Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/323830343a346639303a3a2f33322d3438203d3e20323638333335.roa
File:                     323830343a346639303a3a2f33322d3438203d3e20323638333335.roa (raw, json)
Hash identifier:          5OCCSLuWpEoaVYpyj8gXEv+3TUFueKY1/f0hW255eRs=
Subject key identifier:   F2:97:B6:5F:2C:64:70:89:E9:10:BA:6A:64:F2:85:10:B1:9B:B8:A8
Certificate issuer:       /CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB
Certificate serial:       50B91C5895F861937C451FAD26362D811CB1B0FE
Authority key identifier: 14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/323830343a346639303a3a2f33322d3438203d3e20323638333335.roa
Signing time:             Thu 04 Apr 2024 17:23:23 +0000
ROA not before:           Thu 04 Apr 2024 17:18:23 +0000
ROA not after:            Thu 03 Apr 2025 17:23:23 +0000
asID:                     268335
IP address blocks:        2804:4f90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl
                          rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 21:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b9:1c:58:95:f8:61:93:7c:45:1f:ad:26:36:2d:81:1c:b1:b0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB
        Validity
            Not Before: Apr  4 17:18:23 2024 GMT
            Not After : Apr  3 17:23:23 2025 GMT
        Subject: CN=F297B65F2C647089E910BA6A64F28510B19BB8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:42:12:ed:75:07:50:1d:1a:d4:47:c9:b2:
                    0b:2b:49:6d:e7:a8:0f:75:97:04:96:8a:0e:b9:9f:
                    2b:52:06:a6:54:02:29:47:1a:83:b1:6a:a8:b9:a0:
                    4e:6e:07:8c:05:35:e2:39:4c:07:63:b7:55:2d:c5:
                    e1:c2:21:8b:fe:60:52:f6:3e:fd:9f:95:17:a2:40:
                    8d:87:61:29:84:ce:36:e3:b8:fa:09:69:a6:94:92:
                    90:cf:ff:fa:4f:2d:93:cb:6a:d2:32:d6:f6:50:7d:
                    cd:d3:d6:c1:10:cd:ad:df:95:4a:eb:b5:c1:66:31:
                    49:ec:c9:0e:0d:d5:8d:78:19:70:03:d0:21:86:e8:
                    f8:33:9d:15:a8:b4:98:f9:3a:f5:9a:a5:45:62:06:
                    f0:5a:be:3c:42:89:af:b1:5e:92:40:c5:1e:6e:b7:
                    17:46:51:a0:43:cb:31:17:1d:9f:ea:e0:94:52:8d:
                    a9:02:06:2f:4d:91:1c:58:d8:58:a2:0b:10:fe:b7:
                    9e:64:ca:6a:02:97:dd:77:a8:e8:e0:1f:5a:9e:12:
                    b2:d4:4e:50:fa:20:bb:31:78:f5:46:a1:e5:9b:ee:
                    3c:47:01:d8:4c:49:73:ec:3e:e0:e1:14:4c:d2:0a:
                    5c:12:b1:2f:4b:76:d7:e8:88:4a:68:0b:d9:56:22:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:97:B6:5F:2C:64:70:89:E9:10:BA:6A:64:F2:85:10:B1:9B:B8:A8
            X509v3 Authority Key Identifier:
                keyid:14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/323830343a346639303a3a2f33322d3438203d3e20323638333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:96:59:d4:16:8f:28:6f:ed:56:85:c3:c4:d7:b2:37:0c:
         8b:5f:9a:f8:ed:86:7d:bc:96:10:e2:38:bc:fd:53:af:b9:b6:
         b3:9d:31:71:be:b5:8a:a7:94:40:2f:0e:88:54:fb:a9:a5:4a:
         3d:18:b4:1b:d2:ff:db:61:98:44:a8:90:58:73:3f:62:9a:77:
         d6:e8:a6:d6:78:0e:d6:78:07:15:6f:c3:52:92:19:b2:51:fa:
         ba:48:c6:ec:a8:86:23:83:40:ab:b0:24:c7:5e:2e:dc:7c:a9:
         84:f7:6f:38:b7:52:61:d9:22:60:13:f8:c6:db:cd:31:f8:92:
         c5:e7:99:62:08:76:b8:6e:6f:93:6c:21:87:05:11:3e:f6:34:
         8c:ac:08:1a:fd:fc:8b:8f:2f:d0:8a:20:3a:f5:2f:30:7a:c1:
         52:18:23:9a:ba:06:c2:27:a9:18:75:b0:5e:a1:52:4a:57:3e:
         a0:40:e6:55:99:0b:a9:05:35:53:cd:47:38:c7:c8:eb:55:9f:
         ee:ed:8d:b7:f0:4c:07:87:25:5c:50:69:8a:1d:f1:68:ed:38:
         34:c8:f5:82:9e:fd:3e:5c:05:20:98:3f:85:07:f6:8f:96:69:
         9a:79:29:82:9f:86:e4:14:8e:c0:a4:2c:61:8d:1f:b2:b9:6d:
         e9:46:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:46:20 2024 by rpki-client on console-fra.rpki-client.org