Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313330303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a313330303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          9Po6+Bu6iCcYv0GWV0KrWhJ6cSonTdfsOKbjYwWXh6Y=
Subject key identifier:   30:6F:3E:52:4A:B4:23:0E:E1:B1:89:0C:A1:C6:CF:9C:BE:EF:88:D6
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       08D888719E312B1F3C82C8296257ADA2F0DF8A0E
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313330303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:14 +0000
ROA not before:           Thu 04 Apr 2024 02:02:14 +0000
ROA not after:            Thu 03 Apr 2025 02:07:14 +0000
asID:                     267458
IP address blocks:        2804:41d0:1300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d8:88:71:9e:31:2b:1f:3c:82:c8:29:62:57:ad:a2:f0:df:8a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:14 2024 GMT
            Not After : Apr  3 02:07:14 2025 GMT
        Subject: CN=306F3E524AB4230EE1B1890CA1C6CF9CBEEF88D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8c:b6:64:53:b4:84:0d:e4:8b:cf:f0:90:e4:
                    97:23:96:6c:95:e1:38:29:72:c8:94:67:55:da:4e:
                    fa:16:c5:18:9f:25:1a:d4:0a:37:e6:43:9c:45:6e:
                    ea:01:98:fa:b5:06:3e:8b:d0:ac:24:52:89:b8:5e:
                    56:a7:cf:ce:b8:c1:11:55:6d:2a:ff:92:0b:72:81:
                    ef:a3:32:3e:07:72:0a:ab:97:4d:ff:30:95:4a:f9:
                    d2:c6:9f:3e:d7:f6:36:cf:eb:2e:09:92:68:83:36:
                    6d:34:64:60:63:6e:d8:51:52:42:e5:c4:eb:3d:b4:
                    93:a4:b7:30:97:65:6b:82:a2:9f:c6:68:b7:08:6b:
                    17:f9:00:9a:68:a5:5d:1c:c0:d9:55:64:81:16:0d:
                    e0:79:05:b7:88:b1:69:89:cd:1b:a5:b3:38:72:de:
                    6b:5d:6d:93:64:d5:cd:60:57:3a:4f:7f:77:14:4e:
                    c1:e5:c7:7c:8a:53:da:86:3c:73:ef:81:4a:ae:2c:
                    9e:1b:a9:f9:45:51:e1:f4:0f:40:ef:81:b7:c3:f7:
                    5a:b3:b0:2f:05:50:da:33:d9:90:40:1e:2d:a1:cd:
                    46:1d:00:2c:af:e7:04:ca:46:79:b5:fe:79:c3:91:
                    09:86:97:b6:ff:72:6a:31:71:35:d0:a1:07:9b:16:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:3E:52:4A:B4:23:0E:E1:B1:89:0C:A1:C6:CF:9C:BE:EF:88:D6
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313330303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:df:be:70:04:26:42:68:ba:2e:d0:bc:9f:99:9e:2d:83:
         02:be:f0:54:b3:21:1d:81:ab:7a:de:5f:3e:c4:83:e3:3d:8f:
         03:de:fe:ed:93:fc:b7:7f:06:ed:25:37:62:84:a4:8b:a4:15:
         14:fd:51:fa:a3:1d:6f:74:43:b0:2a:08:cb:40:c4:4c:5b:c7:
         8b:cf:77:5b:0a:64:72:27:a9:95:9b:e5:5d:78:0c:08:f6:78:
         75:67:19:10:c6:55:7c:90:80:41:28:9f:e2:cf:7a:1f:90:93:
         bd:52:c4:26:a3:58:1c:c5:3c:4f:6a:49:56:be:a4:9e:bb:44:
         bb:d7:bb:15:fb:b0:86:01:75:fc:35:35:78:2f:b5:16:7e:8e:
         a0:16:7b:c8:19:ca:35:6b:48:dd:a9:77:2c:2a:59:2f:a9:a6:
         c3:ae:06:b8:1e:85:39:a6:2b:97:9e:71:a7:bc:f9:c5:cd:98:
         46:1e:5c:aa:19:7f:3e:99:b2:cb:e1:81:e2:83:12:9d:78:73:
         13:4a:1d:8f:56:de:aa:69:59:58:63:45:56:93:86:d5:69:1c:
         75:89:65:5c:be:b2:62:16:63:8e:c0:d4:fe:16:fb:2b:2f:3e:
         e6:f7:58:be:45:7a:9e:be:f1:d7:aa:75:b4:db:9f:a5:b6:d0:
         6e:aa:5a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:04 2024 by rpki-client on console-fra.rpki-client.org