Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa
File:                     323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa (raw, json)
Hash identifier:          efzPqPshfWLr/L2LuGluORsM29z7wi/ldwWzWFYYQOI=
Subject key identifier:   5B:04:19:F6:1B:8F:FE:82:8B:42:31:CB:8F:DC:2B:C0:28:11:F2:00
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       49D0612F6BF036DD2AA6900D5434981D64D6EE49
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa
Signing time:             Thu 04 Apr 2024 10:04:09 +0000
ROA not before:           Thu 04 Apr 2024 09:59:09 +0000
ROA not after:            Thu 03 Apr 2025 10:04:09 +0000
asID:                     266967
IP address blocks:        2804:4614:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d0:61:2f:6b:f0:36:dd:2a:a6:90:0d:54:34:98:1d:64:d6:ee:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Apr  4 09:59:09 2024 GMT
            Not After : Apr  3 10:04:09 2025 GMT
        Subject: CN=5B0419F61B8FFE828B4231CB8FDC2BC02811F200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:e0:4c:f7:b5:98:87:c8:50:01:6d:ff:60:
                    00:d8:84:d0:69:de:e7:01:f0:04:de:94:1f:ca:38:
                    29:d0:69:32:1e:f1:b5:ed:6f:85:db:30:2c:1c:4f:
                    86:fd:0a:5a:b9:cd:6e:4c:b3:a8:5a:9a:cf:78:2a:
                    7a:22:d6:0a:94:c7:af:5d:cd:2a:da:50:ce:89:3a:
                    26:4c:a0:72:37:37:fe:ae:70:6e:55:12:c7:1e:fe:
                    6f:2e:b2:b2:2c:f6:e5:10:d3:bb:5a:e4:60:bb:bf:
                    14:1f:5e:c0:cb:e1:6c:7b:01:e3:f9:c6:0d:fd:80:
                    28:58:c6:4b:37:32:a1:46:0c:e8:9e:07:8d:77:58:
                    d1:5c:93:f8:b6:05:1f:de:e7:9a:bc:20:98:0e:f0:
                    89:92:e8:4b:23:57:f8:fe:6c:eb:a0:20:df:33:77:
                    cc:55:a7:29:41:0d:48:86:3d:fa:0c:3a:c5:6b:b7:
                    3a:73:d9:80:e4:bb:27:83:20:6b:a0:e9:83:88:3c:
                    80:6a:97:28:86:18:47:df:9e:34:9d:ab:24:5c:18:
                    14:d0:81:00:5a:b1:4c:7f:2b:9e:cf:a1:06:a7:8a:
                    c0:3a:1a:7b:aa:16:8c:7f:ad:90:2e:48:d0:9f:5b:
                    31:42:5e:c6:b3:18:4f:74:2c:9d:89:3b:ea:f7:7f:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:04:19:F6:1B:8F:FE:82:8B:42:31:CB:8F:DC:2B:C0:28:11:F2:00
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4614:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:e6:75:29:22:63:7e:2b:ca:47:86:0a:bd:44:02:55:9b:a6:
         93:80:e7:f8:c3:2f:b0:7e:c2:b7:12:2c:6b:e1:c6:c7:a8:6d:
         f2:f3:05:5a:46:a3:a1:4b:8c:a4:d1:61:e5:c9:c0:7a:f7:06:
         38:c9:35:78:72:d7:52:21:1e:b9:f6:98:af:0c:ee:a2:44:b9:
         10:9d:29:18:25:49:f2:52:00:d9:1d:21:5b:7e:02:dc:b2:82:
         51:40:eb:4e:21:79:71:c3:51:a8:ac:70:16:6c:66:71:ad:c6:
         0f:98:0d:c0:0c:e1:ba:80:13:bc:2d:1e:de:20:b3:fc:e6:01:
         e4:1e:3a:1b:6a:24:9e:52:e4:52:63:3e:06:35:53:ad:76:de:
         f2:15:42:4b:be:d2:87:1e:35:8c:17:d6:11:17:0f:c7:89:bb:
         3f:79:be:78:db:5a:a2:c0:ea:68:e2:34:f9:9f:6c:e7:fa:2c:
         f5:80:b9:77:71:45:fd:d5:6f:69:7f:41:d5:f9:15:08:0b:05:
         c0:49:c1:cc:35:82:de:30:12:cc:c0:b5:da:29:c0:e3:a7:33:
         77:25:0e:5b:63:e0:2c:13:99:d7:00:ae:55:95:3d:5d:0f:e5:
         a3:22:bf:52:9e:1e:4e:35:41:db:c1:e0:cd:bf:af:dd:8a:f9:
         2c:5d:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org