Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33332d3333203d3e20323730363833.roa
File:                     323830343a366663343a3a2f33332d3333203d3e20323730363833.roa (raw, json)
Hash identifier:          YJ7KH3nhoAkdC00h5neKD/OWTxec8U4h5L1R0JYnuLg=
Subject key identifier:   58:11:5B:C6:AE:D0:B4:A5:53:50:D1:C3:64:36:C3:DA:6A:BC:B9:49
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       221F292349F08466940DC3BA835B2A830DFAB9B3
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33332d3333203d3e20323730363833.roa
Signing time:             Thu 04 Apr 2024 02:59:16 +0000
ROA not before:           Thu 04 Apr 2024 02:54:16 +0000
ROA not after:            Thu 03 Apr 2025 02:59:16 +0000
asID:                     270683
IP address blocks:        2804:6fc4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1f:29:23:49:f0:84:66:94:0d:c3:ba:83:5b:2a:83:0d:fa:b9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Apr  4 02:54:16 2024 GMT
            Not After : Apr  3 02:59:16 2025 GMT
        Subject: CN=58115BC6AED0B4A55350D1C36436C3DA6ABCB949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:52:a3:1d:14:5c:aa:76:df:6a:f0:41:1b:
                    1a:c1:53:f1:9c:06:4a:af:9a:85:08:bc:c4:f1:14:
                    30:90:1c:9f:cb:cc:a6:55:64:4a:13:f0:28:a1:68:
                    22:52:54:9c:e3:0c:c9:53:80:43:65:15:59:d2:d2:
                    88:f3:62:90:fb:44:9a:8a:ff:52:13:ea:22:41:85:
                    b9:24:40:a6:41:fc:12:e9:3c:d6:89:fb:25:6d:e2:
                    6f:43:b3:29:72:e8:48:cd:61:61:bd:60:ef:ef:7b:
                    2e:d6:76:30:b6:f9:91:41:a0:e3:3c:73:6c:3d:07:
                    79:ec:21:1a:a1:3f:26:ec:44:38:13:3e:94:ca:d3:
                    60:7b:b4:c7:1e:65:64:0b:50:40:d7:74:1d:19:2e:
                    35:57:de:35:8e:98:97:0d:aa:b5:1a:52:07:42:70:
                    18:77:b1:6b:a9:f1:33:47:8b:bf:d1:ab:c0:cc:5f:
                    f6:33:09:ad:ed:a9:6e:86:b2:34:0e:7e:39:b7:a6:
                    75:3d:aa:07:b9:e9:d0:8a:02:41:f4:73:9e:b4:60:
                    1b:7d:57:31:05:bf:49:4a:fe:0e:e4:1e:b7:a4:f5:
                    4b:fe:b2:ed:54:85:ac:5f:b4:e3:76:14:34:f9:97:
                    da:48:f5:ec:d9:71:04:21:3c:10:9c:72:cc:9c:24:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:5B:C6:AE:D0:B4:A5:53:50:D1:C3:64:36:C3:DA:6A:BC:B9:49
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33332d3333203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:0b:8a:a5:3f:e4:b1:e3:fa:ff:cc:0e:6e:e3:24:fa:18:e1:
         d8:f3:1d:95:59:67:10:02:39:1e:96:e4:dd:27:ad:24:ac:3c:
         d2:ae:47:90:04:45:38:e5:b9:81:c4:a1:9f:8b:d2:67:c8:9b:
         98:c1:97:09:6c:fb:31:cc:47:e1:c8:f5:37:50:16:20:67:33:
         3e:e3:5d:ee:e8:5f:17:9d:b5:76:cc:9b:aa:59:0d:49:8e:7c:
         c8:9b:5b:7f:46:0e:68:ee:8f:17:4d:96:8c:15:4a:82:db:e3:
         72:4e:85:aa:f4:e1:9c:09:ba:d6:8f:a5:65:73:96:1d:e5:0b:
         2e:30:ed:de:96:55:ae:ee:cd:b0:c1:da:f0:1f:3d:d9:a5:59:
         c4:d9:e9:2c:fa:d0:ec:c3:ba:32:c8:68:54:a1:bd:f6:5e:c4:
         e7:ec:40:1e:a4:17:52:39:05:49:f3:2c:93:4b:19:44:8d:30:
         e6:79:fa:7c:4b:0d:4b:2a:ba:50:3c:e0:fd:9b:d6:de:cb:d0:
         6e:81:32:0a:7d:c0:cb:c6:f5:d3:60:75:3b:7e:34:7c:88:ce:
         fa:fa:97:75:ff:52:06:f8:87:bf:e8:5a:ce:e7:cb:e7:35:ff:
         1a:60:c3:3c:98:20:32:6c:72:06:84:9d:74:15:24:cc:e7:18:
         49:64:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org