Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa
File:                     323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa (raw, json)
Hash identifier:          kxVjKgO56iSjOdjsU0U5E8rUhxmUMSDo+yuiLJST9wY=
Subject key identifier:   95:8E:B2:9B:4B:40:52:7A:A6:7C:40:F0:AC:93:3F:0E:D0:1F:C6:64
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       308EC854F166B7AB23523BEAE603C1B11A90F788
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa
Signing time:             Wed 03 Jul 2024 19:16:45 +0000
ROA not before:           Wed 03 Jul 2024 19:11:45 +0000
ROA not after:            Wed 02 Jul 2025 19:16:45 +0000
asID:                     266611
IP address blocks:        2804:3ea4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8e:c8:54:f1:66:b7:ab:23:52:3b:ea:e6:03:c1:b1:1a:90:f7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Jul  3 19:11:45 2024 GMT
            Not After : Jul  2 19:16:45 2025 GMT
        Subject: CN=958EB29B4B40527AA67C40F0AC933F0ED01FC664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:c3:ed:bd:d9:8a:e3:d6:26:43:58:dc:65:
                    f2:62:c0:9e:d4:af:5f:c9:59:86:e2:62:81:ba:8e:
                    ae:8d:71:0c:0e:06:af:cf:1f:dd:4a:fd:f8:75:1b:
                    7e:c4:c2:5c:e6:97:bf:61:04:3e:05:5f:e3:e3:75:
                    b6:41:3f:e3:0a:99:10:bb:82:65:75:d9:b0:ee:87:
                    41:2e:5c:29:0c:82:8d:b9:7c:17:3b:53:4c:a7:29:
                    ca:bb:85:b0:e2:f0:92:8d:78:08:8c:96:73:c3:eb:
                    e9:68:24:b9:f0:89:84:c6:6b:52:1b:06:16:e5:ee:
                    df:b7:5a:5e:b1:4e:3b:11:40:40:70:9a:66:94:c2:
                    a5:83:3b:0d:e1:9e:09:fe:12:d0:2a:19:31:22:b6:
                    91:26:4f:ab:2d:84:47:07:60:94:94:1f:77:92:5a:
                    bb:f1:f1:0e:25:ef:8e:bf:e5:ac:bf:a3:87:02:93:
                    44:5d:17:ef:c3:69:83:00:c7:af:af:1c:e1:ee:d6:
                    da:d2:f3:e3:d9:fd:41:83:d5:0a:01:fb:37:76:1a:
                    f4:b8:95:2c:63:03:85:e9:1d:4c:a4:f7:0e:1a:20:
                    a4:f9:78:c9:14:ca:db:f5:a7:ea:23:21:fe:b3:cb:
                    12:f3:c8:2c:f5:a4:7a:28:8b:b5:a7:52:0b:9e:85:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8E:B2:9B:4B:40:52:7A:A6:7C:40:F0:AC:93:3F:0E:D0:1F:C6:64
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:bc:20:d6:aa:9f:9d:17:67:72:ee:0b:5a:bc:09:11:ee:
         15:63:d3:e9:88:08:34:e7:c9:6a:e0:f2:48:7a:84:6f:7d:6e:
         e1:b1:5d:29:47:45:82:c5:3c:19:de:ef:b2:7a:49:07:17:0a:
         df:45:9a:6c:b2:f9:08:35:f0:02:b7:5a:03:0a:6c:3a:15:9d:
         e4:74:ac:ec:9e:29:e2:fe:da:68:2c:5e:93:e0:c0:18:22:04:
         fe:f5:9c:70:56:52:ac:e8:f3:da:5a:bd:da:5e:c7:4b:12:4c:
         a9:ff:64:be:9d:ad:9a:0a:b8:13:64:1d:12:68:2a:6a:3f:1f:
         b4:36:59:f1:84:77:f3:3f:87:ef:0a:d9:72:a3:35:03:1b:77:
         63:e7:a2:16:98:a4:2a:da:18:0d:fc:38:4e:ae:14:78:0c:f6:
         1c:74:b2:65:fb:de:b9:92:47:a0:b9:42:16:03:7f:c4:1c:81:
         b6:74:2a:5e:21:18:1c:fa:90:65:ea:61:7e:03:7e:24:37:7d:
         89:66:b1:bf:75:da:3f:b0:25:fc:61:65:8d:35:61:80:f7:ca:
         41:b7:28:64:c9:b9:b1:e3:6d:8a:1c:27:81:c2:fa:5d:6c:22:
         c8:54:a2:31:23:81:9e:89:f2:8c:59:70:a1:9c:c7:b5:cc:e5:
         3b:e8:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org