Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa
File:                     323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa (raw, json)
Hash identifier:          KGWaSNK43AifoX2EUSzNgOQQmobXbkQZ7oENLu+q9d8=
Subject key identifier:   A7:FB:83:03:01:AE:2C:8A:75:BD:F3:DE:91:A6:28:4D:D8:FC:3A:E1
Certificate issuer:       /CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
Certificate serial:       1B188D1FE8B13305013A30C87D39E65B57EC32B2
Authority key identifier: 7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa
Signing time:             Fri 06 Sep 2024 16:53:57 +0000
ROA not before:           Fri 06 Sep 2024 16:48:57 +0000
ROA not after:            Fri 05 Sep 2025 16:53:57 +0000
asID:                     273497
IP address blocks:        2804:8f8c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.crl
                          rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:18:8d:1f:e8:b1:33:05:01:3a:30:c8:7d:39:e6:5b:57:ec:32:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
        Validity
            Not Before: Sep  6 16:48:57 2024 GMT
            Not After : Sep  5 16:53:57 2025 GMT
        Subject: CN=A7FB830301AE2C8A75BDF3DE91A6284DD8FC3AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:f9:75:88:75:36:78:2d:c8:a1:4c:9e:30:
                    52:17:8e:4b:2e:36:7b:b0:e4:5c:e2:c3:1f:ef:26:
                    9e:3c:b0:60:b7:c0:fc:09:82:8f:13:23:f5:f6:dc:
                    fa:cf:75:b6:bb:8a:48:24:38:18:94:ef:7e:46:b3:
                    9c:01:68:a9:0e:08:13:40:56:14:85:3a:ba:63:70:
                    0d:2e:15:5f:f5:e2:00:8a:e0:b9:f7:c9:26:63:d2:
                    30:72:82:63:09:1a:e1:b5:0d:b0:17:88:1d:5d:5b:
                    21:df:90:49:24:5d:52:1d:77:b5:df:b6:bf:76:34:
                    ed:23:78:71:e1:ad:cd:16:14:3d:ad:d2:55:e4:a2:
                    c7:d9:8c:66:dc:7f:73:21:d2:f8:f8:2c:67:70:9a:
                    4f:0b:c0:9e:98:66:75:dd:98:ff:0b:c0:69:fb:f5:
                    a1:b5:23:ee:26:51:15:d3:2b:8d:29:a4:1f:6d:47:
                    0a:30:40:65:85:b1:d3:61:53:ee:27:99:04:18:01:
                    2c:3b:47:36:63:c8:d4:a6:2c:a3:67:b4:41:1d:c3:
                    9a:84:74:fb:6d:b1:6c:ae:e6:90:60:a3:76:36:a3:
                    88:31:35:43:d0:d3:dd:8f:74:7b:d3:f1:02:95:4d:
                    01:85:3a:00:f5:56:80:c4:a3:08:b7:d8:17:b9:66:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FB:83:03:01:AE:2C:8A:75:BD:F3:DE:91:A6:28:4D:D8:FC:3A:E1
            X509v3 Authority Key Identifier:
                keyid:7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f8c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:f9:58:47:8e:c9:12:c1:76:fd:35:48:99:65:df:03:e3:e4:
