Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa
File:                     323830343a363738303a3a2f33322d3332203d3e20323639363332.roa (raw, json)
Hash identifier:          2P42e6oAJIS39S5ymsDO6PExItQZFge3Fz7529MiJS4=
Subject key identifier:   A2:39:3A:C3:5D:C0:32:7A:6F:34:8A:8A:F6:76:0D:50:73:B9:29:0C
Certificate issuer:       /CN=ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2
Certificate serial:       2B69173BE3FCEC9488DD5C993177638F3D44AEE6
Authority key identifier: ED:51:66:AD:49:A8:DC:BB:F4:67:7B:EA:A2:FC:8A:73:E2:F0:60:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa
Signing time:             Thu 04 Apr 2024 02:51:36 +0000
ROA not before:           Thu 04 Apr 2024 02:46:36 +0000
ROA not after:            Thu 03 Apr 2025 02:51:36 +0000
asID:                     269632
IP address blocks:        2804:6780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.crl
                          rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 16:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:69:17:3b:e3:fc:ec:94:88:dd:5c:99:31:77:63:8f:3d:44:ae:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2
        Validity
            Not Before: Apr  4 02:46:36 2024 GMT
            Not After : Apr  3 02:51:36 2025 GMT
        Subject: CN=A2393AC35DC0327A6F348A8AF6760D5073B9290C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:2c:b7:5f:77:fd:b6:ae:3c:ac:dc:5b:68:
                    e7:1b:55:79:3a:47:b3:a2:7d:59:0d:56:2b:5b:dc:
                    d5:d1:69:48:f9:4c:35:b7:c7:aa:cb:de:6b:76:52:
                    58:2b:16:3e:59:ba:91:04:52:2b:00:30:30:bc:44:
                    63:c3:51:76:48:01:d7:d0:89:c7:30:f1:85:fc:0d:
                    d6:80:ff:eb:b3:a6:31:3f:c5:7b:ba:67:5a:9d:85:
                    4a:f5:e0:80:73:3d:7e:1c:9f:e8:9d:5f:64:61:38:
                    39:04:8c:94:87:78:c2:b0:c0:0a:09:06:9f:16:76:
                    5c:88:2c:b8:38:d8:2f:6d:66:ed:ed:81:61:77:1f:
                    0e:2f:fd:49:3f:1d:b1:f5:43:35:11:eb:ee:b2:7d:
                    63:e6:ed:0c:18:a6:32:03:59:f3:7f:a2:36:de:28:
                    c3:08:ec:47:1a:51:f3:30:82:40:00:5a:a0:40:e0:
                    44:e3:6f:9c:25:9f:71:52:5f:5b:48:9d:b1:95:5a:
                    ac:e2:c9:90:70:27:6d:7e:93:94:31:08:08:12:10:
                    f2:fe:4f:49:aa:db:11:ad:8d:c8:0a:e1:ba:39:74:
                    0b:b7:84:da:2a:71:72:dd:d6:05:c9:d4:2b:b1:67:
                    94:95:e7:1f:9c:4f:45:b5:3b:50:ff:6d:ef:83:92:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:39:3A:C3:5D:C0:32:7A:6F:34:8A:8A:F6:76:0D:50:73:B9:29:0C
            X509v3 Authority Key Identifier:
                keyid:ED:51:66:AD:49:A8:DC:BB:F4:67:7B:EA:A2:FC:8A:73:E2:F0:60:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:ee:91:00:2d:a7:d2:a3:19:80:63:29:d5:37:8c:ef:4d:a2:
         18:31:d7:31:1c:86:0a:07:57:0a:df:18:24:01:a7:d2:55:9d:
         07:c5:48:75:c4:06:08:86:d8:76:50:2f:d8:4d:7d:a1:a3:2c:
         31:cf:e4:07:b5:78:fe:ae:34:48:40:fc:90:72:3e:5c:32:42:
         21:1c:7e:6f:2f:26:17:bf:cf:d8:d4:3e:9e:01:0c:fd:a8:25:
         2a:9a:41:05:ca:0a:2f:df:56:b0:0f:1b:fd:cb:55:b3:dd:71:
         e8:3e:ed:c2:2c:0c:20:5b:be:3f:2c:8d:7e:6d:f8:30:ec:6d:
         f6:ea:7f:d8:06:ee:96:18:d0:1a:b8:c0:5b:fd:f7:33:16:09:
         19:70:35:22:4d:9a:15:24:f6:2e:f4:0c:a6:a4:96:8b:4b:6a:
         3c:f3:c4:15:6c:93:58:78:91:a6:73:a7:2a:8e:cc:7f:f4:17:
         b3:bb:82:09:34:7f:49:e2:ac:0f:d0:6c:5f:8a:97:f7:e8:4a:
         b6:01:2b:f6:95:95:c2:3e:36:34:64:48:e9:04:33:97:ef:27:
         8c:d4:dd:18:ba:12:0b:65:7b:df:09:08:ed:6d:86:d8:b8:94:
         4b:a8:54:42:d3:71:bd:5a:56:13:23:43:f4:0a:c2:93:b9:76:
         c8:10:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:26:10 2024 by rpki-client on console-ams.rpki-client.org