Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a3a2f33322d313238203d3e20323636333736.roa
File:                     323830343a333664383a3a2f33322d313238203d3e20323636333736.roa (raw, json)
Hash identifier:          TLrKnf3cwii0T8eIRiIxn3ypJsOs/sU2VRa/br/mizo=
Subject key identifier:   10:A4:4C:D2:EE:68:3F:96:EE:1F:08:F7:2B:63:D6:07:76:51:09:BF
Certificate issuer:       /CN=165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA
Certificate serial:       47AFFA866454FF20CC7E74B47CAF84BDBF825298
Authority key identifier: 16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a3a2f33322d313238203d3e20323636333736.roa
Signing time:             Wed 29 May 2024 12:06:41 +0000
ROA not before:           Wed 29 May 2024 12:01:41 +0000
ROA not after:            Wed 28 May 2025 12:06:41 +0000
asID:                     266376
IP address blocks:        2804:36d8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.crl
                          rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:af:fa:86:64:54:ff:20:cc:7e:74:b4:7c:af:84:bd:bf:82:52:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA
        Validity
            Not Before: May 29 12:01:41 2024 GMT
            Not After : May 28 12:06:41 2025 GMT
        Subject: CN=10A44CD2EE683F96EE1F08F72B63D607765109BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:f9:e5:34:bf:ad:b5:29:15:ca:50:c8:5f:
                    d3:18:6e:6d:b7:87:32:a2:c0:43:d4:3e:87:f6:2e:
                    44:a6:34:19:de:c9:a5:b7:f8:6f:27:9d:7e:af:c9:
                    5c:c0:34:b4:7c:ff:89:7d:a7:3a:a0:8e:df:ba:c5:
                    4e:05:ed:51:04:ff:43:7c:81:27:57:f8:86:69:95:
                    10:f2:df:1f:35:13:2a:cb:35:c7:f3:3c:7e:3d:5a:
                    b1:b0:f4:01:f0:b9:00:87:19:f0:e9:00:01:9c:83:
                    5a:73:40:1a:a0:19:5f:b9:57:11:23:75:dd:d6:01:
                    36:58:60:b5:8c:99:7f:38:3d:52:93:fd:ab:68:35:
                    22:fa:a2:7f:53:88:60:6c:1a:76:62:16:56:e1:59:
                    bc:bb:8c:e2:46:55:1e:e2:08:7d:fc:82:5f:9c:66:
                    f2:fd:a2:f6:3b:b7:cd:66:60:24:e0:ed:90:7e:fd:
                    55:ce:6f:4d:96:bd:08:0c:ec:a6:2c:1a:60:74:d9:
                    19:88:0e:c2:bc:89:f6:41:c1:f3:5b:f6:21:c4:53:
                    cb:c8:e9:db:d4:60:09:e2:7d:09:e1:d4:7c:f4:03:
                    41:47:e2:eb:33:16:34:61:bc:22:0c:94:d2:a8:37:
                    ce:7a:62:f8:c9:ec:0d:5d:87:f7:93:03:17:43:58:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A4:4C:D2:EE:68:3F:96:EE:1F:08:F7:2B:63:D6:07:76:51:09:BF
            X509v3 Authority Key Identifier:
                keyid:16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a3a2f33322d313238203d3e20323636333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:0d:8f:c5:ad:3f:fc:c8:7f:42:23:7c:11:97:5a:26:45:
         11:bc:18:e7:01:02:25:49:59:74:f6:6e:c3:e7:24:6c:61:1d:
         1a:f0:83:91:c2:7f:28:f2:a6:47:64:96:29:e7:ea:43:42:51:
         00:77:e8:3a:e0:f3:38:52:68:a1:25:c7:65:77:de:08:05:55:
         a2:ca:78:cf:01:d3:fa:4b:01:54:35:0e:e8:93:ef:67:b4:1f:
         d5:2f:7a:09:ab:dd:3c:fb:29:eb:96:13:02:6c:19:70:08:36:
         d9:9b:53:ac:bc:99:d5:9c:4b:f0:85:11:33:20:4d:52:67:03:
         8e:11:ea:4f:2e:4f:56:b4:be:fb:1b:34:3d:12:30:f6:c9:0a:
         4c:b4:6d:41:9b:12:89:33:09:e0:a8:ee:bb:07:5c:ec:f4:cb:
         49:be:7d:f5:ea:56:f3:cf:0b:55:fe:af:0c:e1:a0:be:f9:a3:
         65:e6:51:90:27:27:8c:14:bc:9a:9e:29:2e:64:ac:09:5e:d8:
         a8:24:60:de:ff:99:70:86:48:0c:5f:1a:1c:ed:74:81:d2:d5:
         c8:0e:1b:79:e0:06:3a:8b:db:8d:5a:08:f4:9a:7a:62:ba:8a:
         0c:85:ea:c3:34:62:f9:77:6c:fe:e0:e1:c7:80:46:88:c5:6c:
         63:1e:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:40:12 2024 by rpki-client on console-fra.rpki-client.org