Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa
File:                     323030313a313239343a3a2f33322d3332203d3e203238313832.roa (raw, json)
Hash identifier:          JcSPYY1P+fp86ZF9qzOHM5sjFm1R501e1LweI76iYao=
Subject key identifier:   4A:13:29:14:FB:AB:D5:19:D2:8A:8C:82:0D:E5:00:F2:E7:A9:E5:1D
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       35C3FC0472CE63DD62E55EFC1266DF347FB34274
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        2001:1294::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c3:fc:04:72:ce:63:dd:62:e5:5e:fc:12:66:df:34:7f:b3:42:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=4A132914FBABD519D28A8C820DE500F2E7A9E51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:db:52:80:e9:3f:09:74:75:ed:32:38:c1:
                    3c:11:ca:d6:8d:5d:32:dc:7e:12:76:dc:66:4a:dc:
                    2e:29:8a:68:01:83:67:23:98:af:45:8d:77:ef:19:
                    31:69:7e:df:d6:4f:4a:bc:a8:ea:3c:fb:e5:84:12:
                    8c:f3:d5:de:0a:74:f8:23:f0:c7:5d:f0:58:37:9b:
                    9e:37:6e:e4:f2:05:40:b9:3f:fd:b3:4c:a6:e5:4a:
                    b4:f0:36:60:9b:42:2b:e1:c4:c8:aa:c8:79:0d:cf:
                    ce:7b:cd:1e:e6:4d:ed:5d:cf:d4:74:c0:7b:b9:f9:
                    d9:62:d6:57:0e:e0:05:ee:32:98:2a:0f:bf:aa:91:
                    69:9c:03:ce:04:ea:03:68:0e:8a:ff:22:83:a4:83:
                    3f:2d:51:b5:5f:fb:51:31:4d:57:c8:cb:ea:56:37:
                    27:86:69:cf:26:87:04:13:9d:e5:e6:6b:33:70:81:
                    85:2b:de:93:99:2d:0e:d2:24:7a:c4:fa:74:94:77:
                    62:1b:3e:f7:3a:6a:4a:37:f9:c7:b8:0f:4d:ea:77:
                    1d:a2:ef:0b:67:6f:13:ca:c6:d7:ff:5d:2b:31:74:
                    ce:24:88:c7:4a:9d:42:b5:a5:c1:f5:5c:2c:35:8c:
                    cc:82:76:bb:ad:68:d5:df:1e:6e:48:5e:34:7a:bf:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:13:29:14:FB:AB:D5:19:D2:8A:8C:82:0D:E5:00:F2:E7:A9:E5:1D
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1294::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:de:65:24:a9:4d:0c:1d:4e:b4:63:bd:4a:43:17:8e:0c:82:
         cb:3b:66:3d:af:92:af:86:a8:6e:f2:2b:17:35:11:a2:7d:4a:
         6a:a2:6b:02:8a:d1:c7:7c:3a:e5:e7:c2:d5:67:ca:dc:a2:47:
         cd:21:f2:da:3e:44:2d:b9:7c:24:07:70:44:23:c1:c0:a9:aa:
         b6:5b:c3:94:c6:e5:fe:f0:0b:81:a5:bd:d0:13:31:05:2a:a2:
         dc:57:31:d0:dd:24:5f:f2:19:7d:b9:15:0c:6f:98:3e:d6:7c:
         fc:a4:02:32:25:3e:b2:50:69:8d:b1:39:26:47:2f:03:7c:dd:
         cd:4c:b8:c4:41:31:31:4d:e4:26:dc:84:c8:ca:26:db:43:64:
         5b:36:ff:e3:74:40:c1:8f:c9:4d:e0:cd:32:1f:75:af:09:ea:
         31:cf:44:31:2a:a0:fa:f4:92:f7:2d:df:7b:60:ae:28:02:92:
         47:d0:20:43:78:75:ae:6d:5b:c4:43:22:ea:a3:a9:17:4d:ca:
         1e:54:74:03:ca:30:15:3d:e0:b3:5c:c8:af:2b:3a:95:a2:70:
         22:71:42:8d:16:0f:02:65:d2:00:20:79:d1:71:7f:e9:d6:96:
         48:db:0a:59:64:67:41:33:11:6f:cf:72:82:f0:3f:f8:ea:6b:
         03:55:23:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:27:35 2024 by rpki-client on console-ams.rpki-client.org