Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
File:                     323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (raw, json)
Hash identifier:          5Jq4uLgz8jD2EFtqXErRufrKTRnQ4gMxPCBcb1CVHbE=
Subject key identifier:   0E:55:EB:88:2D:75:A0:7D:61:3A:6D:25:E3:52:91:42:C9:DC:08:0B
Certificate issuer:       /CN=E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3
Certificate serial:       409B5D5DE70A013981521D1F3628AE235020082D
Authority key identifier: E2:72:A9:E5:EF:50:88:38:8C:B8:E9:AE:9F:34:BC:0E:52:0F:1D:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
Signing time:             Mon 20 May 2024 18:45:20 +0000
ROA not before:           Mon 20 May 2024 18:40:20 +0000
ROA not after:            Mon 19 May 2025 18:45:20 +0000
asID:                     266343
IP address blocks:        2804:365c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.crl
                          rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9b:5d:5d:e7:0a:01:39:81:52:1d:1f:36:28:ae:23:50:20:08:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3
        Validity
            Not Before: May 20 18:40:20 2024 GMT
            Not After : May 19 18:45:20 2025 GMT
        Subject: CN=0E55EB882D75A07D613A6D25E3529142C9DC080B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:75:2c:8d:15:d2:cd:50:af:ac:b1:75:50:
                    47:c0:ae:18:e9:f7:82:17:f4:60:c7:b4:ed:47:1c:
                    31:b6:08:ff:ce:c0:1f:69:37:ef:4f:d7:30:82:1b:
                    04:cb:28:3a:05:2d:05:cd:37:48:a6:59:49:7e:2d:
                    ac:3e:2d:8d:b2:2b:36:ba:11:fe:04:57:1c:94:e8:
                    fc:b0:25:d2:95:32:6d:f6:58:7f:00:a7:f7:e0:5f:
                    7c:49:de:b4:d8:3e:40:33:73:18:8d:ff:97:cb:18:
                    e7:73:c4:d7:ca:f0:ae:b1:40:70:77:4b:24:2e:7f:
                    92:55:2a:42:2a:df:3c:70:59:c8:fc:40:f5:77:9f:
                    a3:d3:94:0e:fd:f1:0e:10:d3:63:7e:e0:42:a1:bf:
                    ac:00:21:fe:fb:56:36:c1:9b:15:b3:fb:a7:98:c6:
                    52:02:31:50:91:11:c9:a1:f2:44:68:c3:b4:1a:ff:
                    f7:f8:65:7d:77:3e:81:39:30:de:a8:8c:1e:83:63:
                    af:71:11:dd:b9:0e:90:e3:b8:eb:e3:95:e6:58:d7:
                    7f:55:29:75:95:dd:ec:0e:ad:a5:6f:d4:28:9f:a8:
                    ec:1d:12:af:f0:c5:e5:2b:4c:99:4b:b8:f8:f0:15:
                    f8:d9:40:19:90:1c:3b:77:81:2d:57:ac:4e:17:76:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:55:EB:88:2D:75:A0:7D:61:3A:6D:25:E3:52:91:42:C9:DC:08:0B
            X509v3 Authority Key Identifier:
                keyid:E2:72:A9:E5:EF:50:88:38:8C:B8:E9:AE:9F:34:BC:0E:52:0F:1D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:365c::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:59:18:9e:37:12:74:24:9e:aa:cf:ed:50:18:26:e1:e9:40:
         0a:ef:d6:b2:de:3b:b1:65:5c:2c:c7:ca:d7:a4:17:de:9b:34:
         0b:2b:06:c9:91:9a:ad:df:79:c2:c9:23:28:b9:79:18:94:be:
         13:1e:8c:28:b5:c8:9f:08:dd:2d:14:b9:f3:7c:8b:dd:dc:d7:
         2c:14:ee:29:0c:71:17:08:b3:89:d2:33:33:58:0a:fc:8f:f7:
         56:68:8e:bb:59:56:51:d1:d9:93:8c:fb:61:bc:5a:06:30:93:
         0d:52:84:3a:4c:a6:c2:d0:a6:f5:67:f3:5c:ba:fc:2e:3f:31:
         58:19:23:28:4f:b6:2c:a4:cd:73:a9:3f:4b:0b:96:ba:f3:93:
         88:f2:1e:f1:c6:5a:c8:a6:3a:b3:8c:08:c0:7e:b5:7b:29:a6:
         d4:80:46:4a:ce:56:78:ac:3e:fd:ab:c3:73:57:6a:8d:1f:dc:
         fd:09:b5:aa:95:9d:8c:a9:f8:e6:00:84:33:e5:6c:a5:c2:c2:
         83:57:c6:be:02:6a:f4:dc:17:5b:30:10:90:10:f3:60:aa:2b:
         55:0a:49:c9:23:cb:ce:ff:f5:db:b6:e5:b3:3e:4b:35:2e:33:
         07:b9:70:ec:1e:e6:f3:df:33:b2:a5:88:5f:75:78:a2:a6:01:
         ef:65:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 10:45:01 2024 by rpki-client on console-ams.rpki-client.org