Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/323830343a333561343a3a2f33322d3438203d3e20323636323938.roa
File:                     323830343a333561343a3a2f33322d3438203d3e20323636323938.roa (raw, json)
Hash identifier:          ETpxKZnbblPuvqtbbEo6VJ1XA5IjqivWzDmUXSNG6tM=
Subject key identifier:   98:5F:5F:33:63:2D:0F:A1:71:EF:A0:CE:F7:FD:C9:31:F3:93:81:AF
Certificate issuer:       /CN=2129B6338FC6405D66B55C1607DDA84907C08B48
Certificate serial:       113F54CBA81E4D208E40BC5481BFB47BB2093346
Authority key identifier: 21:29:B6:33:8F:C6:40:5D:66:B5:5C:16:07:DD:A8:49:07:C0:8B:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2129B6338FC6405D66B55C1607DDA84907C08B48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/323830343a333561343a3a2f33322d3438203d3e20323636323938.roa
Signing time:             Thu 19 Sep 2024 13:23:58 +0000
ROA not before:           Thu 19 Sep 2024 13:18:58 +0000
ROA not after:            Thu 18 Sep 2025 13:23:58 +0000
asID:                     266298
IP address blocks:        2804:35a4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/2129B6338FC6405D66B55C1607DDA84907C08B48.crl
                          rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/2129B6338FC6405D66B55C1607DDA84907C08B48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2129B6338FC6405D66B55C1607DDA84907C08B48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3f:54:cb:a8:1e:4d:20:8e:40:bc:54:81:bf:b4:7b:b2:09:33:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2129B6338FC6405D66B55C1607DDA84907C08B48
        Validity
            Not Before: Sep 19 13:18:58 2024 GMT
            Not After : Sep 18 13:23:58 2025 GMT
        Subject: CN=985F5F33632D0FA171EFA0CEF7FDC931F39381AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:a2:af:8c:53:f5:1a:9b:e4:40:c8:8a:35:
                    db:60:63:33:2f:a6:8b:71:8c:fe:f0:d8:ca:aa:e4:
                    f7:d0:3e:59:27:5f:1a:f4:63:34:af:ec:64:77:51:
                    b0:eb:e1:23:c1:6c:af:be:05:b0:cd:7f:2e:f5:c1:
                    80:69:21:f2:aa:3e:41:80:9a:1b:3e:9e:5b:ed:6a:
                    a9:d3:3d:7c:2e:17:ba:72:06:aa:2a:60:d8:d5:26:
                    32:8c:4e:1b:ba:ba:12:25:79:00:1e:78:05:3a:9d:
                    1b:fa:de:a7:c9:ee:af:7e:db:0a:6e:97:5d:1a:6f:
                    bc:79:9a:eb:39:36:26:0a:1f:c1:07:0a:0c:28:6d:
                    32:5e:bb:5f:e2:8e:c1:5d:e0:a1:10:18:c7:e1:0d:
                    9c:2f:dd:3d:49:a3:e6:79:b3:85:a6:8f:38:99:ab:
                    b7:16:37:99:4a:c8:82:ee:f6:07:86:7e:fa:13:b3:
                    e8:a9:12:1a:4f:51:16:dd:1d:66:40:0e:ea:eb:9d:
                    23:0a:87:38:13:9b:e0:5f:77:13:57:4c:ee:21:a0:
                    50:08:40:71:c5:af:29:24:8a:3b:50:21:9b:a6:5e:
                    54:8b:7d:50:4c:39:8b:2f:25:7d:53:51:55:61:24:
                    d9:60:f6:79:c6:aa:39:98:66:d2:73:2e:83:cf:71:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:5F:33:63:2D:0F:A1:71:EF:A0:CE:F7:FD:C9:31:F3:93:81:AF
            X509v3 Authority Key Identifier:
                keyid:21:29:B6:33:8F:C6:40:5D:66:B5:5C:16:07:DD:A8:49:07:C0:8B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/2129B6338FC6405D66B55C1607DDA84907C08B48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2129B6338FC6405D66B55C1607DDA84907C08B48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/323830343a333561343a3a2f33322d3438203d3e20323636323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:fc:44:6a:66:8d:42:da:16:05:3c:51:7f:7a:23:ab:dd:
         d8:e2:37:b5:b0:b2:ef:3b:c0:b9:06:e7:b0:57:dc:c9:e5:f4:
         16:26:4c:74:d9:b3:16:f7:69:8d:c7:c2:44:47:cb:40:b9:2a:
         80:05:25:54:b2:15:88:f2:a7:7d:95:63:ff:8c:66:9d:2b:ba:
         56:4c:e8:41:4d:02:66:d6:c3:e9:8c:4b:ec:04:33:5a:d0:b0:
         b1:dc:35:7e:c0:43:a7:a2:3a:7d:52:e8:29:5d:0f:3b:b3:4c:
         ef:e2:b1:40:30:b2:85:4c:de:14:48:a9:6b:e7:d4:1f:d5:39:
         c2:17:ba:75:59:99:4b:e2:b9:7f:c2:52:cd:68:89:08:f8:7f:
         3d:b6:99:2a:9b:f1:b7:28:13:b4:19:80:11:82:89:20:14:d3:
         1d:ff:75:9f:a8:ad:20:d0:f7:11:1c:06:a8:04:fb:f1:f9:23:
         6f:3b:1c:f0:53:d4:5c:03:b5:af:7c:dd:61:13:ec:b9:49:26:
         de:85:24:f1:d2:9d:f2:fc:fc:e7:76:5a:f0:95:0d:7a:65:61:
         41:5d:3e:6c:a2:b5:34:12:32:2e:95:74:a4:97:6d:02:21:22:
         37:8e:77:c2:bd:af:e9:35:51:31:6b:34:a7:38:da:b5:5d:b9:
         96:2c:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:12 2024 by rpki-client on console-fra.rpki-client.org