Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/323830343a3963343a3a2f33322d3434203d3e203533303535.roa
File:                     323830343a3963343a3a2f33322d3434203d3e203533303535.roa (raw, json)
Hash identifier:          02J6Cz8sQaLs93yLq2rpSJpAi7HDG7d5DbEI4VsxBq0=
Subject key identifier:   D3:9F:29:81:D0:AE:0F:62:10:F1:17:AB:99:09:8F:14:ED:85:EE:15
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       221405BBE0F0C228E6B534D5BF52F253CA879043
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/323830343a3963343a3a2f33322d3434203d3e203533303535.roa
Signing time:             Thu 11 Apr 2024 13:50:59 +0000
ROA not before:           Thu 11 Apr 2024 13:45:59 +0000
ROA not after:            Thu 10 Apr 2025 13:50:59 +0000
asID:                     53055
IP address blocks:        2804:9c4::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:14:05:bb:e0:f0:c2:28:e6:b5:34:d5:bf:52:f2:53:ca:87:90:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Apr 11 13:45:59 2024 GMT
            Not After : Apr 10 13:50:59 2025 GMT
        Subject: CN=D39F2981D0AE0F6210F117AB99098F14ED85EE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:93:46:a5:4c:4a:1e:76:8c:99:cb:71:42:
                    3e:22:bf:ef:36:66:ef:5b:02:42:94:6c:54:d4:09:
                    4b:97:d5:b1:d3:63:72:bb:d7:ab:0a:d9:3c:1e:13:
                    30:3a:f0:d3:eb:e3:94:24:f3:e5:5a:93:28:25:8f:
                    6c:ca:b9:95:02:a0:23:e5:85:f7:f1:76:47:d3:54:
                    e5:4f:06:de:17:62:af:a5:32:a2:c8:06:49:e3:99:
                    73:61:c3:b0:61:3c:68:24:e4:09:89:71:38:b8:90:
                    d3:54:91:f2:31:fa:18:4b:27:a7:8f:37:5b:ee:8d:
                    07:61:93:ac:5c:3b:b4:7d:2d:4a:88:96:f4:78:75:
                    fc:a8:a8:ee:05:32:d0:89:37:5a:9e:bf:f9:60:da:
                    8c:4c:14:12:3f:15:10:11:8f:a9:d7:ec:10:08:21:
                    b8:6f:73:76:3f:10:c9:47:16:2c:92:a9:39:f4:ad:
                    a6:f7:4b:be:46:cc:56:04:9a:4e:85:5f:87:34:1f:
                    61:98:7e:a9:ce:9e:51:b4:ec:be:19:26:ad:74:2f:
                    a8:01:e4:4a:04:71:91:6c:a7:30:4e:09:0d:b2:0d:
                    f1:2c:65:d5:61:f7:d3:ce:b0:0f:30:a5:28:ac:e4:
                    b2:d8:03:72:85:2b:0b:47:62:f7:56:cb:ec:3d:1d:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:29:81:D0:AE:0F:62:10:F1:17:AB:99:09:8F:14:ED:85:EE:15
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/323830343a3963343a3a2f33322d3434203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:01:dd:8f:a4:a0:a7:2a:08:a1:51:ba:e4:10:2c:dd:dc:
         aa:e6:96:ac:92:12:4e:38:d3:a6:d5:7c:10:18:97:53:fb:e3:
         43:c1:b2:75:0e:80:e6:87:04:d1:b1:7a:3d:de:c2:d2:9e:08:
         b4:bc:e2:0e:eb:95:4b:d0:0b:71:38:b9:2c:16:7b:ef:df:64:
         7f:f9:d2:c7:23:ad:b1:65:16:16:fc:83:c9:eb:54:9a:72:4a:
         47:15:5d:59:af:e8:4b:80:68:6c:96:85:8f:c3:55:b5:e3:fd:
         ab:2d:24:2e:32:cf:46:54:50:6e:3a:03:58:39:e4:f7:80:67:
         b6:a7:fe:81:bb:91:e5:a0:4b:44:f9:16:b2:8d:ea:d3:43:c0:
         1f:5b:70:24:dc:1d:fe:13:5b:09:f7:21:a7:52:99:65:1f:b2:
         5c:68:da:64:64:dd:5a:93:92:10:da:03:9f:41:b9:9c:6f:bb:
         5b:a2:bd:0b:75:ad:b9:3f:65:24:67:57:4f:f5:1f:e1:d4:ce:
         c8:d3:a9:a6:fc:9a:29:9f:d7:50:09:93:fe:9f:7c:0c:14:1d:
         8d:5d:28:28:9c:13:cd:e1:39:c0:eb:a8:86:e7:73:88:5a:ac:
         8f:84:5e:29:15:cd:f9:c6:a4:50:c0:56:4b:d6:7e:21:92:c7:
         f3:16:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:06 2024 by rpki-client on console-fra.rpki-client.org