Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/323830343a346238383a3a2f33322d313238203d3e20323637333132.roa
File:                     323830343a346238383a3a2f33322d313238203d3e20323637333132.roa (raw, json)
Hash identifier:          f49XJuEoYzHsJmwONzLxfJMQBiqxojMw8ylQT/vAxEA=
Subject key identifier:   A9:63:2E:22:77:FC:5B:E1:A0:9E:04:23:AF:54:99:BE:80:CC:32:C3
Certificate issuer:       /CN=94275586519E58548913245A9FBA5703C7F010D4
Certificate serial:       665817B8CB2B64015997D79B459AA1CBF8296C6C
Authority key identifier: 94:27:55:86:51:9E:58:54:89:13:24:5A:9F:BA:57:03:C7:F0:10:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94275586519E58548913245A9FBA5703C7F010D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/323830343a346238383a3a2f33322d313238203d3e20323637333132.roa
Signing time:             Thu 04 Apr 2024 00:05:52 +0000
ROA not before:           Thu 04 Apr 2024 00:00:52 +0000
ROA not after:            Thu 03 Apr 2025 00:05:52 +0000
asID:                     267312
IP address blocks:        2804:4b88::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/94275586519E58548913245A9FBA5703C7F010D4.crl
                          rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/94275586519E58548913245A9FBA5703C7F010D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94275586519E58548913245A9FBA5703C7F010D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 04:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:58:17:b8:cb:2b:64:01:59:97:d7:9b:45:9a:a1:cb:f8:29:6c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94275586519E58548913245A9FBA5703C7F010D4
        Validity
            Not Before: Apr  4 00:00:52 2024 GMT
            Not After : Apr  3 00:05:52 2025 GMT
        Subject: CN=A9632E2277FC5BE1A09E0423AF5499BE80CC32C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:13:a3:0e:ea:2d:c5:1d:4b:82:5c:35:8a:
                    4a:c8:52:b6:c2:51:9f:30:64:49:3f:0e:a9:cf:11:
                    82:34:cb:4f:29:0e:21:9f:b2:ef:3e:40:4a:65:92:
                    7f:48:71:70:13:a6:97:ff:a5:0c:d9:61:be:8d:23:
                    35:d7:db:dc:f5:0b:7c:4c:7d:c6:a5:77:de:e8:cf:
                    6c:61:9d:e9:b7:05:4e:df:0e:85:de:ea:fe:e1:47:
                    c0:79:41:19:e4:a2:2d:e2:f3:f3:7c:9a:ad:88:8b:
                    6f:a4:6a:09:69:0c:46:b1:6b:60:86:82:d1:1f:0e:
                    da:e3:e0:fd:da:51:36:68:5d:fc:ee:ed:ec:0e:26:
                    9c:59:b3:a4:f5:e7:d7:a4:c2:8e:ca:8e:bb:c4:b9:
                    b5:4c:a9:77:7e:51:db:81:e2:73:8c:56:5c:55:d8:
                    15:dd:a0:54:3c:56:12:6e:ad:8a:a7:cf:21:9e:be:
                    58:d3:ae:43:cd:03:b9:29:ae:ba:f4:44:5a:13:68:
                    eb:ec:7d:a0:6c:1c:a4:88:64:77:f6:90:82:bb:3a:
                    07:0c:94:23:79:f0:f8:60:fe:9a:62:fd:7e:43:bb:
                    21:8e:0a:69:cb:29:d6:9c:ce:34:45:a5:7a:92:b5:
                    d9:72:04:77:6b:81:ba:b6:a1:fa:c5:68:18:a3:47:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:63:2E:22:77:FC:5B:E1:A0:9E:04:23:AF:54:99:BE:80:CC:32:C3
            X509v3 Authority Key Identifier:
                keyid:94:27:55:86:51:9E:58:54:89:13:24:5A:9F:BA:57:03:C7:F0:10:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/94275586519E58548913245A9FBA5703C7F010D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94275586519E58548913245A9FBA5703C7F010D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/323830343a346238383a3a2f33322d313238203d3e20323637333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:12:88:c4:f2:00:28:79:39:b4:9f:b7:5f:e1:99:96:2c:5b:
         71:99:b5:ca:a8:2c:26:9f:d6:2d:b9:1c:61:f2:28:f2:bb:4e:
         e3:2b:49:56:f1:7c:4f:40:d7:fb:b9:ac:8b:73:c5:c5:f2:8d:
         84:5a:93:e3:6d:5f:ad:57:c9:39:36:38:0c:ab:e6:1e:54:3b:
         38:fe:92:f8:bd:77:f8:f7:16:92:3e:65:6e:d0:d7:03:a7:3a:
         03:dc:7d:31:3e:77:6d:c9:51:03:37:c4:0c:2d:a2:ba:35:8a:
         66:6d:ca:21:ef:95:e8:3e:af:93:a4:47:e9:1d:e6:1c:a1:0f:
         04:c3:80:1a:78:84:d6:4b:da:1c:a7:35:89:99:76:2a:6c:7c:
         f1:ac:2f:17:6e:dd:e1:77:ef:55:3d:76:4a:5a:c4:9c:5c:2b:
         49:b4:8e:c9:b0:71:be:4d:71:81:96:4e:d9:1f:90:ee:cb:59:
         28:e1:f7:65:05:c8:a7:46:d3:0b:df:23:16:41:15:b0:e4:03:
         bd:eb:c1:91:20:34:19:d8:93:ff:85:73:3b:1b:4a:ed:30:c7:
         23:68:a6:6d:f6:79:60:ad:de:3b:e4:85:91:7e:83:0d:d8:ae:
         09:24:de:06:29:18:c5:04:6c:4b:92:dc:8b:88:1c:d9:fc:49:
         13:80:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 06:27:55 2024 by rpki-client on console-fra.rpki-client.org