Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          NRFdwUsLbeEu1WqUa0wkslrMSF6NyB1gnSU4AHk7ZHM=
Subject key identifier:   89:05:9B:45:B2:DA:86:83:54:A4:53:4F:D2:6F:E0:A2:60:4A:B7:02
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       101E13535D756C5F11810C34EE07D5AF07848C66
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:09:45 +0000
ROA not before:           Thu 14 Nov 2024 15:04:45 +0000
ROA not after:            Thu 13 Nov 2025 15:09:45 +0000
asID:                     262585
IP address blocks:        2804:8f70:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1e:13:53:5d:75:6c:5f:11:81:0c:34:ee:07:d5:af:07:84:8c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:04:45 2024 GMT
            Not After : Nov 13 15:09:45 2025 GMT
        Subject: CN=89059B45B2DA868354A4534FD26FE0A2604AB702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a1:e1:b4:17:e4:08:22:5a:30:a6:3e:97:d0:
                    e5:51:02:a7:84:f5:23:ee:c3:b0:32:90:c5:11:77:
                    61:d9:3e:ec:2a:55:0f:ba:c5:96:28:b2:3a:54:31:
                    f0:8b:40:07:1c:8b:6b:b0:cb:cb:1f:87:56:31:e8:
                    4b:17:98:9c:19:67:ce:84:5e:ab:02:5c:87:de:f2:
                    5f:35:ab:95:99:a1:e4:97:55:4c:40:4c:b4:98:06:
                    f6:89:d4:db:36:ff:85:c0:18:80:d7:7d:52:39:92:
                    31:7d:6f:7b:40:51:6c:29:f5:13:06:5e:01:04:02:
                    9a:9e:00:ff:04:be:e5:85:c5:1d:9f:4a:df:75:69:
                    e7:e3:0a:de:7e:13:07:4b:0b:d9:ac:6b:57:8a:78:
                    6c:a8:a8:5d:46:0c:7e:25:7a:1b:06:51:aa:78:03:
                    65:a3:ed:35:54:d8:22:50:5b:6a:0f:e3:b5:0e:38:
                    20:a5:15:51:c7:91:13:b3:7f:c9:36:68:8a:3a:95:
                    37:d7:fb:f9:31:90:38:04:5a:80:e9:1a:6c:6a:4b:
                    bb:0e:90:d6:0c:e2:19:aa:43:8a:8d:74:3d:d7:12:
                    af:75:78:dc:49:33:27:9e:0c:60:44:e4:f5:82:d9:
                    86:89:ce:6e:63:77:e4:b8:bf:fe:0b:b7:63:76:1e:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:05:9B:45:B2:DA:86:83:54:A4:53:4F:D2:6F:E0:A2:60:4A:B7:02
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:ce:09:12:66:1b:53:9a:a1:e0:53:45:35:09:25:06:07:
         0b:86:f3:60:c2:2a:d8:78:a8:1a:08:44:a6:19:31:b2:19:bf:
         c0:62:08:e5:f5:a5:88:90:a9:21:57:3e:e6:aa:2b:18:d1:24:
         58:c9:c1:8b:1e:6b:14:35:7f:bf:68:91:4a:64:af:8c:21:f1:
         74:a1:6a:24:ad:a9:dd:9d:4f:14:a6:c0:67:35:41:90:da:5d:
         75:fe:05:da:82:57:c4:bf:da:44:e9:af:37:d7:95:5c:38:09:
         d8:bc:79:d9:1a:5a:8a:ca:55:14:59:39:7d:d2:18:d8:41:e5:
         ce:81:28:c9:d3:4d:ee:d2:e1:9a:8c:e6:c6:9f:bf:8f:40:07:
         f8:12:48:0c:4f:3b:ba:93:00:58:a5:c9:c3:61:66:cb:93:aa:
         ef:fe:6e:85:f2:d6:3f:4f:7a:c4:41:51:8e:85:4c:68:48:3a:
         dd:48:52:f9:a0:b2:ef:78:39:a5:d4:26:fe:59:4e:9f:30:6b:
         ec:c1:49:f7:d9:73:48:3c:7e:69:1c:21:5a:4b:75:2d:f5:9c:
         09:8c:37:5e:8b:68:63:71:cb:f8:ad:41:98:7c:5b:4b:93:04:
         0c:b5:bd:be:d4:07:fb:52:01:8a:4b:b7:fa:d8:46:ca:51:69:
         2e:57:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:41 2024 by rpki-client on console-ams.rpki-client.org