Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa
File:                     323830343a6466383a3a2f33322d3634203d3e203532353332.roa (raw, json)
Hash identifier:          HAf38SZdv4irlGJtSMOIcuQQxYouxysNQOYJEW3ZGzE=
Subject key identifier:   8D:A9:E8:48:C6:FA:6E:ED:C7:FC:51:BE:69:20:3F:81:B6:30:06:BC
Certificate issuer:       /CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
Certificate serial:       0E3240A1BEC133B21F2447A55BDE6EBEBA3FC91D
Authority key identifier: 8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa
Signing time:             Mon 24 Jun 2024 18:01:19 +0000
ROA not before:           Mon 24 Jun 2024 17:56:19 +0000
ROA not after:            Mon 23 Jun 2025 18:01:19 +0000
asID:                     52532
IP address blocks:        2804:df8::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:32:40:a1:be:c1:33:b2:1f:24:47:a5:5b:de:6e:be:ba:3f:c9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
        Validity
            Not Before: Jun 24 17:56:19 2024 GMT
            Not After : Jun 23 18:01:19 2025 GMT
        Subject: CN=8DA9E848C6FA6EEDC7FC51BE69203F81B63006BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:80:5c:02:53:e4:af:3c:3a:f4:2f:7b:e4:
                    fa:b0:93:6e:e4:61:e3:1e:9a:65:75:fe:33:ad:9c:
                    9c:eb:42:67:b3:cb:5f:96:1c:36:14:a7:f2:96:b4:
                    cc:1c:41:92:8a:09:92:ff:68:19:3b:b4:2d:0e:ed:
                    9a:f5:26:87:b7:f5:54:bf:1b:97:3b:43:09:e9:c1:
                    75:d9:23:35:1f:84:0b:6e:7c:c0:71:aa:63:06:72:
                    29:30:db:aa:3a:43:d4:29:86:36:cf:7d:52:c1:2c:
                    e2:13:bf:62:25:f1:36:26:d2:35:be:f0:a0:ed:d0:
                    8e:44:e4:6b:fe:ca:12:d7:c1:2e:cb:68:b4:b8:b7:
                    8e:8f:d7:12:6e:a9:ae:06:63:03:46:49:ec:e6:98:
                    0f:9f:8a:ff:45:18:07:70:51:59:03:38:a8:df:17:
                    f8:4d:ec:91:06:ac:ed:82:b3:a0:95:3a:b3:2c:63:
                    62:ef:94:ff:91:29:3b:6b:ce:97:26:07:f0:7e:f1:
                    1c:04:2e:9f:f0:01:c3:43:3c:5f:44:95:f9:36:1c:
                    ae:d2:11:59:81:a3:9e:83:a2:c1:b2:06:6b:31:60:
                    c6:db:17:f4:a6:1a:72:f5:b0:41:73:70:a1:83:c1:
                    66:0b:c2:9a:63:0b:c5:15:07:1a:75:ba:3b:a8:c6:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A9:E8:48:C6:FA:6E:ED:C7:FC:51:BE:69:20:3F:81:B6:30:06:BC
            X509v3 Authority Key Identifier:
                keyid:8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:17:c0:69:05:c8:24:d3:7c:83:a2:6b:a1:92:3a:91:09:
         17:7e:80:67:b1:74:3f:da:b1:99:6c:cf:85:e4:db:6a:7b:3a:
         c0:7e:a4:8c:d5:76:6b:85:d9:13:30:f0:9b:28:05:66:77:4e:
         8c:08:62:08:5c:50:5f:6e:25:1f:14:eb:63:06:ad:d8:c1:7a:
         b1:37:1f:72:61:49:01:1e:59:ec:cc:79:40:91:67:b6:53:20:
         0f:55:5d:15:c4:83:cb:ac:81:e9:d6:18:70:12:d0:2d:f0:9c:
         ca:ec:cf:66:92:8b:d2:cc:cd:3c:4e:f4:a5:30:54:55:8b:97:
         aa:af:23:e6:d4:9b:98:f8:8a:4e:83:ec:40:66:a2:17:ca:14:
         e6:d1:ab:c2:cd:0c:d3:75:3b:9d:f6:0c:03:ac:40:b6:ed:a8:
         19:47:41:7f:35:19:fc:d0:a3:58:c3:1a:ad:a8:02:23:83:a0:
         ac:3e:90:e6:5b:c3:60:95:8f:5e:7c:53:f0:48:02:bc:ab:98:
         aa:82:ab:37:b9:04:a4:e5:e1:4d:84:89:35:13:00:fb:ba:3d:
         54:36:bf:0b:d6:9d:3c:6a:ae:c5:6f:12:02:78:c5:d8:d8:4a:
         c7:b1:c3:da:c7:85:19:00:e4:06:1f:fb:70:a7:c0:38:10:3a:
         a0:de:f8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:18 2024 by rpki-client on console-fra.rpki-client.org