Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/1/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa
File:                     323830343a333964633a3a2f33322d3438203d3e20323636303535.roa (raw, json)
Hash identifier:          Vxd2TX1fBK+apcLB0FSDYMlpOi0EoIvIh4pdg3sNqDg=
Subject key identifier:   6E:5D:18:DF:A7:DE:6C:49:C0:0A:9F:F4:55:74:26:40:AE:E1:22:2F
Certificate issuer:       /CN=EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07
Certificate serial:       270A8D339226101D2355A60E6D489CC75E7A4997
Authority key identifier: EB:A3:B4:AB:96:AE:45:B8:B0:C5:F0:90:D6:F4:FC:61:01:85:1E:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/1/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa
Signing time:             Thu 04 Apr 2024 10:31:04 +0000
ROA not before:           Thu 04 Apr 2024 10:26:04 +0000
ROA not after:            Thu 03 Apr 2025 10:31:04 +0000
asID:                     266055
IP address blocks:        2804:39dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/1/EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07.crl
                          rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/1/EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:8d:33:92:26:10:1d:23:55:a6:0e:6d:48:9c:c7:5e:7a:49:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07
        Validity
            Not Before: Apr  4 10:26:04 2024 GMT
            Not After : Apr  3 10:31:04 2025 GMT
        Subject: CN=6E5D18DFA7DE6C49C00A9FF455742640AEE1222F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:12:f1:a6:25:44:80:fa:74:58:60:11:d9:1d:
                    0c:2f:18:17:0f:30:cb:87:87:df:31:7f:4e:2d:23:
                    65:3e:76:31:ff:0b:f2:96:b5:70:90:7c:13:fb:5f:
                    eb:aa:15:37:6d:bb:4f:23:c4:82:d3:1c:65:f5:e9:
                    4a:98:22:b5:d7:d1:af:1b:4e:41:09:7a:61:ce:c9:
                    54:86:ee:b4:b0:1b:db:01:57:f2:e8:f0:53:04:3e:
                    51:1c:d1:b4:af:cb:f3:10:0a:47:43:22:32:9d:c0:
                    65:14:ef:a9:d4:dc:fe:3f:37:0c:8d:be:68:16:79:
                    38:d4:3b:cb:b4:98:3d:81:7d:ef:a5:31:02:81:6e:
                    1d:cd:28:7a:24:d6:a8:69:60:58:0e:04:9b:b3:eb:
                    93:b9:38:d4:80:d2:ad:eb:b4:89:28:24:0f:a6:75:
                    ec:b5:5c:10:57:29:f8:2c:bc:b2:18:71:d2:8f:12:
                    87:4a:4c:58:f1:05:6d:70:46:51:73:b9:50:91:24:
                    85:56:d1:db:6c:77:71:62:da:d7:78:4b:b7:26:2b:
                    a3:c6:6a:74:0d:69:28:8d:b0:79:e6:fe:ae:90:74:
                    18:7a:7a:fd:bc:5d:f1:3b:9f:2c:a1:69:87:16:60:
                    c5:e5:7e:67:24:26:c3:e0:1a:0a:0e:81:76:f9:25:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5D:18:DF:A7:DE:6C:49:C0:0A:9F:F4:55:74:26:40:AE:E1:22:2F
            X509v3 Authority Key Identifier:
                keyid:EB:A3:B4:AB:96:AE:45:B8:B0:C5:F0:90:D6:F4:FC:61:01:85:1E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/1/EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA3B4AB96AE45B8B0C5F090D6F4FC6101851E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/1/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:4e:fe:a8:b4:b9:98:84:29:e4:f9:72:8e:1c:5b:5c:34:
         20:95:28:aa:61:97:3d:da:d9:45:d6:24:13:7c:73:b9:6d:b4:
         f7:27:e8:38:cc:15:57:df:f0:24:5b:e5:33:9a:44:e5:5f:75:
         e3:58:7c:4d:b5:9c:15:5b:b8:32:f8:ff:3f:25:1a:79:a8:27:
         b2:9a:79:b2:bb:5e:ab:6a:27:08:c8:ba:70:73:cf:f5:00:e7:
         3f:fc:ab:82:2a:ed:46:75:6e:18:db:98:3b:a7:56:ac:a0:91:
         4f:bf:1a:22:56:16:7d:06:09:c0:c0:64:33:37:88:de:89:96:
         55:97:8b:26:62:91:bb:ce:9e:db:4e:c6:e8:47:26:9a:9c:b6:
         20:4d:2e:db:65:64:50:3b:6d:c2:a9:9c:a7:ed:cb:03:50:5e:
         ea:64:c6:67:4a:ed:8b:1b:a0:11:bc:74:60:5a:2a:a7:4f:98:
         46:a6:cc:16:24:d1:e1:21:22:bb:1f:13:95:e7:46:ff:05:bd:
         f5:bc:3a:ec:82:49:6d:dc:8a:d2:1c:b5:7f:7b:b3:c3:8d:77:
         9f:b4:aa:e8:af:80:46:8a:a3:4f:8d:20:16:e3:6b:ba:a5:b5:
         87:7a:87:c0:2d:37:62:88:42:52:41:94:ae:54:30:c2:33:f5:
         7f:57:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:53 2024 by rpki-client on console-fra.rpki-client.org