Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/323830343a353036343a3a2f33322d3438203d3e20323638333836.roa
File:                     323830343a353036343a3a2f33322d3438203d3e20323638333836.roa (raw, json)
Hash identifier:          umjPLm3aKQc21Mewo1LoN/iHfx9uvMOc4dd982JnISA=
Subject key identifier:   F4:E1:AD:53:10:66:94:B5:3F:C1:F6:7F:03:BA:9F:9C:DE:E0:EC:CD
Certificate issuer:       /CN=B09DCED142BB7E79D10526DD0A21AC6C61E65A9E
Certificate serial:       6B3D102B1904870CBD36FA84F1DE3B3DB9D9F54A
Authority key identifier: B0:9D:CE:D1:42:BB:7E:79:D1:05:26:DD:0A:21:AC:6C:61:E6:5A:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/323830343a353036343a3a2f33322d3438203d3e20323638333836.roa
Signing time:             Wed 05 Jun 2024 18:56:12 +0000
ROA not before:           Wed 05 Jun 2024 18:51:12 +0000
ROA not after:            Wed 04 Jun 2025 18:56:12 +0000
asID:                     268386
IP address blocks:        2804:5064::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.crl
                          rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3d:10:2b:19:04:87:0c:bd:36:fa:84:f1:de:3b:3d:b9:d9:f5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09DCED142BB7E79D10526DD0A21AC6C61E65A9E
        Validity
            Not Before: Jun  5 18:51:12 2024 GMT
            Not After : Jun  4 18:56:12 2025 GMT
        Subject: CN=F4E1AD53106694B53FC1F67F03BA9F9CDEE0ECCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:9e:c7:65:82:46:2a:c0:3b:cb:81:d0:87:
                    ef:c1:c9:2f:55:d5:9f:f5:ad:0b:26:d5:6a:90:0f:
                    4f:51:ef:c9:eb:70:b3:9a:9a:52:58:53:f8:47:51:
                    e2:a1:94:e1:7f:7e:c5:d1:45:84:9e:80:68:5e:81:
                    eb:78:35:59:7c:42:d1:b4:58:a7:4e:58:60:ed:bf:
                    cc:bd:f0:b0:07:f8:5e:f4:1b:d3:93:c2:9d:35:db:
                    2f:0c:29:55:e3:5f:48:40:7b:fe:f6:59:7b:98:69:
                    7c:39:90:3b:bf:ee:ad:f9:f2:c5:85:bd:ed:57:2e:
                    9d:68:3d:9e:36:fd:25:a7:18:92:e2:4b:03:4a:a0:
                    11:7b:f9:16:fa:90:a6:99:ec:57:96:c3:69:18:1f:
                    64:2e:b1:02:73:65:c6:22:b1:af:d3:bd:31:33:85:
                    64:db:96:b3:64:54:e4:83:09:6d:23:08:9a:51:c0:
                    5b:e5:fc:49:e0:43:93:e1:26:24:41:e0:07:c9:df:
                    64:64:27:74:15:11:1a:8f:7a:41:ab:85:d2:9a:f8:
                    48:c3:cf:d3:66:c2:99:13:1e:13:e6:8e:21:bf:f7:
                    90:4e:c4:c5:cb:f6:4e:34:e6:a6:d3:83:d0:1f:91:
                    c2:c0:16:90:05:ca:06:35:84:0d:de:86:39:0e:af:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E1:AD:53:10:66:94:B5:3F:C1:F6:7F:03:BA:9F:9C:DE:E0:EC:CD
            X509v3 Authority Key Identifier:
                keyid:B0:9D:CE:D1:42:BB:7E:79:D1:05:26:DD:0A:21:AC:6C:61:E6:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/323830343a353036343a3a2f33322d3438203d3e20323638333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5064::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:e6:2e:e9:2a:1a:cc:6f:7b:cc:9d:8b:d8:16:35:f6:da:
         f1:7d:10:b8:6e:91:ec:21:e1:19:6c:73:0d:1b:ee:e0:a8:ce:
         b7:c2:32:ca:af:e0:e9:fc:9b:bf:c0:0f:2f:9a:11:09:05:8f:
         4b:51:d6:61:03:83:a1:6a:81:f2:23:dd:19:71:54:32:75:a9:
         e3:b6:69:6e:03:9a:60:ae:d0:14:10:43:59:ba:75:e4:37:d5:
         5a:5a:8a:f7:0b:07:87:09:9e:66:d9:4b:90:a9:5a:fc:f5:57:
         66:64:6a:dc:d0:4e:39:c8:26:51:f2:91:52:cc:41:43:e8:c5:
         31:3d:6d:3c:d0:22:66:3a:62:48:2e:bc:3d:15:6b:f4:17:ec:
         fe:b3:b2:e8:e1:cd:ff:7f:4d:c2:a6:3d:02:f6:8f:8d:24:56:
         46:34:f0:a7:5f:2b:a7:f2:5c:8d:83:d9:bb:8f:3f:7e:4b:0a:
         02:f0:62:a4:ef:82:18:97:8f:e6:95:64:1b:82:46:cf:72:5b:
         63:ed:a5:36:f9:e6:45:12:cc:e5:93:1c:19:0e:21:3a:df:b8:
         33:bb:81:a1:36:65:c2:98:19:9a:3c:b2:31:ba:69:3f:28:14:
         34:66:55:88:e7:79:65:71:4c:05:ba:90:55:c4:ff:52:72:59:
         7a:df:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:59 2024 by rpki-client on console-fra.rpki-client.org