Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/323830343a343261343a3a2f33322d3332203d3e20323637353136.roa
File:                     323830343a343261343a3a2f33322d3332203d3e20323637353136.roa (raw, json)
Hash identifier:          r5YwQbTV0t8wgmX5j83SRiKDf4+IU2l23uC7kIxhc9I=
Subject key identifier:   AF:A0:57:10:1A:D9:6A:2F:C0:FF:24:8B:67:D2:FF:4B:46:43:74:68
Certificate issuer:       /CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
Certificate serial:       46829F8A8E96C056283A2F7EBFAA6E7B54DA033F
Authority key identifier: E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/323830343a343261343a3a2f33322d3332203d3e20323637353136.roa
Signing time:             Wed 07 Aug 2024 23:55:26 +0000
ROA not before:           Wed 07 Aug 2024 23:50:26 +0000
ROA not after:            Wed 06 Aug 2025 23:55:26 +0000
asID:                     267516
IP address blocks:        2804:42a4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl
                          rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:82:9f:8a:8e:96:c0:56:28:3a:2f:7e:bf:aa:6e:7b:54:da:03:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
        Validity
            Not Before: Aug  7 23:50:26 2024 GMT
            Not After : Aug  6 23:55:26 2025 GMT
        Subject: CN=AFA057101AD96A2FC0FF248B67D2FF4B46437468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:a4:c6:8d:0f:b9:18:05:f1:31:d0:6f:d3:
                    c1:96:8f:b1:dd:1d:f5:a1:e5:eb:00:92:de:09:1a:
                    54:a6:7c:b8:69:a3:58:5c:2c:fc:48:ee:13:a0:b0:
                    03:f8:d5:c8:da:78:5a:d5:d6:45:a0:1c:7d:ed:73:
                    dc:45:3d:35:86:1e:63:18:4d:80:9f:9e:44:56:8c:
                    1f:da:07:3c:4b:8d:5e:c1:e9:eb:a9:44:01:62:42:
                    12:98:66:5d:0c:b4:5f:07:01:98:57:64:65:42:d0:
                    c8:39:85:84:bf:11:24:ac:84:c6:c9:cf:d8:52:6f:
                    ff:9f:3f:99:e3:27:e0:75:9d:05:79:fa:37:59:f8:
                    a0:63:8b:26:d5:3f:07:29:96:d3:5b:99:c0:52:b1:
                    80:f5:d3:a7:90:16:26:67:64:e9:23:3b:25:9b:0c:
                    ed:60:38:72:98:a3:84:7a:f1:3b:fa:f0:c3:3e:3a:
                    a0:79:d0:54:25:74:25:87:26:67:24:9a:c6:69:21:
                    c7:dc:f9:f7:50:2d:cd:02:72:97:cf:18:dd:05:c5:
                    05:87:17:e4:8c:25:9b:eb:d0:d7:e3:81:86:14:30:
                    a6:5c:f7:21:a4:c5:ff:d2:64:db:f6:20:d2:c3:25:
                    0e:e9:c4:71:ee:50:57:86:cd:6d:b2:bd:f7:dc:7f:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A0:57:10:1A:D9:6A:2F:C0:FF:24:8B:67:D2:FF:4B:46:43:74:68
            X509v3 Authority Key Identifier:
                keyid:E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/323830343a343261343a3a2f33322d3332203d3e20323637353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:6a:15:0b:b3:65:5e:3f:ed:84:ac:5c:02:c3:34:32:9e:5c:
         3b:9d:ec:57:d6:56:bf:72:71:79:aa:80:5f:e1:e7:fd:a2:fc:
         27:29:c9:2a:3b:8e:fb:86:f6:1f:41:c6:b4:6c:22:d3:bd:a1:
         d8:9a:7d:a3:d2:1e:e5:db:8e:ca:e7:f9:48:0f:f6:c8:9b:74:
         86:7b:0d:0f:43:fa:6f:30:9a:78:5f:7f:f4:fd:b6:b2:12:5e:
         f2:56:a1:32:4f:ad:6a:23:f2:b5:21:aa:a7:4e:7c:58:20:93:
         02:c6:0b:af:ea:28:b3:f3:6e:79:ea:87:4f:c3:94:1f:d8:73:
         e3:84:08:86:06:38:14:9b:e1:6b:c3:ac:14:21:bb:f3:3b:b2:
         09:ce:f5:a0:38:64:6f:ae:d6:df:f9:38:82:2b:84:19:1c:ee:
         05:90:c7:7f:d2:9e:2c:f6:55:27:29:06:69:e2:bd:e4:b1:66:
         45:d3:2e:29:c4:a6:1a:2c:4b:22:a8:ec:1a:1a:54:45:0c:dc:
         ba:63:73:bf:8f:ca:75:83:6d:7d:ea:50:12:59:eb:65:e8:a2:
         c4:84:25:05:64:f5:ab:e4:15:f6:bd:5a:e1:43:df:4e:49:f9:
         ea:d2:0f:2f:2d:13:4c:dd:8d:21:75:5e:45:a0:70:43:e8:1e:
         eb:25:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:01 2024 by rpki-client on console-ams.rpki-client.org