:e0:4e:f7:86:1b:a7:42:2b:9b:51:fa:24:79:2c:
                    fd:18:fa:4a:36:00:00:39:6d:af:f9:da:55:36:0a:
                    55:39:8c:cf:33:3d:4f:f9:5f:ea:72:c2:dd:19:27:
                    eb:7d:65:3d:5f:b4:e4:ae:b0:bd:d5:6c:0b:92:32:
                    04:d4:6a:12:0a:e2:80:34:9b:e9:da:92:74:d1:2c:
                    3c:c8:6b:30:01:b0:0c:f1:04:89:9c:e4:a3:26:09:
                    e3:e3:57:ea:af:c6:da:91:6d:3d:fe:42:46:23:6a:
                    76:28:ab:df:3b:21:03:90:f9:00:4c:56:22:93:92:
                    2e:41:e0:d9:62:20:c8:4b:6e:0c:d4:bd:a1:27:ac:
                    2a:39:83:d8:20:f6:14:53:07:d6:a0:19:9b:64:29:
                    21:36:8a:58:02:62:a6:59:7b:2b:7f:bb:49:45:d4:
                    17:e6:2c:26:46:50:fb:f0:4c:86:b6:75:8c:fd:0e:
                    a2:71:18:d2:f6:68:ff:ec:5d:8b:b1:be:d8:1f:e2:
                    bb:e3:f4:ff:b8:35:4a:ea:56:2d:86:1e:de:a3:65:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:80:EF:07:64:96:F9:21:65:F7:CF:25:97:B0:C5:71:F2:C0:72:B8
            X509v3 Authority Key Identifier:
                keyid:B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7708:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:01:3a:d5:35:5b:0b:a9:c5:7e:70:81:63:10:81:f8:6c:a3:
         04:64:0e:02:9c:d3:dd:11:5c:90:fc:b9:59:1b:10:a9:a0:8c:
         ef:c9:0d:80:ad:b5:25:72:2a:a4:15:aa:b1:9f:5b:03:9f:f4:
         3b:9e:1e:21:8c:bd:91:8a:b9:d1:a9:07:d7:3b:f8:44:db:1b:
         4c:01:43:24:50:b5:e7:6d:9b:4e:64:08:21:4f:01:3c:05:af:
         05:99:17:a6:cb:b1:fa:57:16:b7:8a:47:b3:d5:f2:01:fd:11:
         02:9d:d1:75:63:cd:06:ce:34:e2:76:55:46:ef:7a:21:c3:15:
         87:1d:61:c4:ee:0d:54:a1:90:2b:ec:36:a2:cc:88:a3:59:58:
         39:69:ab:b3:44:68:db:fb:01:5f:7f:49:98:dd:40:a3:5f:71:
         e5:03:67:9b:00:04:7c:f3:08:c2:1c:4d:b1:6c:25:75:0d:cc:
         c0:7c:ec:dd:8b:b4:81:1b:c0:12:ff:99:d8:47:f5:25:b9:5f:
         40:30:f8:7f:a2:e7:45:bc:e4:0c:4c:61:58:87:96:d3:94:c3:
         93:18:8e:c8:6d:64:0a:3b:87:fc:52:9c:e2:7d:32:22:ca:39:
         4a:6a:92:a4:cf:88:fe:45:37:76:24:f8:99:c9:df:b6:c0:32:
         f5:5e:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org