Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d313238203d3e20323638323637.roa
File:                     323830343a346538383a3a2f33322d313238203d3e20323638323637.roa (raw, json)
Hash identifier:          mZEplLXrYGG2UM/9Zxf7GGgwwxP5N4n05a3Lo5mwemk=
Subject key identifier:   C7:D3:56:36:3C:54:BC:7E:66:D4:5A:D8:DB:25:D9:DE:71:52:ED:47
Certificate issuer:       /CN=E0E56E765738AF9709155514C8A4C6494D4155B3
Certificate serial:       44E2DCE7FDAACDB2BB072F6819DF8D9CF2E96920
Authority key identifier: E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d313238203d3e20323638323637.roa
Signing time:             Wed 03 Apr 2024 18:31:30 +0000
ROA not before:           Wed 03 Apr 2024 18:26:30 +0000
ROA not after:            Wed 02 Apr 2025 18:31:30 +0000
asID:                     268267
IP address blocks:        2804:4e88::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl
                          rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e2:dc:e7:fd:aa:cd:b2:bb:07:2f:68:19:df:8d:9c:f2:e9:69:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Validity
            Not Before: Apr  3 18:26:30 2024 GMT
            Not After : Apr  2 18:31:30 2025 GMT
        Subject: CN=3082010A0282010100C6E9FFC92943309437CF6BC749F05E2588D480D90A593FD26CE5E617EAF907050B4A0F0C1AD6DA3DFAE0BD7AA352062485DD1B1EE085717C3683EBB3E21329E250138CD3A7291061A359C69A61FEDFB04956A463034DE11B246832F4E100F85C1041190CBE9542350AEAB52E0388182E28E114FAB4E348AE68E0E210B23676E492EDC0C1DCDE53A6D5E3A9074E68F2AE0CF729D2E5BF6BCE1034619B69AF5A8BF3C745C143DB139D466AB3D9B6F2D493030FE104FE560CC9F6E7D1694CB97F885F23EDEF494C835190323729D1910A03A77872621A4B312D342E5326EA62FD24FFF5FE9B5FC11B6291CC12FC54D5F19E8EFC9F7C2A98D1BD21AC9AD0985845A10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:ff:c9:29:43:30:94:37:cf:6b:c7:49:f0:
                    5e:25:88:d4:80:d9:0a:59:3f:d2:6c:e5:e6:17:ea:
                    f9:07:05:0b:4a:0f:0c:1a:d6:da:3d:fa:e0:bd:7a:
                    a3:52:06:24:85:dd:1b:1e:e0:85:71:7c:36:83:eb:
                    b3:e2:13:29:e2:50:13:8c:d3:a7:29:10:61:a3:59:
                    c6:9a:61:fe:df:b0:49:56:a4:63:03:4d:e1:1b:24:
                    68:32:f4:e1:00:f8:5c:10:41:19:0c:be:95:42:35:
                    0a:ea:b5:2e:03:88:18:2e:28:e1:14:fa:b4:e3:48:
                    ae:68:e0:e2:10:b2:36:76:e4:92:ed:c0:c1:dc:de:
                    53:a6:d5:e3:a9:07:4e:68:f2:ae:0c:f7:29:d2:e5:
                    bf:6b:ce:10:34:61:9b:69:af:5a:8b:f3:c7:45:c1:
                    43:db:13:9d:46:6a:b3:d9:b6:f2:d4:93:03:0f:e1:
                    04:fe:56:0c:c9:f6:e7:d1:69:4c:b9:7f:88:5f:23:
                    ed:ef:49:4c:83:51:90:32:37:29:d1:91:0a:03:a7:
                    78:72:62:1a:4b:31:2d:34:2e:53:26:ea:62:fd:24:
                    ff:f5:fe:9b:5f:c1:1b:62:91:cc:12:fc:54:d5:f1:
                    9e:8e:fc:9f:7c:2a:98:d1:bd:21:ac:9a:d0:98:58:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D3:56:36:3C:54:BC:7E:66:D4:5A:D8:DB:25:D9:DE:71:52:ED:47
            X509v3 Authority Key Identifier:
                keyid:E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d313238203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:79:96:9a:19:10:28:01:28:d2:b6:d2:36:dd:4c:8f:d6:
         36:94:49:d1:b9:21:e3:3b:4f:b8:18:0a:46:03:57:e9:9e:c6:
         45:06:c4:84:44:e3:51:4e:6c:f8:10:ce:50:58:9c:ab:ba:51:
         d2:0a:ea:a7:50:ba:53:89:43:90:a2:00:ca:89:24:9a:5e:83:
         6e:cf:7d:aa:47:b5:5c:64:6f:d5:1d:08:ca:a8:40:d0:56:df:
         4e:30:75:66:c2:d2:78:94:00:16:02:6a:1a:ac:61:8c:d3:5f:
         71:c4:9e:0e:32:9e:dc:38:bc:d8:8c:81:c8:8d:3c:f9:4d:0b:
         9d:bc:94:7e:05:c9:8d:a5:d2:36:ff:1a:fd:31:8c:de:54:6f:
         d6:bc:bd:42:6e:70:f9:22:42:30:14:b9:7a:3a:83:b1:ba:59:
         c8:13:c1:bf:c2:33:c5:2d:a7:2e:07:d5:d1:dd:28:3f:12:5b:
         18:14:02:09:22:55:81:71:7d:49:2a:2a:13:59:b1:96:f8:0b:
         02:5c:f7:22:eb:a3:93:f2:42:e6:94:50:5e:82:c6:43:9f:87:
         aa:80:56:2c:68:32:9e:0a:e9:4f:ef:0e:59:26:1f:86:54:9c:
         ce:70:ec:59:bd:32:43:16:74:9f:fa:e7:cc:f9:ff:d1:21:74:
         a8:4f:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org