Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/323830343a353537343a3a2f33322d3332203d3e20323637393336.roa
File:                     323830343a353537343a3a2f33322d3332203d3e20323637393336.roa (raw, json)
Hash identifier:          ovqgkj++H8sghpmIgY0RvDARmYfsteGHCFnongc+CGg=
Subject key identifier:   C6:CC:44:5B:19:0B:A3:B6:96:65:26:DD:A6:DA:0F:B6:EA:B9:D8:AC
Certificate issuer:       /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial:       71659386B0200308E0C2631B4ED8F5993E42F8F1
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/323830343a353537343a3a2f33322d3332203d3e20323637393336.roa
Signing time:             Thu 04 Apr 2024 09:33:03 +0000
ROA not before:           Thu 04 Apr 2024 09:28:03 +0000
ROA not after:            Thu 03 Apr 2025 09:33:03 +0000
asID:                     267936
IP address blocks:        2804:5574::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl
                          rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:93:86:b0:20:03:08:e0:c2:63:1b:4e:d8:f5:99:3e:42:f8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Validity
            Not Before: Apr  4 09:28:03 2024 GMT
            Not After : Apr  3 09:33:03 2025 GMT
        Subject: CN=C6CC445B190BA3B6966526DDA6DA0FB6EAB9D8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:bf:90:f7:f4:b7:2c:46:46:23:49:ff:e4:
                    7f:be:b6:40:d8:68:34:41:2b:a0:f5:a9:05:4a:00:
                    e8:76:f3:a3:d2:d1:11:6c:84:86:98:79:a4:5c:73:
                    00:92:7d:dc:79:6a:a9:ae:fa:0d:76:db:8e:9a:1c:
                    dd:ff:af:82:d4:46:a1:90:01:b8:c8:a0:6d:66:9f:
                    d6:cd:f0:08:3c:c9:f7:eb:5f:25:0f:63:80:4b:31:
                    da:4f:80:9a:e1:51:17:fd:c4:e7:f6:d6:6e:0b:ad:
                    98:1f:c3:5b:78:e1:02:60:39:2b:e5:43:0c:81:59:
                    3d:84:6a:39:a4:08:13:02:46:7a:a4:20:f6:03:f2:
                    19:f8:ea:8f:6a:cb:0e:41:c5:61:c5:c5:e9:00:14:
                    cb:c5:54:49:ac:c4:b4:b1:47:66:a0:9d:3d:64:95:
                    fc:a3:c2:5a:96:0f:3d:f5:d0:35:69:05:f8:12:68:
                    59:16:60:26:d2:5c:52:d0:7f:d6:20:e4:cc:6b:86:
                    02:51:e1:3f:11:5a:3a:38:9e:05:99:52:75:21:58:
                    fc:fd:6c:63:6c:26:54:31:a2:b1:48:4a:cb:6c:9d:
                    b0:5f:50:67:e1:ac:b7:0a:69:55:d6:b8:58:3c:8c:
                    9b:04:f8:46:58:a8:4f:a9:c6:e4:c4:04:76:02:9e:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:44:5B:19:0B:A3:B6:96:65:26:DD:A6:DA:0F:B6:EA:B9:D8:AC
            X509v3 Authority Key Identifier:
                keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/323830343a353537343a3a2f33322d3332203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5574::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:c2:80:73:e3:ff:33:84:d9:53:b1:72:32:3b:bf:12:89:a0:
         36:42:3f:47:bd:32:3c:36:a1:6e:7e:8f:05:d5:f8:f5:c7:3c:
         a1:a9:cf:27:16:fa:93:86:be:4e:10:86:5d:83:18:63:e3:5b:
         0e:b2:0a:3d:a8:ad:c2:ec:98:60:ff:74:93:e1:aa:a4:d5:9f:
         21:48:b3:4d:37:ad:89:99:bb:21:09:7a:3f:da:ae:fb:e2:c4:
         2c:9d:cd:b2:5c:44:52:d5:62:a9:e0:f3:9d:1a:97:ab:29:19:
         1f:4f:32:46:ea:49:7e:ba:65:05:85:69:76:34:4d:9d:ad:99:
         e2:be:3c:51:fd:d3:1a:8a:85:5a:a7:fb:aa:b7:44:95:c7:f9:
         7d:78:07:32:15:57:02:8d:0e:38:50:f1:6d:cb:b5:5f:06:35:
         a6:01:84:df:08:52:fd:c8:bb:04:54:af:4a:3d:eb:01:86:37:
         85:3d:82:80:6d:5c:06:b3:40:ca:2f:dc:97:38:23:16:cf:62:
         f8:4c:6d:90:b9:fd:16:43:fa:97:05:05:b4:07:22:5d:09:d3:
         47:7b:e9:7f:be:e9:1f:7d:d9:bc:0b:f2:a1:35:b0:68:3d:df:
         af:4a:4e:60:e0:27:53:da:55:bc:1a:2f:b0:33:71:3d:34:a2:
         b4:fa:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:32 2024 by rpki-client on console-ams.rpki-client.org