Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33332d3333203d3e20323635303836.roa
File:                     323830343a333239343a3a2f33332d3333203d3e20323635303836.roa (raw, json)
Hash identifier:          k1KjFs5jB5XJ9fEIGNpCDVhf9+Pm8lweNe+TUooQ5mk=
Subject key identifier:   1F:66:6C:2D:F4:75:B6:F5:01:D6:18:9E:6A:B4:39:12:BE:50:43:95
Certificate issuer:       /CN=C6D22E709DBC61B10238749E2FE09B4DD11E18C6
Certificate serial:       74B132692B63D8CE1AFAB5310B322C9FF0EAD134
Authority key identifier: C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33332d3333203d3e20323635303836.roa
Signing time:             Tue 09 Apr 2024 18:08:18 +0000
ROA not before:           Tue 09 Apr 2024 18:03:18 +0000
ROA not after:            Tue 08 Apr 2025 18:08:18 +0000
asID:                     265086
IP address blocks:        2804:3294::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.crl
                          rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b1:32:69:2b:63:d8:ce:1a:fa:b5:31:0b:32:2c:9f:f0:ea:d1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D22E709DBC61B10238749E2FE09B4DD11E18C6
        Validity
            Not Before: Apr  9 18:03:18 2024 GMT
            Not After : Apr  8 18:08:18 2025 GMT
        Subject: CN=1F666C2DF475B6F501D6189E6AB43912BE504395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:4b:0c:6a:c1:0e:32:4e:02:20:ec:66:99:
                    19:5a:49:8a:b6:18:a0:4d:6f:00:5e:ed:ee:a5:e5:
                    48:52:bd:c6:aa:02:64:cf:48:0c:a4:ae:c4:21:43:
                    c8:71:98:f8:21:f4:01:9e:38:69:5e:61:4a:2a:ab:
                    2b:2b:0a:92:66:23:bb:55:ec:42:d9:63:b5:d7:bc:
                    21:cd:54:f3:9c:91:e9:51:f1:08:28:65:01:63:da:
                    42:26:2a:98:01:8b:e4:58:77:7b:2d:21:e8:95:ba:
                    1f:c5:ec:8a:50:04:34:75:10:94:61:d3:be:d3:59:
                    cc:56:97:55:01:d3:66:26:68:bd:d4:f4:0f:77:05:
                    93:7a:6d:bb:70:79:ba:c8:ae:7f:a4:f7:a4:b4:45:
                    2e:f4:cf:82:41:42:26:5a:36:59:39:81:16:85:40:
                    3a:b3:b3:25:84:bc:73:1e:32:f3:0d:ac:ef:54:28:
                    50:33:fd:bc:a3:c3:7b:6e:cc:d3:4f:5e:e0:aa:24:
                    c2:57:08:4a:6d:19:81:fc:58:79:42:61:d4:0e:5e:
                    a4:51:6b:4b:07:24:c4:94:05:47:3f:f1:39:d2:a1:
                    ee:ab:31:9d:d5:b7:27:ed:13:79:ee:14:09:ee:26:
                    c7:b1:f0:6c:ce:4e:21:48:02:3d:48:9c:87:fa:b5:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:66:6C:2D:F4:75:B6:F5:01:D6:18:9E:6A:B4:39:12:BE:50:43:95
            X509v3 Authority Key Identifier:
                keyid:C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33332d3333203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3294::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:6b:72:b7:07:96:13:02:98:71:b9:3c:73:18:67:01:f3:21:
         71:ea:64:c7:d7:fe:34:f6:08:73:6a:35:1d:2a:d3:01:83:42:
         d4:13:08:5c:63:a0:30:63:cf:e4:6e:c2:53:62:e6:62:5b:2a:
         19:a9:db:f0:5e:03:91:87:57:95:61:12:d5:67:d1:82:71:8a:
         63:86:70:a5:3f:f6:a1:88:ff:e9:0e:fa:fa:8f:47:0f:81:4a:
         12:28:35:9a:61:8a:2e:bd:52:54:97:91:5e:d7:17:9c:ea:61:
         2f:93:9c:48:c1:4c:62:a7:df:a5:f9:fa:17:a1:70:53:ce:84:
         62:f6:07:47:d3:28:26:dd:95:f6:8f:78:79:ea:07:1c:4a:16:
         66:7a:7f:ce:9a:da:55:b0:95:e4:82:6b:8c:2e:d2:f4:d5:63:
         ce:c9:6a:28:cf:49:6e:c6:af:91:85:4b:01:34:2b:b7:54:23:
         13:4b:19:e3:35:08:24:ec:2e:1d:5f:be:47:a2:17:79:61:87:
         09:47:f3:53:69:fc:74:1a:b9:d3:00:23:61:cf:05:bf:a2:99:
         9c:5f:92:0d:45:c6:9a:40:0e:fb:e5:c6:ed:d3:75:97:e5:ab:
         43:c1:81:03:50:28:99:0e:21:d0:b2:35:33:48:68:f0:aa:7d:
         e1:b6:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org