Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33332d3333203d3e20323636363131.roa
File:                     323830343a336561343a3a2f33332d3333203d3e20323636363131.roa (raw, json)
Hash identifier:          NmY+86VrERSD2c+fwDt8xJskL5cCS0aOeOhX0mgSR8Y=
Subject key identifier:   8F:97:45:D2:AC:17:38:EA:77:FF:64:7F:F1:ED:7B:41:FE:7E:F1:23
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       2C285D221ECA54E84C81CCAB402ADCF398772EEF
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33332d3333203d3e20323636363131.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     266611
IP address blocks:        2804:3ea4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:28:5d:22:1e:ca:54:e8:4c:81:cc:ab:40:2a:dc:f3:98:77:2e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=8F9745D2AC1738EA77FF647FF1ED7B41FE7EF123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:a2:cd:4d:3b:6e:02:73:fe:7f:4b:dd:c4:
                    fa:14:f7:4c:fc:83:6e:54:33:50:70:41:bc:a4:02:
                    5c:83:d7:b0:17:72:27:25:cb:82:77:e8:a9:ed:12:
                    47:dc:8a:d1:2b:98:ff:a2:7e:86:ad:13:fb:e3:58:
                    5e:60:64:21:ce:6d:83:0c:68:45:a1:8d:d8:57:5a:
                    47:5b:41:53:5c:2c:99:fe:8d:83:96:66:9f:c6:a3:
                    4e:00:b8:34:37:51:10:a1:e6:44:54:9e:f1:25:b2:
                    d5:40:80:a3:58:2f:59:b9:02:8f:f5:5a:58:4c:db:
                    bd:48:98:fe:96:60:1e:8f:26:06:0e:cf:1d:b8:93:
                    3a:e0:af:f5:b3:14:cd:c2:06:00:84:10:fa:33:23:
                    33:dd:1f:aa:e8:e8:96:0b:91:3d:81:b6:c3:ec:e8:
                    2d:f8:85:6c:52:86:63:0a:39:da:45:7c:5a:03:ee:
                    28:05:ca:37:fd:9e:bb:39:c6:48:00:4a:1f:31:9e:
                    4a:11:51:85:a9:8e:ea:77:be:2b:11:fb:38:b9:7a:
                    74:e6:3f:29:4a:32:2f:2d:f9:db:35:81:4b:04:b7:
                    ea:fa:08:17:4f:e1:5b:8a:ac:8c:c7:fc:d3:d0:14:
                    be:d5:d0:1d:a7:08:5c:ff:a9:56:31:ec:df:8e:f6:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:45:D2:AC:17:38:EA:77:FF:64:7F:F1:ED:7B:41:FE:7E:F1:23
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33332d3333203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:a9:e9:5e:37:97:30:f4:48:0b:5c:2c:e9:fe:70:ae:cc:
         4f:71:6b:84:f1:5f:33:af:0c:ec:71:9b:31:f0:cd:52:5f:30:
         34:a8:e2:fb:bc:1d:70:15:0a:50:4e:95:0e:8e:1d:53:dc:f4:
         24:d7:ac:a3:89:8e:9c:20:ba:1d:a4:8a:06:31:27:1f:2e:c7:
         09:81:28:1c:1e:70:01:dc:c2:42:df:fe:ec:0f:19:32:61:30:
         a1:5b:2b:60:a7:c9:07:60:e5:3a:dd:f1:19:9a:c3:ca:66:1f:
         50:80:f3:d6:65:58:ff:cd:bd:6b:34:45:1a:fb:da:10:0f:87:
         a0:2d:5a:f4:09:c1:40:9d:36:02:00:3b:a4:7a:c6:52:b9:31:
         d9:6a:13:be:cb:cb:50:ce:30:45:14:29:c0:09:e4:20:d0:bc:
         3a:25:64:1c:db:f8:0d:86:04:5c:3d:11:42:28:b9:3b:43:6c:
         37:0d:bb:a8:c0:43:39:4c:e7:c4:44:cd:ab:40:f0:cb:63:e9:
         ff:a4:d0:5f:38:4c:c7:50:58:8a:11:95:f8:5b:5b:f6:f9:32:
         58:f9:0a:09:be:ad:0d:1f:99:43:c3:3a:74:15:6d:0f:67:8b:
         30:4a:8e:ca:17:05:df:89:96:77:1b:92:af:7d:09:e2:16:19:
         87:6e:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:36 2024 by rpki-client on console-fra.rpki-client.org