Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsADUM8ctMoaiAe9nmRrgcYVhwwrytkfatTawqY7wApo/1/323830343a386564343a3a2f33322d3332203d3e20323733343439.roa
File:                     323830343a386564343a3a2f33322d3332203d3e20323733343439.roa (raw, json)
Hash identifier:          pRTH49PXnHxpQU9cdCt03PXlTmkjbcAYoxnRAhTMSMs=
Subject key identifier:   46:DB:69:80:19:49:57:EC:17:BB:36:34:75:3A:71:74:C9:E8:74:18
Certificate issuer:       /CN=69530C7BE95A52EA05623EB9FC6048151A5C8A2A
Certificate serial:       488400CEEB43E8B9DE9C3719021B476FC5F8D060
Authority key identifier: 69:53:0C:7B:E9:5A:52:EA:05:62:3E:B9:FC:60:48:15:1A:5C:8A:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69530C7BE95A52EA05623EB9FC6048151A5C8A2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsADUM8ctMoaiAe9nmRrgcYVhwwrytkfatTawqY7wApo/1/323830343a386564343a3a2f33322d3332203d3e20323733343439.roa
Signing time:             Tue 18 Jun 2024 02:08:56 +0000
ROA not before:           Tue 18 Jun 2024 02:03:56 +0000
ROA not after:            Tue 17 Jun 2025 02:08:56 +0000
asID:                     273449
IP address blocks:        2804:8ed4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsADUM8ctMoaiAe9nmRrgcYVhwwrytkfatTawqY7wApo/1/69530C7BE95A52EA05623EB9FC6048151A5C8A2A.crl
                          rsync://rpki-repo.registro.br/repo/GsADUM8ctMoaiAe9nmRrgcYVhwwrytkfatTawqY7wApo/1/69530C7BE95A52EA05623EB9FC6048151A5C8A2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69530C7BE95A52EA05623EB9FC6048151A5C8A2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:84:00:ce:eb:43:e8:b9:de:9c:37:19:02:1b:47:6f:c5:f8:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69530C7BE95A52EA05623EB9FC6048151A5C8A2A
        Validity
            Not Before: Jun 18 02:03:56 2024 GMT
            Not After : Jun 17 02:08:56 2025 GMT
        Subject: CN=46DB6980194957EC17BB3634753A7174C9E87418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:75:45:43:9f:99:38:53:49:6a:3c:17:82:
                    06:b9:36:8a:96:41:e2:b3:3d:d8:89:c3:f2:3b:54:
                    8c:a3:66:2a:be:5c:63:d2:15:80:a3:b3:4f:50:73:
                    06:91:6b:46:35:0e:35:be:6a:2a:e1:4b:c1:50:c1:
                    0f:51:4c:3b:c6:e2:d4:17:89:fe:f6:c1:4e:fd:6a:
                    04:7b:16:6d:8b:d6:90:70:f7:1b:1a:46:94:0f:32:
                    80:55:bd:40:fa:23:77:8b:45:7c:89:3a:06:22:76:
                    8f:b1:df:bd:02:e6:8c:f6:07:38:36:65:ac:35:a9:
                    0f:34:df:56:f4:b5:cb:e8:57:cd:59:9c:5f:40:da:
                    99:78:15:f8:ed:a3:7e:5b:27:73:12:93:bb:84:88:
                    b4:85:ff:cb:dc:37:41:98:98:00:73:68:4b:b3:56:
                    f8:0b:1a:1f:9b:f8:f4:95:25:30:6b:41:35:7e:b2:
                    18:cb:36:d7:f6:5a:5d:55:54:b6:4f:dd:ab:30:f2:
                    0e:84:30:e4:bd:03:7f:47:95:17:78:d4:ae:51:61:
                    d3:f7:c2:13:df:05:fa:a8:f5:9a:b5:67:45:30:e9:
                    b2:18:ab:32:5d:5c:ee:de:3a:af:6d:9b:b7:72:f8:
                    bc:0e:79:36:f6:8a:c9:77:00:2a:6f:30:db:3d:c8:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DB:69:80:19:49:57:EC:17:BB:36:34:75:3A:71:74:C9:E8:74:18
            X509v3 Authority Key Identifier:
                keyid:69:53:0C:7B:E9:5A:52:EA:05:62:3E:B9:FC:60:48:15:1A:5C:8A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsADUM8ctMoaiAe9nmRrgcYVhwwrytkfatTawqY7wApo/1/69530C7BE95A52EA05623EB9FC6048151A5C8A2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69530C7BE95A52EA05623EB9FC6048151A5C8A2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsADUM8ctMoaiAe9nmRrgcYVhwwrytkfatTawqY7wApo/1/323830343a386564343a3a2f33322d3332203d3e20323733343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:61:c3:31:fd:0a:08:c8:14:54:1a:fc:9b:40:5e:5f:e0:
         fa:95:b6:ad:3d:1f:1e:f6:41:d8:83:70:5f:82:fd:4d:46:c9:
         27:28:95:5e:15:af:cb:4f:3c:12:11:a0:c6:f7:3a:ce:75:4e:
         61:d7:c1:8b:3e:e5:e0:3b:fc:9c:b1:75:90:70:2e:b0:fc:74:
         16:b5:89:76:aa:cb:94:f8:22:99:7d:a4:d4:84:12:71:6c:af:
         e9:4f:43:26:a1:19:d4:06:e5:fb:31:ab:0a:2f:cf:9b:e8:26:
         27:e5:7e:65:fb:b6:0f:38:c8:f7:27:54:63:93:9d:0e:b8:af:
         69:43:44:4e:d2:ef:27:f1:ed:cf:86:95:37:f7:6e:9e:2d:92:
         e2:5c:b9:2f:da:b2:f4:21:d4:53:6e:e5:c3:92:77:7a:62:f0:
         c2:08:14:36:ae:29:46:ee:3e:c2:46:3f:6a:f3:14:d2:57:d4:
         34:2a:25:2a:b3:c4:6b:f4:ef:e9:74:03:83:73:57:0a:68:d6:
         12:90:12:63:7f:5b:2a:63:6a:70:6f:42:c2:b2:89:58:1d:c7:
         97:04:76:44:cf:73:27:90:68:25:61:07:8f:55:b2:01:09:fa:
         c3:5e:ea:b2:8d:85:8e:4f:80:0c:c1:9d:93:5d:55:78:bb:27:
         0b:1a:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:06 2024 by rpki-client on console-ams.rpki-client.org