Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a383030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a383030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          DKJ/VWvI2359MJ/SDgZJpMxjC4iq0dliFrVRtxoxoME=
Subject key identifier:   5D:B9:A7:83:8D:67:82:B4:17:04:F7:7E:D7:75:51:32:04:3B:11:3D
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       62EEA0E0CCA03764364574EDB5D0FB3C2DC8A723
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a383030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:09:40 +0000
ROA not before:           Thu 14 Nov 2024 15:04:40 +0000
ROA not after:            Thu 13 Nov 2025 15:09:40 +0000
asID:                     262585
IP address blocks:        2804:8f70:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:a0:e0:cc:a0:37:64:36:45:74:ed:b5:d0:fb:3c:2d:c8:a7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:04:40 2024 GMT
            Not After : Nov 13 15:09:40 2025 GMT
        Subject: CN=5DB9A7838D6782B41704F77ED7755132043B113D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:77:82:06:ab:ed:25:bf:ea:0a:3f:93:09:
                    93:9c:0a:c5:08:e7:79:f9:23:24:c9:ce:3c:ad:ea:
                    c3:02:85:11:6f:ee:1f:0f:15:32:51:c3:bb:dc:87:
                    50:eb:af:49:ab:8f:0f:c9:b7:0f:36:ca:56:f2:79:
                    2f:ea:c0:53:44:e5:ae:03:4b:ea:5c:3e:d5:a5:95:
                    ad:86:e5:cc:f6:68:3e:69:6b:2a:53:21:fe:36:b3:
                    0e:fa:a6:c5:de:c2:20:47:88:b2:60:9b:cf:74:70:
                    6a:12:e3:98:d6:43:b7:29:8f:15:b6:19:a4:2c:3d:
                    04:99:69:50:8d:31:0e:c4:1e:25:dc:49:53:f2:31:
                    44:c5:a5:d5:3f:9f:36:b8:86:ca:cc:a7:44:e9:45:
                    05:ed:4b:a2:fb:3f:a1:04:71:54:22:6c:a4:44:2f:
                    cb:f3:88:13:15:4b:fe:d3:e2:7e:2a:09:25:e4:a9:
                    ba:98:21:de:b0:60:6e:aa:9e:18:14:56:ed:e2:e5:
                    86:00:93:46:24:25:e0:3a:85:35:e2:a2:40:d0:03:
                    3a:72:b1:02:19:7b:6d:1b:31:e6:50:b2:12:44:a3:
                    19:ff:ca:77:ef:58:cc:17:9f:9b:2e:05:67:01:3a:
                    57:ff:59:3f:35:15:e2:11:84:0a:30:24:68:90:1b:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:A7:83:8D:67:82:B4:17:04:F7:7E:D7:75:51:32:04:3B:11:3D
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a383030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:1e:80:06:ab:86:ff:cd:2d:a3:6e:78:f5:27:85:ef:c4:
         a9:e1:7c:2c:fd:38:79:c3:fc:33:41:e4:69:82:7d:c5:7e:7d:
         f2:bc:55:60:8c:20:c2:08:e6:23:6f:f3:ad:46:b6:33:60:a9:
         5d:fb:9f:0b:d2:47:6b:98:e2:e2:34:21:be:a6:9c:32:ec:9f:
         ef:7c:84:a9:9f:fc:d0:10:6b:22:43:d0:03:95:8e:43:36:ef:
         49:e4:6d:5b:a5:67:ca:09:f9:fe:14:b5:e6:f7:96:12:47:35:
         cc:ed:1d:ac:a9:f7:38:72:07:bb:cd:02:0a:87:43:77:89:4f:
         44:cb:55:43:4d:85:92:23:84:e6:a9:cf:be:38:11:9b:1b:94:
         e8:ed:73:b6:df:3d:05:5a:f4:91:7b:36:06:d9:08:2d:a7:8b:
         ab:b6:b8:f0:9d:69:08:13:22:de:92:bc:99:18:5d:52:88:8e:
         a9:e9:3d:e4:a0:7e:d1:91:79:d7:5e:47:48:ba:4a:74:b3:c7:
         7a:d8:f9:d2:f1:dd:56:e1:91:8d:78:e9:6c:9d:d6:38:86:3f:
         ae:e3:35:20:20:c8:75:32:41:43:31:47:46:d9:99:ab:93:be:
         00:6b:f9:bf:83:86:47:d7:4d:d0:cb:f9:fd:97:33:53:e4:c5:
         20:a6:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:55 2024 by rpki-client on console-fra.rpki-client.org