Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
File:                     323830343a3264383a3a2f33322d3634203d3e203532353332.roa (raw, json)
Hash identifier:          bjAuH992xK9T8otcRWWDnQPQw6HdCBrPgKgHDsrIXsU=
Subject key identifier:   5B:C9:DE:BD:D5:29:A4:7A:1D:06:43:32:BA:EE:C0:BD:6E:87:C9:A4
Certificate issuer:       /CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
Certificate serial:       036627FDF6D74C4D524F388CE206F197A9100168
Authority key identifier: 8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
Signing time:             Mon 24 Jun 2024 18:01:06 +0000
ROA not before:           Mon 24 Jun 2024 17:56:06 +0000
ROA not after:            Mon 23 Jun 2025 18:01:06 +0000
asID:                     52532
IP address blocks:        2804:2d8::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:27:fd:f6:d7:4c:4d:52:4f:38:8c:e2:06:f1:97:a9:10:01:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
        Validity
            Not Before: Jun 24 17:56:06 2024 GMT
            Not After : Jun 23 18:01:06 2025 GMT
        Subject: CN=5BC9DEBDD529A47A1D064332BAEEC0BD6E87C9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:c8:37:7d:ec:5f:36:b0:2f:83:f1:fc:28:
                    07:cd:c8:71:84:61:35:81:4f:b6:91:7e:b1:36:a1:
                    0e:01:29:1a:ba:fd:ea:36:2f:ed:5a:3b:4d:cc:08:
                    76:ea:fc:bc:d6:38:94:d0:63:a6:e3:e7:6a:69:03:
                    eb:48:4c:77:96:13:17:37:42:ed:e9:e7:ad:75:66:
                    0d:53:df:16:5c:ed:74:56:c5:ea:23:5a:bf:09:c7:
                    86:4c:52:84:9c:a3:3a:b0:d5:4c:8b:08:42:5b:64:
                    44:5b:9d:8b:1a:c2:fa:ae:82:b5:0b:9a:0e:52:19:
                    72:1f:02:3c:f2:fa:ad:10:59:ae:4b:b2:3e:71:0f:
                    fa:f6:e2:d9:3a:7e:d2:17:86:1e:bc:0e:4d:6c:fd:
                    2b:8f:37:9a:d3:03:c2:82:1b:5e:61:7f:81:b0:26:
                    8e:0a:9b:2c:ac:3d:4b:31:fc:55:f8:b3:0b:6e:26:
                    7b:71:b8:2a:5b:cd:8e:aa:a8:d9:48:4d:eb:eb:57:
                    54:76:4a:0b:4a:30:18:7a:48:6e:cb:11:c0:f7:e2:
                    bc:18:44:fc:4a:ca:55:de:1a:d0:d5:d1:5d:df:7e:
                    a6:16:54:a4:31:6d:e1:3e:b8:14:c7:3e:ec:ba:5f:
                    99:e3:8d:d0:a3:5d:02:61:18:71:ca:9d:51:cd:b9:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:DE:BD:D5:29:A4:7A:1D:06:43:32:BA:EE:C0:BD:6E:87:C9:A4
            X509v3 Authority Key Identifier:
                keyid:8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:7e:5e:9f:69:26:3f:f8:90:43:23:65:3c:24:72:6a:95:3c:
         0f:80:54:20:20:11:91:ab:95:61:66:d1:46:04:54:4c:df:62:
         93:81:54:3c:c5:b1:b1:54:22:67:a4:44:d8:c9:da:e9:53:14:
         40:b7:d0:35:c6:93:e4:94:31:06:51:40:76:f0:2f:dc:bb:4a:
         1d:68:b2:e9:ee:e9:bf:b1:c3:fe:d4:6c:88:74:00:f8:b5:7e:
         61:49:56:ab:ba:06:d5:8d:54:57:3a:aa:9e:7f:a6:fb:6f:bc:
         6c:83:e0:05:e0:e1:54:0a:a2:e2:d5:d6:34:78:e6:e5:09:fd:
         01:d1:0a:39:f4:e7:93:13:41:65:cd:21:4d:e2:bd:b6:c2:dc:
         64:eb:d0:14:ea:f8:70:23:17:a5:ca:18:92:bb:eb:49:77:81:
         9a:87:50:d3:b5:21:ed:d2:6a:94:b1:f0:5f:ea:ac:ba:8c:b2:
         d6:dd:a9:c1:3b:cf:ad:a4:fd:ca:ae:c0:d8:ad:67:a6:7c:5e:
         3d:78:43:7e:1f:59:67:e0:41:48:b9:d5:04:d8:66:a9:90:d5:
         4b:1e:e7:9b:c3:42:04:72:f2:1e:36:c1:48:6b:7c:31:ee:5e:
         a2:0c:12:35:f9:35:4c:fa:d7:0e:42:b4:ba:94:37:ac:d4:39:
         25:64:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:10 2024 by rpki-client on console-ams.rpki-client.org