Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa (raw, json)
Hash identifier:          EFlo7MFpGmlf9Oxn4XfnJQaJMKF6+9FL7NwKs+CYso8=
Subject key identifier:   94:4A:4E:43:87:4C:48:7D:9C:54:6C:0E:F5:F8:30:91:E0:2C:F6:A7
Certificate issuer:       /CN=F9E3F3DF03D3609D44D8796334646E07D709447C
Certificate serial:       5B6AC8B7BB0793644A70FEED1F1CC40EDE9E06C0
Authority key identifier: F9:E3:F3:DF:03:D3:60:9D:44:D8:79:63:34:64:6E:07:D7:09:44:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E3F3DF03D3609D44D8796334646E07D709447C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
Signing time:             Tue 05 Nov 2024 13:34:31 +0000
ROA not before:           Tue 05 Nov 2024 13:29:31 +0000
ROA not after:            Tue 04 Nov 2025 13:34:31 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F9E3F3DF03D3609D44D8796334646E07D709447C.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F9E3F3DF03D3609D44D8796334646E07D709447C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E3F3DF03D3609D44D8796334646E07D709447C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6a:c8:b7:bb:07:93:64:4a:70:fe:ed:1f:1c:c4:0e:de:9e:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E3F3DF03D3609D44D8796334646E07D709447C
        Validity
            Not Before: Nov  5 13:29:31 2024 GMT
            Not After : Nov  4 13:34:31 2025 GMT
        Subject: CN=944A4E43874C487D9C546C0EF5F83091E02CF6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:a3:51:9f:bc:37:1c:f6:6c:6e:f9:25:9e:
                    c7:c8:83:0d:b5:57:ca:a0:be:ae:ff:a9:4a:f8:36:
                    ac:69:c4:35:10:ac:9c:c2:e8:ac:b2:8c:89:21:77:
                    37:4c:7d:e9:11:4f:10:5e:66:fe:51:5c:06:8a:13:
                    d7:89:80:10:bc:17:e3:7d:49:4a:90:60:46:f2:8b:
                    07:77:c2:6d:94:03:c1:33:07:74:d2:c8:72:bd:0f:
                    3e:f4:52:e8:64:ea:c3:59:1f:74:3a:2e:66:f6:30:
                    78:3f:03:97:4f:8a:c3:52:70:60:54:54:06:cf:51:
                    71:5d:a0:f4:b1:3c:79:3c:b1:76:23:96:29:55:1e:
                    47:68:12:53:2a:a4:b4:fe:47:21:87:86:a5:e8:9e:
                    f8:fe:1d:6e:42:86:2f:c4:b5:86:0e:2b:bd:01:c8:
                    b4:59:8d:3d:4e:5c:4d:7b:50:83:c4:32:1a:0e:4a:
                    fc:f6:39:94:23:04:00:4e:b0:7f:19:c3:de:9d:64:
                    2d:d5:41:97:42:cb:ec:47:2f:ce:06:28:7c:8e:07:
                    f1:9c:48:00:d0:64:a1:ca:f4:b4:63:12:a5:ea:63:
                    89:9c:21:98:3e:4b:12:8c:e8:59:62:70:e4:65:52:
                    23:94:fa:89:ad:9f:ef:11:0f:99:af:57:49:cc:e7:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4A:4E:43:87:4C:48:7D:9C:54:6C:0E:F5:F8:30:91:E0:2C:F6:A7
            X509v3 Authority Key Identifier:
                keyid:F9:E3:F3:DF:03:D3:60:9D:44:D8:79:63:34:64:6E:07:D7:09:44:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F9E3F3DF03D3609D44D8796334646E07D709447C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E3F3DF03D3609D44D8796334646E07D709447C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:02:ed:bc:e6:59:b5:01:a8:32:52:84:55:7b:2b:2a:24:
         87:7a:05:ac:3a:ac:2f:19:81:16:5f:1b:73:fa:31:75:aa:15:
         5a:42:7b:d1:f9:7e:5e:3b:cf:6e:25:1d:bc:4a:78:c4:5d:de:
         46:cd:fb:4b:59:5b:27:2d:a7:14:60:6d:42:be:c2:6d:30:b0:
         f6:f2:81:03:3e:c1:b1:12:e5:57:7c:a0:d6:3d:47:18:f9:2d:
         4e:a2:c0:df:8f:d5:3b:4e:d5:a3:8c:b4:55:4c:ac:78:1e:df:
         56:f9:ae:7c:84:99:c2:a3:01:5a:27:70:a9:f9:5e:db:6d:64:
         4c:f6:35:92:cc:aa:3b:7e:26:08:41:38:75:2e:d5:26:b9:b9:
         54:f9:72:e8:76:10:bb:77:f1:05:14:7c:d6:eb:0f:e5:ba:10:
         86:85:db:c2:8c:dc:70:bb:15:c0:4e:df:0a:92:e9:f7:eb:d4:
         56:e7:b6:76:c5:bf:db:66:ca:32:69:d6:4c:11:f9:97:cc:69:
         03:8b:ff:29:23:df:ef:d0:d3:c6:06:e8:de:b4:00:b9:58:bf:
         40:37:6b:8c:79:d5:e5:02:0e:c8:73:e2:bf:e5:94:30:e5:28:
         01:ee:30:3d:b5:bc:07:35:04:a9:e5:bf:d7:8b:7e:c9:24:03:
         c7:be:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:23 2024 by rpki-client on console-ams.rpki-client.org