Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/323830343a356139383a3a2f33322d313237203d3e20323632343339.roa
File:                     323830343a356139383a3a2f33322d313237203d3e20323632343339.roa (raw, json)
Hash identifier:          CJg42BKBQLYkUH0gukMo3ljdqFQuEROWy8MdV2chWiI=
Subject key identifier:   AF:85:2B:2F:11:D1:39:6D:2F:9D:1E:16:E3:22:50:2A:B5:C5:49:45
Certificate issuer:       /CN=37B806BF29E248B54BB5E131FC505AA28CD8E67B
Certificate serial:       478D66A880A5B1D8DBC0A2FFF1382D7ED0D5B35A
Authority key identifier: 37:B8:06:BF:29:E2:48:B5:4B:B5:E1:31:FC:50:5A:A2:8C:D8:E6:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/323830343a356139383a3a2f33322d313237203d3e20323632343339.roa
Signing time:             Thu 04 Apr 2024 20:45:40 +0000
ROA not before:           Thu 04 Apr 2024 20:40:40 +0000
ROA not after:            Thu 03 Apr 2025 20:45:40 +0000
asID:                     262439
IP address blocks:        2804:5a98::/32 maxlen: 127

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.crl
                          rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8d:66:a8:80:a5:b1:d8:db:c0:a2:ff:f1:38:2d:7e:d0:d5:b3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B806BF29E248B54BB5E131FC505AA28CD8E67B
        Validity
            Not Before: Apr  4 20:40:40 2024 GMT
            Not After : Apr  3 20:45:40 2025 GMT
        Subject: CN=AF852B2F11D1396D2F9D1E16E322502AB5C54945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:31:8e:f2:11:7d:5d:79:a2:4f:f8:85:42:27:
                    9a:8c:27:6c:fa:b4:6f:3b:7d:90:38:6e:0f:75:03:
                    72:7e:85:72:dd:0f:d2:15:76:fb:8b:a7:5b:d0:a0:
                    b3:7e:92:98:df:13:15:29:09:96:1a:fa:27:3b:58:
                    94:bd:be:57:3b:af:c9:28:5f:94:c9:4a:45:44:31:
                    b7:46:19:7a:48:78:f9:6a:d0:a2:7e:20:3c:d4:78:
                    c4:cd:fa:b5:ba:56:4f:4b:53:bd:7b:29:48:a2:bd:
                    eb:20:b5:49:c5:f9:b1:7d:3c:76:59:c2:f2:15:db:
                    ad:58:cf:51:1f:c6:d5:fc:f4:bc:e3:df:bc:00:9d:
                    0c:f7:1e:cb:d5:72:18:9a:e0:b9:8a:90:ee:10:f7:
                    0e:49:c3:fb:39:11:8c:bf:a6:68:fe:f2:fa:cb:38:
                    0d:78:e1:e5:f9:85:0e:8d:60:43:32:a2:12:1c:f8:
                    cf:99:c2:d8:01:69:25:fb:a0:67:ce:08:24:6a:c8:
                    3e:09:9b:b8:cf:12:49:ca:a7:12:71:c8:bd:9a:87:
                    cd:3f:d1:91:42:30:e9:0c:65:58:2f:8c:d2:e0:b4:
                    f3:63:c6:b1:a6:4a:3b:5e:01:a2:de:f5:ff:4c:b7:
                    dc:97:fa:e9:8f:72:1a:97:9b:90:9d:91:6e:fc:84:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:2B:2F:11:D1:39:6D:2F:9D:1E:16:E3:22:50:2A:B5:C5:49:45
            X509v3 Authority Key Identifier:
                keyid:37:B8:06:BF:29:E2:48:B5:4B:B5:E1:31:FC:50:5A:A2:8C:D8:E6:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/323830343a356139383a3a2f33322d313237203d3e20323632343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a98::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:8a:a4:41:8e:b3:03:28:c4:22:e2:9e:bf:93:25:87:4b:7b:
         12:03:7e:f7:1d:f9:55:44:e3:ca:9d:5c:fb:4d:19:d9:28:75:
         2b:fd:16:14:74:a0:9f:ed:fe:4c:ed:b1:3d:56:2a:91:1b:5d:
         ab:34:91:87:12:9a:4c:7e:77:aa:bd:5e:61:5c:26:81:cb:4d:
         3b:d7:76:16:1e:e8:37:38:8e:82:6f:2f:64:75:0e:85:15:17:
         92:4f:fd:42:86:b9:35:5e:14:ff:7b:ee:f8:f7:7b:dd:2a:48:
         06:60:c5:6c:1e:70:cb:a6:10:60:60:37:15:d8:71:77:94:57:
         2f:27:0b:04:20:ce:dd:b1:a8:2a:9b:93:e1:e1:62:ee:18:c1:
         fa:43:be:e4:f2:6b:d7:fe:60:de:ea:c7:21:15:93:c4:ef:be:
         fd:28:04:df:a8:63:13:ac:56:75:b9:15:91:cc:45:18:33:bb:
         3a:29:b9:a7:3f:b5:2a:3c:75:e0:ca:f0:67:e1:e3:47:3c:bc:
         12:5b:c7:e8:6c:92:62:8a:09:31:a9:14:10:c0:ca:8d:85:b7:
         6d:2b:2b:bb:40:07:94:16:46:02:25:5b:73:f9:8e:3e:a3:fd:
         c2:bc:af:25:03:49:f7:a4:77:32:7d:51:60:d4:e7:0a:a4:e2:
         4c:f6:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:22 2024 by rpki-client on console-ams.rpki-client.org