Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a666630303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a666630303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          aERYSTIV5AGrMQmpj9qlquKysuiOSUiA8o+Q/yLbyCU=
Subject key identifier:   A9:C6:67:E6:1A:EF:25:F5:BA:A6:2C:99:92:CF:2F:2C:13:11:01:00
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       792BFDCD228CCF07478E893301CCAC530A0EA3AA
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a666630303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:14 +0000
ROA not before:           Thu 04 Apr 2024 02:02:14 +0000
ROA not after:            Thu 03 Apr 2025 02:07:14 +0000
asID:                     267458
IP address blocks:        2804:41d0:ff00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2b:fd:cd:22:8c:cf:07:47:8e:89:33:01:cc:ac:53:0a:0e:a3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:14 2024 GMT
            Not After : Apr  3 02:07:14 2025 GMT
        Subject: CN=A9C667E61AEF25F5BAA62C9992CF2F2C13110100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:5a:f9:f8:ef:a7:c9:73:e3:b3:32:8c:c8:
                    36:12:77:11:ef:76:43:9f:b0:b7:9a:b2:5e:73:b4:
                    1f:43:96:26:69:97:e3:b8:af:71:df:00:71:c5:55:
                    26:d0:17:7e:3d:2e:7e:54:3d:16:4e:41:2f:fb:f6:
                    12:3c:21:68:2c:48:06:ae:2b:28:32:4a:b2:e4:9e:
                    2f:fa:1c:9f:98:35:35:31:ab:7a:88:0e:fc:2c:1f:
                    94:2a:38:e5:ff:c1:b9:54:64:f4:56:b9:2b:6d:b4:
                    84:12:eb:36:fa:d8:b0:a3:92:02:b3:8b:66:4e:20:
                    22:3b:49:39:13:49:78:5c:8f:e1:14:3a:20:78:82:
                    55:14:d5:22:41:1d:37:c7:29:9b:c9:da:e2:4d:ec:
                    7b:d3:04:95:77:b2:44:43:b9:d6:72:06:0b:c5:c0:
                    3e:d0:8f:af:76:89:65:1f:4a:10:f3:a3:ad:9a:d3:
                    2f:04:2f:57:23:63:ce:3f:e3:25:d8:b9:2d:b2:e9:
                    5f:b1:50:2c:2e:ad:78:d0:e6:32:75:f6:bd:5c:99:
                    00:04:11:ed:e9:91:fd:7d:f6:88:af:28:5b:bf:39:
                    82:c9:87:c1:6e:d4:10:e1:bf:36:23:78:74:aa:ab:
                    7f:ae:fe:4f:be:c2:eb:02:d6:12:cc:be:cd:d5:b6:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:67:E6:1A:EF:25:F5:BA:A6:2C:99:92:CF:2F:2C:13:11:01:00
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a666630303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:ca:62:6c:60:72:d1:06:9f:7a:3c:a1:5b:e6:0d:28:8c:5d:
         8c:21:6e:26:8c:a1:9b:ae:ac:0f:70:42:15:2d:8e:2f:36:3b:
         81:8f:25:b5:da:59:c1:84:23:d8:71:5e:10:f6:ed:f9:a9:4d:
         77:d1:64:a7:64:4c:12:e1:7a:30:ca:37:ed:bb:2a:dd:7a:72:
         3c:95:70:c8:c4:4b:ae:84:5b:52:d0:40:55:77:49:9f:c4:ba:
         47:00:ff:4f:84:81:3e:78:29:89:31:df:7a:96:73:5e:18:ae:
         da:cb:79:51:60:a2:8a:f4:9f:4f:7e:14:7e:e8:60:26:e7:93:
         0d:bc:5f:8e:5c:ef:f6:84:76:eb:46:4c:0d:d8:66:db:41:90:
         26:14:f5:54:bf:ec:f3:89:11:21:cf:e9:75:b8:69:ad:47:22:
         cd:7c:24:ba:aa:cd:1f:bc:f0:f6:5a:e4:d5:bd:fc:0c:18:fa:
         9e:84:75:8b:06:8c:e8:08:82:eb:e1:6a:a8:9a:7e:6e:27:a8:
         8e:47:7d:65:76:73:62:0b:3a:59:07:f2:32:e8:02:62:71:d9:
         2a:63:d1:f6:3c:2c:bd:1a:e1:76:19:c5:d1:17:cc:09:0f:16:
         66:fb:ca:49:52:38:80:4b:96:73:54:ac:2d:3c:58:11:f9:18:
         bd:14:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:46 2024 by rpki-client on console-ams.rpki-client.org