Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/323830343a343861383a3a2f33322d3334203d3e20323637313336.roa
File:                     323830343a343861383a3a2f33322d3334203d3e20323637313336.roa (raw, json)
Hash identifier:          rOAhilyigrvQiLm/OFVrpAHFcLYCdswmB2Z6oMZ8RUc=
Subject key identifier:   00:E7:A1:53:C2:38:ED:46:C3:DC:97:46:67:17:79:06:99:9F:7F:87
Certificate issuer:       /CN=587B556A325EFD4FA17909D19F46DDB8079DD090
Certificate serial:       4EB3E6A6FB4D9D64AC22CA0B546CB888FE020138
Authority key identifier: 58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/323830343a343861383a3a2f33322d3334203d3e20323637313336.roa
Signing time:             Thu 04 Apr 2024 23:24:17 +0000
ROA not before:           Thu 04 Apr 2024 23:19:17 +0000
ROA not after:            Thu 03 Apr 2025 23:24:17 +0000
asID:                     267136
IP address blocks:        2804:48a8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.crl
                          rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b3:e6:a6:fb:4d:9d:64:ac:22:ca:0b:54:6c:b8:88:fe:02:01:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587B556A325EFD4FA17909D19F46DDB8079DD090
        Validity
            Not Before: Apr  4 23:19:17 2024 GMT
            Not After : Apr  3 23:24:17 2025 GMT
        Subject: CN=00E7A153C238ED46C3DC974667177906999F7F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:b4:a4:82:63:7b:70:ee:97:33:c4:ee:db:
                    c8:db:92:08:e5:60:8a:60:ab:c7:48:3a:de:a2:f9:
                    e9:ba:38:f7:8c:a6:bb:33:bd:5f:17:0f:b8:40:f3:
                    6c:2f:34:9c:7d:86:10:71:cd:40:9b:b6:1c:df:5f:
                    20:54:89:b7:11:74:ca:0a:9f:4b:3f:cf:f3:c9:5f:
                    63:8d:a7:ff:95:74:62:e5:7c:13:65:a9:9e:91:fa:
                    db:62:54:e3:57:72:91:e9:37:6e:ce:f5:89:48:25:
                    c8:38:58:d4:f1:22:d4:1d:a1:d8:24:07:83:e3:4b:
                    72:a9:77:93:98:86:79:5f:48:7f:5c:97:c3:47:50:
                    a5:a3:7a:6b:a2:09:ea:4a:da:93:5a:fc:57:43:5a:
                    b6:68:98:0b:5d:d4:32:99:d4:d6:cb:f4:c1:c9:92:
                    fe:5b:fd:4e:96:dc:40:af:7c:26:b5:5f:c2:97:94:
                    ed:c1:a0:58:d8:de:39:c8:ec:64:99:59:ee:6e:91:
                    da:a0:ff:cd:b6:e7:4d:30:99:02:2e:9a:f7:0e:25:
                    ac:da:c9:52:3b:0a:06:f2:4d:3f:bc:d0:10:b4:6c:
                    e6:2e:7d:39:54:52:c2:26:54:ae:9e:d1:2b:d2:03:
                    19:b0:d2:93:88:d5:ba:85:a8:72:e6:24:46:da:44:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:A1:53:C2:38:ED:46:C3:DC:97:46:67:17:79:06:99:9F:7F:87
            X509v3 Authority Key Identifier:
                keyid:58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/323830343a343861383a3a2f33322d3334203d3e20323637313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:22:ad:bd:a7:da:a7:9f:a6:ec:88:fe:0b:23:55:9f:ed:78:
         e4:fc:03:2d:35:d0:0f:6b:15:01:9e:7b:ca:d9:a5:73:79:29:
         8c:02:7d:94:fb:3a:cf:7c:2b:e7:97:b8:19:13:a5:dc:53:a5:
         d6:b6:d8:09:38:91:c8:69:cf:3b:e5:85:27:ab:bd:c1:cd:cd:
         aa:a4:29:b8:d7:5e:f7:1e:67:54:23:7e:00:7f:d4:53:c8:7f:
         75:31:1f:db:30:bc:18:ae:ec:12:6e:05:1b:e9:cc:dd:23:77:
         28:60:0b:f7:06:b4:28:ba:9b:26:ad:9d:41:e5:8a:02:77:e0:
         98:5a:b3:11:81:ec:c5:a2:f4:a7:b2:3f:d8:cd:b8:d7:3b:31:
         e6:95:8b:83:d9:ef:f5:1a:f2:ac:94:54:dd:98:dc:a0:70:a4:
         dc:45:2a:9c:ca:03:ad:87:3f:1b:60:88:b0:d8:6b:dc:da:ed:
         4a:fe:c1:1a:83:33:34:ec:2e:62:09:dd:fd:61:eb:76:ab:34:
         1e:ab:7d:04:99:e3:03:62:88:6f:c6:06:35:ac:c1:34:28:66:
         c4:e0:79:fe:c9:c1:cf:6b:48:2d:02:a1:9d:9c:74:f0:38:5c:
         18:79:78:5a:2a:d3:5f:8d:ef:ba:0b:39:87:2e:b8:02:d9:79:
         86:ae:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:53 2024 by rpki-client on console-fra.rpki-client.org