Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/323830343a313434383a3a2f33322d3334203d3e20323633333234.roa
File:                     323830343a313434383a3a2f33322d3334203d3e20323633333234.roa (raw, json)
Hash identifier:          r/p68DPH88iO3uplsMQ2UqsYbKXYTyENpoSNBK6M1II=
Subject key identifier:   53:08:23:97:DD:DC:8F:7B:8C:28:13:B9:49:C0:5A:79:63:6A:2E:69
Certificate issuer:       /CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
Certificate serial:       4F2409357C3993842D4355DB6A0C6634AFBE95E5
Authority key identifier: 01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/323830343a313434383a3a2f33322d3334203d3e20323633333234.roa
Signing time:             Thu 04 Apr 2024 03:14:53 +0000
ROA not before:           Thu 04 Apr 2024 03:09:53 +0000
ROA not after:            Thu 03 Apr 2025 03:14:53 +0000
asID:                     263324
IP address blocks:        2804:1448::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl
                          rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:24:09:35:7c:39:93:84:2d:43:55:db:6a:0c:66:34:af:be:95:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
        Validity
            Not Before: Apr  4 03:09:53 2024 GMT
            Not After : Apr  3 03:14:53 2025 GMT
        Subject: CN=53082397DDDC8F7B8C2813B949C05A79636A2E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:fe:d1:17:07:7d:37:4f:db:0b:4b:8f:1f:
                    68:b4:44:13:17:b1:24:84:11:dc:ae:99:21:cd:d3:
                    e2:bc:1c:48:4e:4a:71:5a:47:b3:cb:4a:cf:bc:e0:
                    89:b4:2e:5d:2b:ec:b8:55:54:02:59:76:f9:93:a7:
                    85:e5:e4:b2:44:38:e1:75:b8:04:fc:28:50:37:60:
                    e5:9b:25:e1:7a:6e:5c:4c:c4:f6:2c:94:41:bf:18:
                    b5:70:0e:01:7a:35:1a:2e:a1:ab:ba:2c:c7:82:2a:
                    10:2f:6e:bf:40:a0:72:fb:3b:27:9a:10:f4:25:ad:
                    7c:24:91:d3:a6:e2:dc:c4:da:bb:de:01:b0:b9:98:
                    36:de:61:a3:5c:da:19:43:64:8b:20:b4:64:e8:6a:
                    4a:2f:82:86:6f:05:a6:b6:87:a2:0a:9e:65:c6:9f:
                    de:23:31:2f:f4:50:e7:81:0b:3d:5e:29:5a:5b:2d:
                    15:6e:b6:82:11:88:d4:f3:6e:a6:64:7e:56:20:5b:
                    f6:4a:3b:a5:4f:21:41:a3:72:3a:b9:76:58:14:9e:
                    be:f6:f3:c5:15:96:d9:a5:a6:9a:a2:50:0b:1c:ca:
                    3e:7f:22:fe:6b:9d:be:57:60:1c:b6:ee:bc:42:22:
                    36:98:1c:00:73:e5:89:be:8a:de:53:bc:d3:f8:72:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:23:97:DD:DC:8F:7B:8C:28:13:B9:49:C0:5A:79:63:6A:2E:69
            X509v3 Authority Key Identifier:
                keyid:01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/323830343a313434383a3a2f33322d3334203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1448::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:2e:21:ac:59:d5:64:9a:9d:75:2e:26:40:55:1d:7d:8d:
         ec:09:b3:68:1d:ca:41:7d:3d:ef:7b:f7:22:91:28:76:7c:85:
         92:d2:55:63:d4:0f:2a:16:b7:0d:82:2b:8f:59:13:8e:08:b1:
         07:f2:74:38:24:9a:ec:d8:95:a8:31:b9:0f:b7:a7:c0:d9:dd:
         52:3d:2a:49:6d:bb:b4:73:22:aa:fb:3f:c9:5b:2a:c4:33:6a:
         2e:73:27:5d:be:49:48:b5:99:16:1e:68:83:5b:b4:80:5a:e0:
         c1:db:37:ed:0e:60:7b:7d:d6:c3:90:c9:b1:79:64:26:2a:33:
         65:77:39:2e:37:34:af:ae:ef:5f:d0:55:39:e3:80:d6:04:61:
         2d:57:b9:e9:2b:ea:08:01:f2:93:f0:4b:91:61:fa:37:22:19:
         69:5e:5c:0b:d0:82:53:04:b2:ef:6a:c4:61:f2:93:f3:0c:3b:
         75:c8:ef:8d:3f:66:a0:9d:e0:11:0f:f3:38:7d:40:12:a2:38:
         02:a8:92:f7:35:25:d1:6f:35:c4:a0:e2:81:a9:2d:20:97:8c:
         65:73:da:f3:81:1b:a7:97:07:6d:6b:a8:27:21:31:5c:4f:1b:
         47:e9:79:49:ce:de:40:f2:8a:da:16:79:db:8d:eb:02:07:92:
         d9:31:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org