Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d313238203d3e20323635303239.roa
File:                     323830343a333161383a3a2f33322d313238203d3e20323635303239.roa (raw, json)
Hash identifier:          XRHTWRO+pLLV/+3FBl4ExOd2KRZO4373hukLRPnyADY=
Subject key identifier:   66:C1:C1:ED:F2:F5:7F:2C:4F:67:00:62:7F:F5:01:F7:EF:60:5A:22
Certificate issuer:       /CN=5F3969BC85188372D2CAFFD020E8133C1D23E4DD
Certificate serial:       206E3546C34E56E7B17D0D59A2F1361180BBFEB3
Authority key identifier: 5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d313238203d3e20323635303239.roa
Signing time:             Fri 19 Apr 2024 17:50:30 +0000
ROA not before:           Fri 19 Apr 2024 17:45:30 +0000
ROA not after:            Fri 18 Apr 2025 17:50:30 +0000
asID:                     265029
IP address blocks:        2804:31a8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.crl
                          rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6e:35:46:c3:4e:56:e7:b1:7d:0d:59:a2:f1:36:11:80:bb:fe:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3969BC85188372D2CAFFD020E8133C1D23E4DD
        Validity
            Not Before: Apr 19 17:45:30 2024 GMT
            Not After : Apr 18 17:50:30 2025 GMT
        Subject: CN=66C1C1EDF2F57F2C4F6700627FF501F7EF605A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:1b:d2:be:bb:06:19:6c:f0:52:3d:39:c2:
                    e1:ee:f4:d9:6b:8e:e0:3c:a4:b5:14:66:32:93:ce:
                    4a:e4:c4:16:21:b5:09:ef:cb:97:bf:39:21:99:98:
                    53:62:af:2e:8e:1a:1b:d6:a0:64:20:62:cb:31:8f:
                    28:07:e1:ec:25:5f:03:bd:f0:a2:d0:10:43:9c:30:
                    52:d9:5f:b4:97:a0:eb:3e:e5:38:99:be:c4:59:1f:
                    0e:25:69:6f:c8:c2:a7:d1:c4:84:0e:20:74:2f:1d:
                    e8:09:ad:60:69:87:fd:1c:b1:50:9d:fd:3f:5b:f0:
                    8e:b4:b1:6d:7b:21:79:54:6b:d9:2f:fb:ff:bd:88:
                    ff:07:71:bc:b9:82:73:29:9f:65:1b:0c:2b:8c:82:
                    a9:d9:1a:e0:88:24:03:7d:f2:63:94:0a:af:c9:ea:
                    f4:4e:ac:30:32:5c:9b:d2:e5:34:69:2b:58:08:10:
                    ac:de:a0:0c:58:69:c0:32:55:a5:cc:fb:61:4a:eb:
                    c3:39:b7:fa:b0:9f:c7:8c:5b:57:43:1d:41:c4:db:
                    b9:96:f9:da:81:84:8f:bc:54:33:1e:01:d8:67:1d:
                    e0:9a:b7:1f:75:15:59:57:6b:48:b3:08:36:50:1d:
                    dd:1c:49:ee:09:07:51:8e:87:3a:0d:03:2c:d9:7c:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C1:C1:ED:F2:F5:7F:2C:4F:67:00:62:7F:F5:01:F7:EF:60:5A:22
            X509v3 Authority Key Identifier:
                keyid:5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d313238203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:9e:23:30:0d:54:e2:67:a2:7b:ad:a3:16:98:d0:25:7d:
         46:e2:db:57:59:2f:86:42:48:55:fd:c1:46:fe:17:3c:cf:37:
         2b:85:6a:9c:9e:41:1c:d6:69:33:54:83:e5:44:9d:28:af:94:
         8d:99:d2:1e:9c:7c:69:19:2a:a2:0a:11:16:13:8e:e3:d1:39:
         34:9b:23:9e:f4:af:5e:47:21:3c:c3:d4:25:3d:db:68:62:50:
         6c:2d:0e:ce:d6:c4:47:1e:e0:2f:a1:3b:24:a0:44:bc:a1:34:
         ef:6e:a6:cb:f7:18:0f:f2:65:eb:40:08:14:f8:7b:79:43:3c:
         e3:30:58:fd:a0:f5:c5:61:3c:c4:90:0a:24:f1:aa:35:5e:49:
         ba:19:d4:be:a8:04:0b:33:1e:fe:a9:69:73:20:7c:70:9b:af:
         0a:77:8b:ae:a9:33:e4:3b:46:e4:02:9e:7b:2b:c6:ca:3d:c9:
         c1:45:49:02:1d:37:68:22:54:a4:16:be:cd:50:25:fd:7d:89:
         59:8e:28:9d:0e:22:2c:2b:68:fa:20:8f:0e:e1:8d:a4:aa:84:
         31:cd:22:78:89:59:2b:36:3b:25:6a:70:fa:f0:b5:05:7b:9d:
         68:d4:da:50:76:ef:6c:23:24:8f:8a:5d:fe:28:d0:97:56:da:
         3f:2a:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:21 2024 by rpki-client on console-ams.rpki-client.org