Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/323830343a343261343a383030303a3a2f34302d3430203d3e20323637353136.roa
File:                     323830343a343261343a383030303a3a2f34302d3430203d3e20323637353136.roa (raw, json)
Hash identifier:          WoS8c6PPw+vNVf+jREXNzrc+uvZMk8yqp+V5IQ7dt+k=
Subject key identifier:   18:E8:04:7A:C2:24:10:EF:1C:9A:64:BA:AF:92:63:7A:00:9D:6B:D1
Certificate issuer:       /CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
Certificate serial:       41DAD055453700082C2EBFBAA7EA81B781A23021
Authority key identifier: E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/323830343a343261343a383030303a3a2f34302d3430203d3e20323637353136.roa
Signing time:             Thu 08 Aug 2024 06:57:30 +0000
ROA not before:           Thu 08 Aug 2024 06:52:30 +0000
ROA not after:            Thu 07 Aug 2025 06:57:30 +0000
asID:                     267516
IP address blocks:        2804:42a4:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl
                          rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:da:d0:55:45:37:00:08:2c:2e:bf:ba:a7:ea:81:b7:81:a2:30:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
        Validity
            Not Before: Aug  8 06:52:30 2024 GMT
            Not After : Aug  7 06:57:30 2025 GMT
        Subject: CN=18E8047AC22410EF1C9A64BAAF92637A009D6BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:45:39:e2:6c:c6:96:a1:da:ff:29:03:f3:
                    4c:fb:81:17:71:8e:cd:d4:7e:f6:c1:0c:2c:38:39:
                    06:99:61:34:c2:2c:80:52:51:ca:fb:bc:7b:3d:c9:
                    44:85:39:cc:71:e8:88:f0:ad:42:4d:d2:98:80:10:
                    b8:45:63:9b:d9:72:1e:b2:ac:70:70:66:d5:ba:35:
                    39:18:93:df:e0:5d:7e:5e:b1:d9:df:4b:43:7f:18:
                    b8:6e:f5:65:d1:cd:f4:ca:c4:01:bf:eb:70:d0:77:
                    4c:5c:f5:52:ac:36:8f:67:29:52:69:df:2c:38:1f:
                    57:e0:9d:f9:84:39:00:ad:ae:7a:5f:06:2f:f9:61:
                    1d:80:b4:b8:aa:8e:ae:48:5a:e9:78:9a:d4:89:2c:
                    c3:4b:85:03:7f:7d:86:03:d5:c4:cf:a1:47:bd:20:
                    e8:a1:3e:35:74:d8:91:cc:a7:71:46:40:2a:7b:7c:
                    e6:4e:55:3c:75:9f:9d:ec:78:a1:9e:47:5b:43:bf:
                    49:76:aa:3a:49:b8:a6:69:cf:e4:e8:86:2b:0e:8d:
                    74:ca:47:50:34:93:76:e7:dc:a6:d3:b0:11:35:44:
                    bb:4a:8d:63:d6:f9:2a:ae:8d:56:0a:d7:a0:3a:1c:
                    d0:81:07:90:ff:37:7a:d2:88:53:c1:6b:8b:6f:a8:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E8:04:7A:C2:24:10:EF:1C:9A:64:BA:AF:92:63:7A:00:9D:6B:D1
            X509v3 Authority Key Identifier:
                keyid:E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/323830343a343261343a383030303a3a2f34302d3430203d3e20323637353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42a4:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:99:cd:4b:ad:46:e5:3e:bc:b7:a6:2a:e0:3b:da:b7:6f:
         94:18:a9:82:e5:52:5c:7a:b4:70:f7:e0:bd:22:11:6a:4f:51:
         1c:af:e8:61:0f:27:b8:df:03:29:c7:a9:ae:f4:a5:1f:0c:43:
         75:ed:b8:d6:42:cc:7e:73:78:bd:5b:bc:fd:31:d8:d7:6a:3e:
         76:a7:d5:91:50:a7:87:c9:38:ae:ab:ed:e4:8a:42:79:a9:f7:
         b1:d2:5e:cf:c1:30:a0:73:d0:89:9e:92:59:32:54:48:87:26:
         c4:77:d3:b5:94:b9:9d:c8:d9:ec:c0:6e:88:b5:ae:46:67:c7:
         f9:27:84:40:08:b0:cb:0c:80:82:e8:c6:2b:58:43:56:07:53:
         3e:ae:cc:a3:2f:ee:c5:3f:4d:36:8a:28:28:98:c1:00:c3:c0:
         28:59:50:b5:c9:95:ed:13:dc:57:cb:1d:f0:c9:6b:72:46:ce:
         e4:13:fb:01:c5:02:f8:09:70:dc:aa:00:98:07:64:c5:50:f5:
         48:6f:18:3c:82:51:31:0b:6d:51:ac:80:e5:3b:09:61:f9:83:
         a1:34:eb:6b:f6:c0:07:e2:49:bc:01:0a:7f:0a:33:ca:55:e5:
         fe:8b:24:ab:14:e6:87:74:41:04:4e:3e:8b:6e:de:43:a4:6a:
         0e:13:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:40 2024 by rpki-client on console-fra.rpki-client.org