Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa
File:                     323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa (raw, json)
Hash identifier:          tsmJtHS3jm3yfb5tWw7lJ9w6FGHFIlkMOEAXo30e/ts=
Subject key identifier:   8F:5A:2F:17:CF:40:71:51:E2:09:20:D8:6F:C7:1D:0A:91:A4:FA:BA
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       774EFE8DCA19DA03CF339349D1275ED19E366685
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:59 +0000
ROA not before:           Wed 08 May 2024 18:15:59 +0000
ROA not after:            Wed 07 May 2025 18:20:59 +0000
asID:                     52932
IP address blocks:        2804:28b0:e000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4e:fe:8d:ca:19:da:03:cf:33:93:49:d1:27:5e:d1:9e:36:66:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:59 2024 GMT
            Not After : May  7 18:20:59 2025 GMT
        Subject: CN=8F5A2F17CF407151E20920D86FC71D0A91A4FABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:96:e3:d2:e9:a8:95:e1:d8:4b:d8:81:90:
                    f4:d6:32:15:ef:a7:7a:ef:27:03:c0:e0:7f:6e:93:
                    dc:cd:a8:2c:8f:20:f4:47:8e:43:be:cd:2f:fc:4f:
                    bc:0e:45:53:76:46:b7:f4:c1:80:9b:3d:2e:de:8c:
                    8a:f1:44:6a:52:e5:ee:36:80:aa:f0:90:c3:a7:66:
                    35:f6:25:be:d0:52:a7:88:b0:69:e7:88:40:e0:fc:
                    b0:12:c7:20:21:e4:4d:e8:85:0e:d2:ed:23:fc:2d:
                    65:ab:e3:e7:f6:97:c0:7a:b8:02:4b:36:24:b2:60:
                    e9:f6:ef:da:b9:ae:5b:02:78:c5:3e:60:75:b2:46:
                    c6:87:14:dd:f4:90:4d:cb:f2:68:69:68:f9:5a:64:
                    44:49:53:2c:95:fe:f6:bc:c1:c6:ed:f0:0a:bb:da:
                    83:e8:c3:de:26:4f:99:c3:d7:c6:2e:dd:ea:8c:f4:
                    70:e6:d0:99:f7:de:11:8c:67:c8:53:d0:0b:d3:c3:
                    49:da:0d:7e:f4:6e:38:27:91:cd:ca:6f:e5:2d:d1:
                    fb:3f:6f:a3:44:53:64:5c:bf:4d:cf:7f:00:f8:e0:
                    31:77:a7:f4:05:7a:de:17:8e:2a:f2:d1:08:cc:02:
                    69:f8:ca:54:a2:4a:48:ec:84:85:d9:d0:7b:4f:43:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5A:2F:17:CF:40:71:51:E2:09:20:D8:6F:C7:1D:0A:91:A4:FA:BA
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a653030303a3a2f33352d3335203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         08:b9:24:e8:7f:f3:19:7c:73:22:c5:a7:28:64:ba:a1:62:80:
         a0:ad:f4:a2:7e:12:96:4d:28:fc:8c:7f:52:9f:3b:eb:17:4d:
         38:6e:45:43:f3:16:6c:85:1b:e2:c4:b1:68:29:43:a3:39:04:
         66:1b:79:28:d7:ee:67:18:f7:53:ca:61:14:63:0f:73:04:fd:
         23:e3:89:a7:05:29:4c:2f:16:66:32:3c:6e:7a:df:4f:88:01:
         f1:d6:db:8d:45:29:31:b3:de:e0:7b:4d:18:24:24:89:1a:52:
         9b:96:cb:66:48:30:8b:16:6e:19:40:57:5c:1f:c2:07:ae:f1:
         9e:60:3a:30:1f:2f:79:39:6b:6d:61:1e:4f:d2:e1:c2:84:0d:
         81:8f:e4:59:b8:5d:c7:eb:41:18:5b:6f:00:a0:fa:c7:f9:b3:
         38:66:c1:75:1f:3e:81:b0:3a:7a:2d:18:86:93:b4:6f:b8:f4:
         ca:cf:0d:4c:4d:6a:03:6f:9f:4c:52:fa:44:95:ec:4b:2f:2e:
         70:fd:0f:3d:54:57:69:85:dc:d7:20:77:f4:fa:be:8a:69:03:
         0f:62:fd:4a:43:1b:67:57:cb:79:bf:58:e0:93:62:6a:5b:dd:
         05:c5:76:56:e0:6b:3d:66:aa:b0:5e:b2:95:c5:dd:2e:6d:af:
         ab:fb:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org