Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/323830343a313738383a3a2f33322d313238203d3e20323633313533.roa
File:                     323830343a313738383a3a2f33322d313238203d3e20323633313533.roa (raw, json)
Hash identifier:          5Gdz5TFatWgMCdUPh00b+Q9iJl7Nlex2D1e50IPlM2s=
Subject key identifier:   81:9A:CE:5C:89:A0:D1:F8:86:32:DF:DC:7B:D6:E9:2B:26:03:F0:E0
Certificate issuer:       /CN=E9C93793467B2B71AEA85BE267FDA6B699220CB0
Certificate serial:       36C8FE31A6CD9E60FF0686C91B792B16B05E7846
Authority key identifier: E9:C9:37:93:46:7B:2B:71:AE:A8:5B:E2:67:FD:A6:B6:99:22:0C:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/323830343a313738383a3a2f33322d313238203d3e20323633313533.roa
Signing time:             Thu 04 Apr 2024 19:46:53 +0000
ROA not before:           Thu 04 Apr 2024 19:41:53 +0000
ROA not after:            Thu 03 Apr 2025 19:46:53 +0000
asID:                     263153
IP address blocks:        2804:1788::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.crl
                          rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:fe:31:a6:cd:9e:60:ff:06:86:c9:1b:79:2b:16:b0:5e:78:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9C93793467B2B71AEA85BE267FDA6B699220CB0
        Validity
            Not Before: Apr  4 19:41:53 2024 GMT
            Not After : Apr  3 19:46:53 2025 GMT
        Subject: CN=819ACE5C89A0D1F88632DFDC7BD6E92B2603F0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:8d:35:b5:bb:ef:69:60:2a:71:ae:83:37:
                    ce:bc:9f:f1:eb:f0:03:dc:18:6e:33:65:bc:32:47:
                    01:7e:83:20:ab:37:61:eb:9f:a0:7e:34:8b:1a:c3:
                    82:27:db:a2:6b:dd:af:70:30:3a:5a:33:4d:55:b3:
                    40:51:90:15:0e:78:b0:7a:f1:5d:f4:4c:8c:95:da:
                    6b:59:20:b1:5e:63:73:5b:79:42:f9:45:f1:4f:34:
                    9c:94:0c:18:14:03:12:0f:42:48:7e:4d:51:7d:4d:
                    d8:b9:cc:b3:4b:6c:6a:32:91:d7:95:2e:ac:de:20:
                    c7:c8:9b:84:87:6f:9c:05:1a:2a:05:2f:d0:b1:0c:
                    b3:d7:06:31:8b:94:7d:51:6a:2e:ca:cd:00:7d:36:
                    b0:da:bd:ef:15:5c:13:df:97:dc:30:3b:7a:31:d0:
                    69:1f:65:ba:75:79:99:2f:bf:c4:55:d2:48:50:cb:
                    60:9e:c0:44:cd:5a:b9:90:2d:75:61:dc:2a:77:8b:
                    8b:18:1a:0f:2f:ee:5f:0f:32:72:e4:ef:cc:d6:ae:
                    1b:3b:17:18:2c:b8:0c:f3:98:7c:54:97:85:ee:e6:
                    f4:35:73:6a:a7:92:f4:be:9f:e1:71:df:72:e4:ec:
                    6d:1e:26:de:f9:1d:77:ef:8d:d5:8e:15:82:eb:cd:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9A:CE:5C:89:A0:D1:F8:86:32:DF:DC:7B:D6:E9:2B:26:03:F0:E0
            X509v3 Authority Key Identifier:
                keyid:E9:C9:37:93:46:7B:2B:71:AE:A8:5B:E2:67:FD:A6:B6:99:22:0C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/323830343a313738383a3a2f33322d313238203d3e20323633313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1788::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:1b:e5:04:33:c8:9a:e6:05:7f:54:59:c2:64:2c:6d:69:
         31:c4:0f:27:29:d5:1d:f7:44:9c:ab:c4:d7:e3:2e:e5:c4:c7:
         f6:03:eb:40:e3:f6:5e:8b:d9:40:95:b7:3e:35:13:38:17:54:
         63:e9:63:17:07:00:6c:51:89:0f:76:70:08:c9:f5:63:02:96:
         22:5e:f6:c0:99:ba:76:1a:17:df:86:15:f1:15:fe:a7:81:a7:
         66:a7:95:9f:56:74:5b:c8:91:19:f8:50:f6:26:06:b7:2d:f9:
         01:92:79:42:30:4a:13:16:10:81:0c:ee:8a:d2:d2:1d:62:b3:
         44:9b:04:15:1e:0c:9b:80:28:07:2c:a9:8a:ca:53:4a:8e:8c:
         d8:27:c5:17:d9:2f:e8:8c:82:e9:19:d2:bb:1a:8b:6c:f2:17:
         97:4a:8b:25:76:26:8c:a2:92:84:7a:04:51:f7:55:07:3f:63:
         ce:21:3f:0a:ef:e7:e8:54:cc:5a:28:ef:b5:0b:ca:a2:15:25:
         53:97:24:f3:d7:26:40:fe:6a:8e:4c:60:f3:83:13:34:76:35:
         aa:33:43:74:db:73:73:c5:28:78:d6:f4:9d:25:ac:52:02:56:
         7a:6f:13:81:fc:8c:09:dc:16:c6:0f:8d:91:f1:e9:20:09:a6:
         da:a8:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:06 2024 by rpki-client on console-ams.rpki-client.org