Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a3a2f33322d3332203d3e20323733343937.roa
File:                     323830343a386638633a3a2f33322d3332203d3e20323733343937.roa (raw, json)
Hash identifier:          XsXXkJ0s2AzWh5gu2kxk1FAVH3brWKA8BEqZ/I0Pr+g=
Subject key identifier:   A0:E2:94:8F:D6:68:BE:62:DB:71:05:3D:CE:72:DA:1B:0B:29:27:30
Certificate issuer:       /CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
Certificate serial:       60BD88EB9257B13D563CE77B4E95BCC7E364356A
Authority key identifier: 7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a3a2f33322d3332203d3e20323733343937.roa
Signing time:             Fri 06 Sep 2024 16:53:59 +0000
ROA not before:           Fri 06 Sep 2024 16:48:59 +0000
ROA not after:            Fri 05 Sep 2025 16:53:59 +0000
asID:                     273497
IP address blocks:        2804:8f8c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.crl
                          rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bd:88:eb:92:57:b1:3d:56:3c:e7:7b:4e:95:bc:c7:e3:64:35:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
        Validity
            Not Before: Sep  6 16:48:59 2024 GMT
            Not After : Sep  5 16:53:59 2025 GMT
        Subject: CN=A0E2948FD668BE62DB71053DCE72DA1B0B292730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:5a:fc:eb:1f:9c:cf:1b:69:9f:d6:56:d9:
                    c0:56:db:d0:1c:8f:fe:49:15:e0:68:f5:9e:cd:7d:
                    f6:0b:8d:2a:f6:a1:92:a3:d7:bf:37:4b:b5:a1:58:
                    d3:6a:a8:a3:32:9b:dc:2a:61:3a:94:22:23:9f:0d:
                    12:82:29:6b:35:e1:c3:80:4a:43:2f:92:d0:4a:6a:
                    c9:7f:df:e9:f0:63:4a:a7:62:b2:6d:4d:f1:98:c9:
                    c6:a1:5c:1e:1f:31:a5:1a:c0:fd:6b:08:eb:d7:b6:
                    83:c8:f4:7a:27:ee:aa:69:10:10:51:5b:11:16:81:
                    70:28:53:d8:cc:5f:38:0a:10:09:ff:d9:0e:04:f9:
                    33:9a:4a:35:c1:a3:60:29:ed:f6:6d:cb:2f:65:20:
                    f6:b9:57:f8:cf:1c:bf:9a:d4:71:d9:13:ef:5d:20:
                    e2:e3:91:74:be:55:07:31:1e:6b:93:52:2a:82:fb:
                    13:f7:c8:4f:1f:93:19:07:02:e1:13:ac:cd:57:0c:
                    92:b6:89:62:71:67:55:4c:f7:75:b9:81:6e:79:09:
                    c1:cf:9b:6f:71:89:bf:48:7d:72:8d:90:e5:63:ae:
                    d0:8f:ca:e0:4a:c8:a4:2f:02:74:c7:b8:cf:5b:87:
                    ea:38:77:7a:95:e4:a5:6e:a8:c4:07:ae:98:17:a9:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:94:8F:D6:68:BE:62:DB:71:05:3D:CE:72:DA:1B:0B:29:27:30
            X509v3 Authority Key Identifier:
                keyid:7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a3a2f33322d3332203d3e20323733343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:0c:35:25:ec:ef:2a:2f:5e:46:f7:b0:3f:fe:64:64:33:
         39:d8:7a:0b:3a:b7:fd:59:0c:2b:60:ab:c4:99:50:05:c5:e3:
         b0:71:84:d7:93:13:98:ac:11:3b:36:21:9d:1c:2b:39:e2:fe:
         17:7e:06:81:a2:14:ed:5f:d9:0e:bc:fe:19:ba:62:66:d2:23:
         66:50:66:e2:41:f4:d1:bb:dc:f2:e8:a1:bd:b6:2d:d6:d1:d4:
         bf:80:d4:f6:59:5a:b8:30:16:98:54:54:1e:64:a8:d7:89:05:
         4e:9a:90:9f:60:07:78:96:a6:a0:8f:e6:33:80:b4:6f:79:39:
         f9:89:45:83:b2:1d:fd:bc:c9:d0:c4:2e:1e:a2:37:84:18:41:
         65:bc:dd:7b:7d:97:29:82:99:82:1a:53:d7:50:05:dd:2f:6a:
         cb:bb:9d:4f:eb:2b:6f:b1:15:50:c0:f0:a4:9d:05:ec:23:be:
         e6:74:03:43:a5:92:f2:fc:de:ed:d8:c6:94:a2:bb:12:83:80:
         90:8d:4b:eb:0b:90:56:c7:94:de:2f:ef:ba:6d:96:9e:29:39:
         0b:5e:1e:ef:bf:1c:05:a8:22:70:ce:1e:3e:b2:d6:73:a6:42:
         4f:10:34:44:3b:63:9b:69:ff:4e:e6:30:02:8a:59:d2:cf:d9:
         b1:88:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:08 2024 by rpki-client on console-fra.rpki-client.org