Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a3a2f33322d3332203d3e20323637393337.roa
File:                     323830343a353537633a3a2f33322d3332203d3e20323637393337.roa (raw, json)
Hash identifier:          ZBZVdaZ6ufogiBcKZ89SJf8PnubDK0Sqmud8nHBs334=
Subject key identifier:   F9:99:92:C3:33:66:83:6D:C7:C3:53:B2:7E:3D:DF:2F:A5:91:AE:92
Certificate issuer:       /CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
Certificate serial:       753E38745D7D84A99C3F6387A58BD912EB281A69
Authority key identifier: 0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a3a2f33322d3332203d3e20323637393337.roa
Signing time:             Thu 04 Apr 2024 08:24:02 +0000
ROA not before:           Thu 04 Apr 2024 08:19:02 +0000
ROA not after:            Thu 03 Apr 2025 08:24:02 +0000
asID:                     267937
IP address blocks:        2804:557c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.crl
                          rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3e:38:74:5d:7d:84:a9:9c:3f:63:87:a5:8b:d9:12:eb:28:1a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
        Validity
            Not Before: Apr  4 08:19:02 2024 GMT
            Not After : Apr  3 08:24:02 2025 GMT
        Subject: CN=F99992C33366836DC7C353B27E3DDF2FA591AE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:1b:ec:f7:e6:46:48:48:95:c2:5a:e6:f3:
                    4e:f0:f4:bd:ca:db:99:11:70:74:bf:21:07:3e:68:
                    18:3e:44:a7:b5:2d:fc:6a:59:a3:c7:2b:46:8e:9f:
                    56:4f:05:f6:f3:42:4c:dc:00:d5:1d:7c:2a:e8:cc:
                    9d:4a:29:56:50:bd:15:ae:c1:d4:78:fa:2e:d3:c7:
                    ee:b1:12:b7:1b:62:cc:ac:65:93:70:f1:af:ed:34:
                    96:b7:ad:51:6f:29:be:5d:70:ff:c2:fe:0d:d6:c7:
                    a4:71:62:24:bf:76:42:5b:1a:64:e7:fb:ef:01:71:
                    59:77:33:e7:0b:56:56:77:da:fd:a2:04:9f:86:e8:
                    1d:d4:21:df:52:6f:43:66:51:85:7b:4d:f0:76:c2:
                    aa:17:9e:61:2b:8a:47:f9:b5:8c:07:4c:25:89:a4:
                    da:9e:d2:f4:b5:1c:48:ad:72:ea:f6:4f:aa:76:60:
                    b9:c0:f0:c8:83:2a:9f:62:5f:2a:68:86:5b:65:93:
                    f7:a6:12:34:fe:a2:c5:d1:21:aa:25:b5:09:4f:1f:
                    26:7f:ae:ca:be:a3:b9:67:55:db:16:72:f2:5b:2f:
                    70:b8:52:71:a8:6b:b7:70:3d:cb:b2:3f:31:25:e2:
                    b3:e1:22:73:f7:40:31:a8:60:32:9b:b5:e6:1b:76:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:99:92:C3:33:66:83:6D:C7:C3:53:B2:7E:3D:DF:2F:A5:91:AE:92
            X509v3 Authority Key Identifier:
                keyid:0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a3a2f33322d3332203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:557c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:b7:df:4d:ae:ab:1f:8c:99:b3:b8:56:76:13:52:49:6c:
         f2:e5:1c:df:2c:62:fa:89:e1:c6:e1:ab:ff:69:cf:f2:c0:7f:
         8f:8e:d7:c2:bb:34:49:d6:cf:75:c2:af:53:01:1f:55:48:4a:
         d2:2c:7c:68:cf:c8:27:0b:ba:c2:21:50:bf:d1:05:e6:7d:c6:
         64:59:64:2f:35:5f:b0:aa:64:82:9b:22:92:eb:59:06:1e:77:
         1a:d4:33:02:7f:0b:4b:b8:1d:0a:f8:96:ea:a9:23:7f:e1:22:
         b7:7e:e4:63:ee:a6:b6:49:b6:c6:5b:8c:63:f6:98:d6:66:3a:
         b7:0e:88:1c:1c:5b:21:34:f1:7c:09:0e:4a:4a:0a:b6:a8:56:
         95:96:ae:9d:0e:cd:3b:d5:9f:1b:fb:73:05:4d:1c:0c:c6:b4:
         ef:11:8a:43:4b:76:96:eb:01:02:63:77:4f:c2:19:2a:8f:f3:
         97:e5:58:e1:c6:19:5e:1a:ed:bd:be:d5:90:07:e8:36:05:d4:
         aa:68:8d:a4:0d:42:34:cd:4e:d2:9d:26:58:d5:2f:5d:38:b1:
         d8:3b:bf:77:cd:9c:04:f0:85:e3:2f:d0:c8:b2:d1:a2:e4:e0:
         bc:3f:1e:7a:5d:06:05:98:d0:45:fb:a8:25:8a:80:91:a5:5a:
         12:2c:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:14:26 2024 by rpki-client on console-ams.rpki-client.org