Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a323633303a3a2f33322d313238203d3e20323634333331.roa
File:                     323830343a323633303a3a2f33322d313238203d3e20323634333331.roa (raw, json)
Hash identifier:          UTRCjV/nvxiJTcFS2zsT+m3qYJlKNJawh5xiR/gk2PQ=
Subject key identifier:   28:D5:A1:BD:05:49:36:18:42:C2:7D:83:39:71:5E:D6:0D:DD:CC:71
Certificate issuer:       /CN=D123858020F0224957058CA805488D517D88F47A
Certificate serial:       7576B3C6256F54C68E29F3D08171DACC62E554B5
Authority key identifier: D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a323633303a3a2f33322d313238203d3e20323634333331.roa
Signing time:             Wed 03 Apr 2024 18:27:40 +0000
ROA not before:           Wed 03 Apr 2024 18:22:40 +0000
ROA not after:            Wed 02 Apr 2025 18:27:40 +0000
asID:                     264331
IP address blocks:        2804:2630::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:76:b3:c6:25:6f:54:c6:8e:29:f3:d0:81:71:da:cc:62:e5:54:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D123858020F0224957058CA805488D517D88F47A
        Validity
            Not Before: Apr  3 18:22:40 2024 GMT
            Not After : Apr  2 18:27:40 2025 GMT
        Subject: CN=28D5A1BD0549361842C27D8339715ED60DDDCC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:23:1d:14:09:1b:7d:3a:b9:a9:02:c3:51:
                    2e:1e:be:16:83:5b:d9:89:b0:87:a3:0c:70:f4:da:
                    62:1c:4e:e2:8c:39:67:c3:e2:40:33:80:f6:e2:64:
                    d0:20:65:ae:4d:49:3e:a9:f5:af:b9:97:ba:a9:e8:
                    40:2c:45:a7:9e:0c:54:1f:63:dc:80:a3:21:18:22:
                    a3:93:31:a8:fa:f5:f5:ef:d4:e7:a1:2f:13:27:65:
                    25:76:db:8a:8c:ed:12:60:4a:3f:d7:65:e6:72:46:
                    4e:d0:ea:55:62:63:08:6c:0e:eb:34:81:3c:d7:23:
                    ec:e0:ef:45:2e:2e:6a:03:e8:03:7b:76:c4:85:36:
                    90:67:bc:8a:f5:00:14:f2:20:07:21:f6:fe:2b:72:
                    9b:13:85:db:b0:41:86:a1:80:81:bd:15:0f:6b:dc:
                    aa:2d:d6:2a:5a:d4:20:c0:db:48:38:87:e4:b9:67:
                    0d:fd:0c:de:49:f9:48:2e:18:d6:2f:30:78:ce:e6:
                    66:58:85:2a:61:e6:19:d8:22:7f:c6:50:be:c0:0c:
                    75:9a:5f:52:fa:48:d0:5c:8c:d8:a8:c1:83:2c:27:
                    82:bb:ff:7c:0e:a6:e1:d3:d4:3b:38:45:f2:89:9d:
                    f5:1c:ce:43:c9:9e:fb:9d:bc:71:ab:ca:8c:00:3f:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:A1:BD:05:49:36:18:42:C2:7D:83:39:71:5E:D6:0D:DD:CC:71
            X509v3 Authority Key Identifier:
                keyid:D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a323633303a3a2f33322d313238203d3e20323634333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2630::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:5c:0d:dd:29:5f:81:95:52:73:aa:5e:b5:d3:30:20:12:
         28:d4:fe:21:f3:29:c9:19:9e:91:0c:08:6b:88:6a:dc:51:7b:
         62:49:0a:8c:b4:1f:81:68:b8:e2:58:90:bb:2a:25:b3:50:14:
         06:ab:bb:dc:1c:76:2c:33:b1:cf:83:9f:b4:c3:90:c9:d8:78:
         0e:f4:0b:e0:77:7f:19:b2:ff:b9:3e:c9:48:8c:ab:5c:46:5a:
         6d:f3:8e:29:ef:06:ca:f3:c8:ee:de:fd:46:cb:6b:4d:78:c8:
         93:85:78:f6:e7:f4:9f:10:86:c5:da:23:c7:8d:41:13:db:4c:
         4a:5e:ec:cc:f5:87:68:66:ba:38:7a:1e:ed:7a:8b:67:d3:c3:
         02:aa:0c:f3:14:e2:89:97:e2:29:92:d1:4a:83:d1:3f:55:69:
         d5:b3:8f:21:f2:06:b5:bc:bf:cd:b6:3e:b6:a3:20:2e:a0:00:
         4d:bc:55:3c:e9:d2:61:e5:8f:88:1d:66:ee:f4:f3:b2:ee:7f:
         97:5b:7e:a4:82:aa:76:f2:78:0e:ff:03:ea:2c:6d:be:e5:88:
         cc:3e:f7:72:87:a9:c9:4d:b9:8d:5f:6c:b6:fe:b0:63:f7:12:
         44:6e:b2:f6:92:7f:ad:4d:c8:ff:db:57:50:5c:a6:62:69:e7:
         da:1f:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:26 2024 by rpki-client on console-ams.rpki-client.org