Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa
File:                     323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa (raw, json)
Hash identifier:          9+zPzOaKmO1Hsl3p43+W5CiiX1lnho24lVAA9fqmcLk=
Subject key identifier:   5B:3B:1C:B4:AB:2C:03:2E:BD:71:DB:56:33:ED:BB:3D:3C:80:02:3E
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       1DA61D1B57A7B8CEA1EBF02F3334CC56B6D0CC94
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa
Signing time:             Thu 04 Apr 2024 02:34:38 +0000
ROA not before:           Thu 04 Apr 2024 02:29:38 +0000
ROA not after:            Thu 03 Apr 2025 02:34:38 +0000
asID:                     266635
IP address blocks:        2804:3f08:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a6:1d:1b:57:a7:b8:ce:a1:eb:f0:2f:33:34:cc:56:b6:d0:cc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Apr  4 02:29:38 2024 GMT
            Not After : Apr  3 02:34:38 2025 GMT
        Subject: CN=5B3B1CB4AB2C032EBD71DB5633EDBB3D3C80023E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:b9:33:f2:9e:7b:e2:6c:4e:38:0b:fe:d0:
                    3a:cf:b2:3f:51:c5:f9:d9:05:85:8c:b2:04:dd:ad:
                    4b:11:cd:a7:f3:59:b6:e8:2c:98:b2:de:1d:9b:5c:
                    c3:52:f6:2a:39:72:a6:2d:61:76:43:12:09:40:0d:
                    68:f1:ec:17:39:ec:fb:8b:ad:97:73:bb:09:bb:06:
                    e8:00:e6:01:ff:cf:9a:96:65:57:1a:d7:ad:96:38:
                    57:7f:55:51:e8:5e:85:ea:cd:43:1f:54:ad:9c:de:
                    34:9d:ed:89:4d:4a:fd:f3:3e:73:86:c8:2a:93:23:
                    52:ca:aa:39:71:0c:04:67:81:1f:74:84:0b:e0:cd:
                    96:8c:1f:c1:37:ef:55:2d:3d:44:aa:6f:a5:71:9b:
                    0a:b9:22:55:2c:51:8a:7f:d1:2d:1f:c3:13:cf:f5:
                    c9:3e:52:a9:b1:0c:51:92:98:3a:16:8a:1f:11:00:
                    b2:da:60:18:bf:9a:5c:56:58:9e:34:15:de:d7:b8:
                    50:6b:a7:33:fa:fe:79:78:ff:e0:d2:8c:9c:fe:20:
                    2a:7e:fb:a1:09:d2:4f:c1:1b:44:9d:ac:db:50:2d:
                    9e:d7:6f:ff:ff:98:a6:9c:a0:98:fc:ee:06:d5:6d:
                    fe:69:dc:46:f6:01:0f:32:51:0e:c0:07:0c:d1:57:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3B:1C:B4:AB:2C:03:2E:BD:71:DB:56:33:ED:BB:3D:3C:80:02:3E
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:62:f0:ba:e2:0f:b8:11:42:c7:4c:3a:fe:95:b8:93:cb:70:
         fb:69:d0:4e:e7:8b:1b:9c:37:00:bb:0c:73:b9:7b:7e:a0:9a:
         e1:54:f2:21:21:90:45:2c:c8:52:01:2a:36:04:d2:d8:d5:d7:
         62:b2:ad:05:bf:93:40:01:05:62:0d:0c:e3:19:bd:e2:40:6c:
         55:9c:bc:b2:11:66:51:bc:d7:f4:fb:45:36:3d:2a:b6:7a:67:
         98:3a:42:49:b8:6d:3f:f1:cf:67:bd:b4:af:dc:b7:9c:ab:22:
         53:3e:2b:97:fc:b2:63:ce:cc:9f:05:99:ec:49:4f:8d:c1:16:
         0e:f3:57:63:e6:df:46:81:8d:21:58:f1:ec:29:7e:e5:c3:78:
         b0:75:2b:8d:11:73:4d:fe:a3:f0:1c:dc:7f:9c:37:6a:7b:33:
         c4:94:78:2d:1b:68:8c:8a:fd:18:7f:5a:9c:c7:a2:d4:ee:ed:
         65:4e:be:2c:66:a1:71:4b:18:f6:df:7e:a4:51:e9:f3:c4:45:
         e4:2c:16:c5:b9:44:04:45:4a:0e:68:16:48:a7:11:37:c5:bc:
         86:14:29:a1:8f:6c:89:65:59:1a:3a:e0:a8:54:41:7c:2b:10:
         5d:c0:ab:51:fc:33:e2:eb:ec:e6:51:59:5f:7b:49:4b:75:6d:
         5d:bb:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org