Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/323830343a3264303a3a2f33322d313238203d3e203533323330.roa
File:                     323830343a3264303a3a2f33322d313238203d3e203533323330.roa (raw, json)
Hash identifier:          UQDVyhbYQG30ElbFoZv8wEin9HTbuyPJZRmlYIE1Eh8=
Subject key identifier:   A9:17:95:27:6A:D1:3A:D2:25:70:D0:70:1A:C3:88:36:BE:51:CE:AC
Certificate issuer:       /CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
Certificate serial:       212B055498DCAEDC1CF49DAAFD0CB193DCC5CF31
Authority key identifier: 98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/323830343a3264303a3a2f33322d313238203d3e203533323330.roa
Signing time:             Thu 04 Apr 2024 07:22:24 +0000
ROA not before:           Thu 04 Apr 2024 07:17:24 +0000
ROA not after:            Thu 03 Apr 2025 07:22:24 +0000
asID:                     53230
IP address blocks:        2804:2d0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl
                          rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 11:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2b:05:54:98:dc:ae:dc:1c:f4:9d:aa:fd:0c:b1:93:dc:c5:cf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
        Validity
            Not Before: Apr  4 07:17:24 2024 GMT
            Not After : Apr  3 07:22:24 2025 GMT
        Subject: CN=A91795276AD13AD22570D0701AC38836BE51CEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:20:ec:fb:3b:82:87:ce:4c:82:cc:d9:5b:6c:
                    1e:be:59:80:bd:6d:8c:10:b6:f0:36:5c:66:98:29:
                    c1:34:fe:9a:8a:00:ad:d4:4d:e7:ad:95:a6:93:2c:
                    13:58:a6:bd:5a:13:8a:7c:80:6e:f9:61:66:ef:15:
                    71:f3:54:d0:89:87:70:f5:86:4c:2b:bb:81:25:65:
                    98:49:73:4f:ba:14:85:f0:53:49:74:e4:9e:3e:e0:
                    63:16:07:cf:a1:92:9e:ae:12:3d:2c:47:f0:3c:e4:
                    fb:14:39:33:8a:34:64:37:82:87:d7:cc:a5:e2:b7:
                    8a:1f:5a:bf:af:fc:9b:83:c1:03:46:59:6a:36:a3:
                    74:ff:8d:d3:96:1e:52:ed:23:be:e9:09:f1:42:fd:
                    0d:4f:09:9e:f7:40:70:b3:39:35:39:51:a0:8f:ad:
                    09:a5:1d:89:90:49:24:cf:39:25:c2:b6:1a:53:66:
                    d4:ea:84:cb:02:88:a7:2f:31:80:fb:ca:aa:8b:50:
                    d6:e6:d7:c3:9c:72:00:e8:f1:3d:48:fb:5f:9d:8f:
                    85:3e:b8:dc:06:37:63:0b:11:ab:43:7a:dd:25:41:
                    9a:1a:e6:e8:ec:b4:7d:0c:3b:c0:58:84:11:61:2c:
                    fc:f2:e4:22:32:39:51:ef:43:8b:d1:3b:5e:34:fb:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:95:27:6A:D1:3A:D2:25:70:D0:70:1A:C3:88:36:BE:51:CE:AC
            X509v3 Authority Key Identifier:
                keyid:98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/323830343a3264303a3a2f33322d313238203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:bc:65:16:15:9f:b8:7f:fa:dd:6a:57:ec:af:44:8f:63:0b:
         22:e2:1d:90:22:22:4f:dd:12:cf:a6:1d:0d:72:87:91:22:8b:
         c5:17:f7:8b:c6:86:df:ac:e8:24:e9:f3:e7:94:d6:20:c6:d4:
         79:56:01:a6:76:90:ea:d9:7a:a2:44:f8:4f:4f:ec:84:99:6a:
         d8:0b:49:10:68:06:05:d3:e7:a3:f7:7a:00:76:72:34:19:13:
         01:04:e3:ca:ab:a3:ac:c1:7d:60:32:55:18:fa:e7:07:7a:ef:
         71:2c:e4:54:d2:13:fe:c8:29:cf:8e:18:0b:a8:56:c5:71:ce:
         21:3b:38:30:08:ae:68:0a:17:ee:22:8f:2e:cd:1e:a4:4f:cb:
         04:68:69:8e:c6:42:88:ea:49:15:4c:a2:aa:44:9d:45:a0:ab:
         a2:fa:2f:b7:2b:f1:db:b1:01:b0:ff:49:95:c1:30:ad:4c:a8:
         e7:e2:90:50:7f:a9:a5:a9:04:b3:5a:fb:1d:71:2c:b9:7c:59:
         81:57:d1:0d:96:51:6b:43:aa:a7:a5:07:12:e3:60:bc:1e:c4:
         a7:b3:e7:56:0f:d2:de:95:82:d1:2f:37:30:5b:aa:57:c1:9e:
         eb:ac:47:02:28:2a:95:bb:f8:00:84:f2:07:fa:69:16:66:87:
         86:92:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:59 2024 by rpki-client on console-fra.rpki-client.org