Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/323830343a353761343a3a2f33322d3332203d3e20323638303737.roa
File:                     323830343a353761343a3a2f33322d3332203d3e20323638303737.roa (raw, json)
Hash identifier:          2F5SowteeW5hU8O+KSkBimi6o3jYC5gMLG3VjpkDoF4=
Subject key identifier:   2D:91:6E:AE:8F:E9:70:B4:D1:F4:78:54:3F:18:47:E1:5F:82:CF:AB
Certificate issuer:       /CN=EEAED5639DA591A226FB7469252567652499ADA3
Certificate serial:       298559EEDD6C3C1C51B44962A053339D4CC21D7A
Authority key identifier: EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/323830343a353761343a3a2f33322d3332203d3e20323638303737.roa
Signing time:             Wed 03 Apr 2024 18:43:07 +0000
ROA not before:           Wed 03 Apr 2024 18:38:07 +0000
ROA not after:            Wed 02 Apr 2025 18:43:07 +0000
asID:                     268077
IP address blocks:        2804:57a4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:85:59:ee:dd:6c:3c:1c:51:b4:49:62:a0:53:33:9d:4c:c2:1d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAED5639DA591A226FB7469252567652499ADA3
        Validity
            Not Before: Apr  3 18:38:07 2024 GMT
            Not After : Apr  2 18:43:07 2025 GMT
        Subject: CN=2D916EAE8FE970B4D1F478543F1847E15F82CFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:27:18:50:b2:c2:5a:ea:74:c6:df:43:5e:
                    ce:ab:e9:2c:e4:71:13:91:f2:a1:ed:b8:26:e4:b6:
                    12:4b:15:78:6a:d5:45:6d:68:b4:e0:9c:65:a2:c1:
                    1b:19:1d:e2:5f:9e:da:ab:82:26:b8:4e:d1:a9:45:
                    de:ec:2a:e2:d8:b8:20:4b:f8:5b:eb:54:81:c7:60:
                    92:e7:10:87:d4:d4:5d:bd:26:5d:a9:c3:fa:12:5f:
                    ef:11:52:3e:99:26:1f:c3:fe:f4:b8:f4:f2:31:27:
                    c7:d1:19:ad:fe:5f:dc:db:56:52:88:ef:3a:00:8a:
                    bc:99:b3:85:1f:5b:2e:f2:3a:97:06:44:10:d5:04:
                    24:98:71:49:36:44:34:d9:0d:b9:0b:85:72:3a:e5:
                    0b:3b:4c:5f:9b:ed:c2:ca:d3:b9:71:7a:66:6c:a9:
                    a5:fb:1e:13:17:4e:8b:5c:2c:86:db:aa:3e:2f:5b:
                    25:8a:a5:a9:0b:00:e4:fa:e0:ba:a5:32:7c:f9:93:
                    9a:09:0f:40:7f:ad:b5:bb:83:54:69:d5:fa:7c:4d:
                    b9:ad:cd:4b:6f:ef:56:a3:e2:c1:c9:ea:52:56:c8:
                    e2:0d:0d:c2:31:4f:94:00:ed:68:a8:60:81:28:9d:
                    44:a5:d5:92:8e:d3:95:30:74:f8:1e:75:bd:fd:71:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:91:6E:AE:8F:E9:70:B4:D1:F4:78:54:3F:18:47:E1:5F:82:CF:AB
            X509v3 Authority Key Identifier:
                keyid:EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/323830343a353761343a3a2f33322d3332203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:61:f3:d7:4b:42:42:27:67:74:09:b7:83:22:16:81:20:
         99:8b:ff:f6:84:e7:4b:1f:2d:c4:ba:68:2f:a6:09:bd:ee:2c:
         62:d5:70:08:b9:c8:41:64:3f:35:fd:02:4e:5c:48:15:98:90:
         23:51:3d:b0:af:7f:f4:72:82:49:21:4e:b0:09:b8:3c:33:06:
         f8:f0:a4:a1:23:31:95:34:af:94:5f:79:03:f4:5d:0f:3d:31:
         b5:70:fd:30:28:cd:a2:51:7a:b2:4e:9f:a1:2b:e4:6f:a5:29:
         cd:1e:b4:ca:6f:d8:19:07:76:cb:bb:94:9b:47:a1:00:b1:ef:
         42:2e:3a:c5:b2:b1:93:b3:71:e1:ab:79:dc:00:ef:55:9d:c0:
         4e:79:d8:56:1a:32:a1:4d:7e:5e:05:58:1e:d2:63:1c:b7:b4:
         a4:99:35:93:61:25:e1:f8:12:b9:ab:59:b7:79:65:fd:86:14:
         db:37:a5:ea:94:e9:96:39:59:f9:a2:b9:56:06:63:36:00:8b:
         72:67:92:1f:db:ff:92:92:34:5a:31:cf:d7:15:a1:65:b7:86:
         ef:3f:cf:81:4c:9d:37:d5:8c:5f:a8:e7:36:3c:cd:39:03:d1:
         fd:53:fc:67:ec:eb:83:4a:a8:b5:d2:2d:c9:fb:f0:1e:48:58:
         b9:25:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org