Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/323830343a326465343a3a2f33322d313238203d3e20323635333130.roa
File:                     323830343a326465343a3a2f33322d313238203d3e20323635333130.roa (raw, json)
Hash identifier:          yv7X3RCpadDXFXHBeNSKEc5nDpYtRXOXe62ht5fo/pU=
Subject key identifier:   B9:1A:52:66:26:60:D1:10:21:51:3E:E3:0E:19:F0:68:8B:87:59:8D
Certificate issuer:       /CN=ADCD3FBE64DF83F123DCA7C212089403CD855CD0
Certificate serial:       0F89CF131C13821D61ECA17C5731315878CE8206
Authority key identifier: AD:CD:3F:BE:64:DF:83:F1:23:DC:A7:C2:12:08:94:03:CD:85:5C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/323830343a326465343a3a2f33322d313238203d3e20323635333130.roa
Signing time:             Tue 19 Nov 2024 13:55:29 +0000
ROA not before:           Tue 19 Nov 2024 13:50:29 +0000
ROA not after:            Tue 18 Nov 2025 13:55:29 +0000
asID:                     265310
IP address blocks:        2804:2de4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.crl
                          rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:cf:13:1c:13:82:1d:61:ec:a1:7c:57:31:31:58:78:ce:82:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCD3FBE64DF83F123DCA7C212089403CD855CD0
        Validity
            Not Before: Nov 19 13:50:29 2024 GMT
            Not After : Nov 18 13:55:29 2025 GMT
        Subject: CN=B91A52662660D11021513EE30E19F0688B87598D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:d3:9e:6e:fd:f1:63:46:33:b7:05:ed:10:
                    6d:bc:e6:3d:35:4d:31:91:46:f9:de:db:37:87:c7:
                    ae:cd:8f:09:0a:0d:25:7f:3f:db:93:40:9f:37:82:
                    d1:ac:5f:e9:b8:8c:04:d2:db:74:a9:21:af:b6:8b:
                    62:d9:8f:69:b2:be:a8:59:f8:5d:6d:19:8e:48:95:
                    26:e4:ef:de:97:35:e4:c9:69:02:25:55:71:0e:5c:
                    85:9e:50:4f:8a:3b:e5:ad:8b:ef:33:99:90:7c:b7:
                    1f:a0:71:f5:3c:d5:79:df:37:d6:c7:05:ef:ae:7d:
                    11:a4:ea:67:72:8b:a4:81:f9:0d:40:c2:b9:fb:15:
                    9f:44:d9:83:f5:50:d0:7c:ce:6e:39:57:8c:d7:80:
                    28:34:1d:38:e1:6b:0b:b3:84:22:bc:1b:0a:b0:22:
                    fb:f1:38:58:3d:9f:ae:03:6e:75:c3:15:55:3e:e5:
                    2e:c6:e4:47:2f:83:a4:8e:cc:cf:4d:ad:3d:4a:56:
                    e9:af:3a:5c:47:9b:aa:f2:32:80:c1:00:a1:6b:31:
                    28:1d:81:4b:14:a9:50:44:d7:66:65:ce:c5:5c:fa:
                    4f:be:e0:4d:c4:75:88:71:e6:eb:48:ef:b1:3a:4f:
                    4e:59:1a:08:07:7f:f4:0a:80:8a:9b:cd:91:0f:59:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:52:66:26:60:D1:10:21:51:3E:E3:0E:19:F0:68:8B:87:59:8D
            X509v3 Authority Key Identifier:
                keyid:AD:CD:3F:BE:64:DF:83:F1:23:DC:A7:C2:12:08:94:03:CD:85:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/323830343a326465343a3a2f33322d313238203d3e20323635333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de4::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:26:c0:29:7c:70:36:ba:32:91:6d:47:5b:c5:9c:d8:b1:
         75:2a:27:d0:9d:61:20:90:74:cd:0c:7a:5d:8e:76:d2:fa:63:
         1e:51:89:b2:e5:80:f0:b4:87:94:b9:cb:55:66:19:06:47:0f:
         5d:19:9c:96:6f:f6:71:4f:2e:60:83:6a:74:1d:c7:56:bb:38:
         9a:af:43:fa:18:93:55:2d:fe:32:9c:57:fb:f2:cc:55:40:e7:
         72:2b:02:e6:90:d2:39:9a:54:bb:d1:a4:e9:4a:81:9d:4e:84:
         d3:29:40:88:78:fc:bb:36:ec:56:68:aa:4c:de:74:da:8f:4b:
         61:ba:15:13:a5:39:8d:70:4a:45:e7:60:f3:18:eb:c0:db:ea:
         50:25:27:dd:f1:12:07:b9:54:e7:73:45:d0:87:53:36:d4:80:
         e8:35:12:ce:e1:de:c9:ea:4b:e7:a2:87:09:8e:0e:7e:59:ed:
         0f:5f:88:9e:db:df:db:85:72:74:10:6b:20:97:de:ee:fa:19:
         14:e8:76:16:44:74:40:3a:50:56:5c:cb:b2:55:0e:f8:2d:fe:
         78:73:60:9d:6b:de:63:df:9d:a0:9c:52:69:2f:72:60:42:6d:
         9b:bb:a7:b1:25:3b:4d:9e:47:dc:b5:70:b6:80:f9:84:39:a1:
         fe:ae:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:40 2024 by rpki-client on console-fra.rpki-client.org