Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/323830343a343362303a3a2f33322d3438203d3e20323637353834.roa
File:                     323830343a343362303a3a2f33322d3438203d3e20323637353834.roa (raw, json)
Hash identifier:          EExxcXsNOwVe7HhG1UroH8Z/vs4cGERvk+9KcY+cEy8=
Subject key identifier:   F2:4B:B8:8D:28:18:3B:15:FF:EC:70:4E:B8:3B:7B:86:4B:35:2C:4E
Certificate issuer:       /CN=2EE98CD7A649AE2259E9DAD3099736C3C595E9D5
Certificate serial:       716C1A0F7AAD19A0D2D26380D168C7E8EEC6A119
Authority key identifier: 2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/323830343a343362303a3a2f33322d3438203d3e20323637353834.roa
Signing time:             Thu 04 Apr 2024 11:11:22 +0000
ROA not before:           Thu 04 Apr 2024 11:06:22 +0000
ROA not after:            Thu 03 Apr 2025 11:11:22 +0000
asID:                     267584
IP address blocks:        2804:43b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.crl
                          rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6c:1a:0f:7a:ad:19:a0:d2:d2:63:80:d1:68:c7:e8:ee:c6:a1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE98CD7A649AE2259E9DAD3099736C3C595E9D5
        Validity
            Not Before: Apr  4 11:06:22 2024 GMT
            Not After : Apr  3 11:11:22 2025 GMT
        Subject: CN=F24BB88D28183B15FFEC704EB83B7B864B352C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:66:91:09:08:d8:a0:43:c7:94:92:a1:a0:
                    3a:60:8a:db:f7:8d:c1:40:c6:ef:8b:83:2b:9e:58:
                    ae:1f:41:94:a4:45:be:7a:70:4b:69:b1:8b:43:b1:
                    8e:90:04:24:19:73:f5:96:7d:65:ac:3d:89:e7:64:
                    eb:61:96:89:6b:a6:c0:2f:8c:bc:c9:b9:40:c1:59:
                    ed:ac:3e:50:23:34:5b:55:1d:74:b7:8a:c2:d1:4c:
                    6d:de:26:28:c7:76:74:9c:c3:86:86:03:79:11:b0:
                    00:a7:92:2e:8e:46:64:23:bd:ea:8d:ab:cd:39:5e:
                    f0:07:6c:22:89:52:2f:61:eb:0e:cd:e1:88:89:d6:
                    65:6d:fe:49:84:71:92:13:cf:2b:fa:e8:99:ba:cf:
                    f8:e0:e0:77:3c:2a:71:58:4e:40:e3:d8:3b:b4:85:
                    87:0b:b3:db:fa:73:d8:69:e9:db:1d:c1:a2:ca:eb:
                    1c:d9:e0:25:4f:19:09:3c:a2:fd:7b:09:95:1d:e8:
                    4d:f6:96:30:b1:1d:6a:5e:19:54:fa:b1:11:ff:7b:
                    7b:83:29:e2:3c:ba:70:19:54:d3:11:a6:21:e0:8b:
                    eb:a8:ce:96:88:ef:1a:ba:da:2f:53:2a:17:66:78:
                    a5:d6:6e:68:eb:b3:4e:91:e5:a0:65:14:0a:a3:0a:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4B:B8:8D:28:18:3B:15:FF:EC:70:4E:B8:3B:7B:86:4B:35:2C:4E
            X509v3 Authority Key Identifier:
                keyid:2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/323830343a343362303a3a2f33322d3438203d3e20323637353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:c3:42:d4:6c:72:12:69:2e:7f:da:e5:84:a2:da:23:cc:82:
         07:76:b3:10:29:62:17:37:76:36:77:1c:5e:6c:73:bc:3c:69:
         fc:ac:87:e4:1f:0f:1a:ad:41:a3:d3:03:aa:9f:c6:44:27:62:
         f4:dd:fc:04:d8:89:93:51:bc:39:92:30:74:75:90:e3:00:d0:
         0b:ce:76:76:67:05:d7:6e:de:b4:d3:4f:7d:83:89:3f:02:0f:
         b4:bf:0f:a3:5b:a1:c7:b2:3c:0d:5a:f0:99:7b:71:78:2e:18:
         0b:7b:92:43:af:f0:01:06:1e:7a:1a:c3:7f:fa:3f:45:cf:68:
         cd:20:e6:3a:0f:47:78:fb:b1:ed:12:54:15:e6:79:b0:37:8b:
         3b:41:89:c8:ab:d6:08:be:84:ee:76:98:c6:76:c6:38:ac:d8:
         cf:04:b9:96:2a:20:66:5d:38:cf:2f:a5:51:8a:f4:e2:89:d7:
         ed:93:4c:57:04:b7:66:4c:d8:26:a5:06:4f:8e:78:40:87:fd:
         fd:a4:0a:a7:27:cf:55:c9:c0:7e:0c:d4:e6:23:3a:cd:b3:26:
         62:d2:3c:b6:0c:fe:1a:17:8a:e2:38:b9:ff:7d:3d:3a:3b:a0:
         82:40:b4:e2:34:1e:76:73:76:df:c9:21:c7:fe:be:00:36:26:
         2c:d0:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:47 2024 by rpki-client on console-ams.rpki-client.org