Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a653030303a3a2f33362d3336203d3e20323636393637.roa
File:                     323830343a343631343a653030303a3a2f33362d3336203d3e20323636393637.roa (raw, json)
Hash identifier:          IzwhaqLVrf3aNzv4B9cDZ113m2CfSD5/5TXcXCcUm6E=
Subject key identifier:   58:EC:96:48:F9:06:E1:B9:06:F8:18:19:2C:EE:17:3C:E3:C5:A1:CD
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       64F1804601DC886553FC80CC010D82B252103372
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a653030303a3a2f33362d3336203d3e20323636393637.roa
Signing time:             Thu 04 Apr 2024 10:04:10 +0000
ROA not before:           Thu 04 Apr 2024 09:59:10 +0000
ROA not after:            Thu 03 Apr 2025 10:04:10 +0000
asID:                     266967
IP address blocks:        2804:4614:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f1:80:46:01:dc:88:65:53:fc:80:cc:01:0d:82:b2:52:10:33:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Apr  4 09:59:10 2024 GMT
            Not After : Apr  3 10:04:10 2025 GMT
        Subject: CN=58EC9648F906E1B906F818192CEE173CE3C5A1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:4f:80:0f:88:d8:81:c6:1b:0b:c6:b6:28:
                    e0:0d:d9:fc:ca:55:09:82:69:df:f4:68:14:ba:55:
                    df:0c:39:d0:dd:0d:00:d4:43:65:fb:ea:bd:64:b9:
                    4f:e9:98:5f:05:02:03:76:13:ec:01:f2:de:95:e9:
                    b7:f4:a5:ef:e1:4e:17:90:50:ea:b1:37:b8:61:7a:
                    4a:3e:ea:98:f7:f3:8b:cf:a7:e8:7a:69:58:c2:7e:
                    c1:30:18:c9:57:17:eb:97:49:38:66:b4:22:8f:d7:
                    42:e3:60:23:d5:5b:ed:2e:f6:d0:97:29:0d:ec:06:
                    81:44:86:39:aa:55:d8:77:52:ad:af:f5:bd:48:90:
                    fb:67:51:8d:61:2f:24:6a:e3:dc:17:97:0d:38:2f:
                    97:44:db:92:26:30:c9:29:d5:5d:6e:26:54:60:ef:
                    45:85:01:33:aa:70:90:5b:2e:b3:de:f7:b9:a4:18:
                    7e:38:49:08:3a:1f:c0:c0:ad:2f:5c:65:bf:95:cd:
                    5e:a3:6d:cb:d0:b9:ec:dc:da:8b:28:35:ef:fb:a1:
                    54:d5:d7:b5:29:b1:99:62:1b:5f:45:91:cf:a6:99:
                    54:10:92:2c:9e:87:8e:ef:30:c1:65:37:71:89:a9:
                    86:1f:a2:03:03:4a:91:ec:16:6a:32:21:6e:c8:f4:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EC:96:48:F9:06:E1:B9:06:F8:18:19:2C:EE:17:3C:E3:C5:A1:CD
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a653030303a3a2f33362d3336203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4614:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:e6:6c:98:86:67:2c:23:8d:b7:15:ba:18:2a:33:06:6d:
         7c:83:88:eb:be:aa:cd:d2:fe:43:db:e2:4c:e2:ab:e2:58:82:
         fe:57:35:71:04:0e:d7:02:1d:e2:aa:8d:2e:00:da:6b:3e:72:
         99:09:ed:45:5c:ee:e8:55:09:a0:57:55:51:a9:7c:4c:67:71:
         38:2d:40:ff:81:50:fb:d5:51:0b:f4:bd:d9:30:72:38:91:a0:
         09:b9:17:26:3a:17:c6:4f:c0:34:00:6d:11:bf:8d:2e:a7:b1:
         0f:4c:7c:6f:ef:22:58:94:2c:a6:8b:97:ec:1c:9f:0e:7b:17:
         85:cf:5a:86:e2:1d:70:f6:89:f5:b3:04:c3:2a:57:0b:32:d6:
         9f:ae:9f:fb:b5:ca:bf:5c:03:9e:9f:17:e9:ef:30:b5:00:f9:
         e8:26:26:64:c1:13:cd:16:21:42:b7:e7:f4:d5:5d:d7:3a:bc:
         be:c6:17:0d:2a:3c:ba:31:bd:0e:80:fa:79:39:66:b8:a4:42:
         e3:ae:11:50:54:05:9c:5f:ab:27:36:77:48:ae:f0:00:96:73:
         18:80:db:6d:94:6e:46:c3:b8:6b:a9:15:63:53:33:90:6d:94:
         9c:59:a7:8a:71:a4:f9:db:66:74:a1:27:fa:0a:52:28:46:32:
         91:08:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org