         b3:9a:75:7c:a1:79:4c:eb:9d:60:6b:3f:1c:5f:50:2f:d6:ac:
         7e:6e:1c:a9:c6:4c:3d:3f:60:0a:3b:ed:a2:d3:18:ed:ae:56:
         c3:28:da:dc:e1:d0:b1:2b:b0:dd:3b:f0:34:78:bd:fb:06:a6:
         27:29:af:34:78:bf:b4:b1:43:69:ee:1f:f0:ce:24:57:03:fe:
         d9:01:c8:29:02:e8:ab:7d:2b:d2:65:75:9b:3d:de:f3:80:21:
         89:fd:ea:aa:b2:c1:39:23:b0:bf:89:05:cc:ab:28:d0:3e:ac:
         18:27:1a:6b:e8:0e:39:88:25:99:dd:9c:ca:f0:5b:0d:8e:a2:
         5a:09:65:f7:5a:1c:da:33:ac:e5:db:d4:a3:a3:a4:b7:89:24:
         34:e4:f6:46:e4:75:eb:89:1c:40:09:99:6d:fd:23:ea:df:57:
         bd:c2:4c:99:ae:f2:e4:f7:9f:0d:2f:66:1c:78:31:1e:26:97:
         7f:2e:95:b9:be:db:48:db:ad:a6:46:e0:c6:df:00:42:35:d7:
         e2:39:48:9d:d1:52:fc:73:09:76:9f:fa:61:2a:e0:99:e7:7f:
         f2:ca:c0:be:fe:66:12:9a:d1:45:57:fd:32:99:02:20:b1:ad:
         48:55:34:0c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGxiNH+ixMwUBOjDIfTnmW1fsMrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2OEI0QTVDQjY0Q0NCMTkzMkUzOEI1RjIyQzA1RkYw
REQxM0ZDMzAeFw0yNDA5MDYxNjQ4NTdaFw0yNTA5MDUxNjUzNTdaMDMxMTAvBgNV
BAMTKEE3RkI4MzAzMDFBRTJDOEE3NUJERjNERTkxQTYyODRERDhGQzNBRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6U/l1iHU2eC3IoUyeMFIXjksu
Nnuw5Fziwx/vJp48sGC3wPwJgo8TI/X23PrPdba7ikgkOBiU735Gs5wBaKkOCBNA
VhSFOrpjcA0uFV/14gCK4Ln3ySZj0jBygmMJGuG1DbAXiB1dWyHfkEkkXVIdd7Xf
tr92NO0jeHHhrc0WFD2t0lXkosfZjGbcf3Mh0vj4LGdwmk8LwJ6YZnXdmP8LwGn7
9aG1I+4mURXTK40ppB9tRwowQGWFsdNhU+4nmQQYASw7RzZjyNSmLKNntEEdw5qE
dPttsWyu5pBgo3Y2o4gxNUPQ092PdHvT8QKVTQGFOgD1VoDEowi32Be5ZijRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUp/uDAwGuLIp1vfPekaYoTdj8OuEwHwYDVR0j
BBgwFoAUfWi0pctkzLGTLji18iwF/w3RP8MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FnQ05SS25hNWExOFVyNWRVclBlR2phaUR1djZxUTg0YmRpdlE1ZTJz
YnQvMC83RDY4QjRBNUNCNjRDQ0IxOTMyRTM4QjVGMjJDMDVGRjBERDEzRkMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENjhCNEE1Q0I2NENDQjE5
MzJFMzhCNUYyMkMwNUZGMEREMTNGQzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhZ0NOUktuYTVhMThVcjVkVXJQZUdqYWlEdXY2cVE4NGJkaXZRNWUyc2J0LzAv
MzIzODMwMzQzYTM4NjYzODYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM0MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEj4zAMA0GCSqGSIb3DQEBCwUA
A4IBAQA2+VhHjskSwXb9NUiZZd8D4+SzmnV8oXlM651gaz8cX1Av1qx+bhypxkw9
P2AKO+2i0xjtrlbDKNrc4dCxK7DdO/A0eL37BqYnKa80eL+0sUNp7h/wziRXA/7Z
AcgpAuirfSvSZXWbPd7zgCGJ/eqqssE5I7C/iQXMqyjQPqwYJxpr6A45iCWZ3ZzK
8FsNjqJaCWX3WhzaM6zl29Sjo6S3iSQ05PZG5HXriRxACZlt/SPq31e9wkyZrvLk
958NL2YceDEeJpd/LpW5vttI262mRuDG3wBCNdfiOUid0VL8cwl2n/phKuCZ53/y
ysC+/mYSmtFFV/0ymQIgsa1IVTQM
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org