Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/323830343a326436303a3a2f33322d313238203d3e20323635323738.roa
File:                     323830343a326436303a3a2f33322d313238203d3e20323635323738.roa (raw, json)
Hash identifier:          xqeSw/WTPpxxtGndcAleCv8ZFj7V3AhTiIjiuW4s2Ek=
Subject key identifier:   5B:2B:E7:EB:AD:D5:59:52:D5:43:20:39:3D:12:7C:8D:28:CF:C0:52
Certificate issuer:       /CN=ECD3699D71C4161A24BD94F52851A23662D6FC2B
Certificate serial:       7E2DBFF69B4B105374C69D3D1792D3D22C5E58AB
Authority key identifier: EC:D3:69:9D:71:C4:16:1A:24:BD:94:F5:28:51:A2:36:62:D6:FC:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/323830343a326436303a3a2f33322d313238203d3e20323635323738.roa
Signing time:             Thu 04 Apr 2024 18:11:10 +0000
ROA not before:           Thu 04 Apr 2024 18:06:10 +0000
ROA not after:            Thu 03 Apr 2025 18:11:10 +0000
asID:                     265278
IP address blocks:        2804:2d60::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.crl
                          rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2d:bf:f6:9b:4b:10:53:74:c6:9d:3d:17:92:d3:d2:2c:5e:58:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD3699D71C4161A24BD94F52851A23662D6FC2B
        Validity
            Not Before: Apr  4 18:06:10 2024 GMT
            Not After : Apr  3 18:11:10 2025 GMT
        Subject: CN=5B2BE7EBADD55952D54320393D127C8D28CFC052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:0e:c5:90:7c:a9:bf:35:01:36:b2:62:ed:
                    fb:e8:40:91:15:07:97:80:8c:4e:eb:86:8c:91:d3:
                    28:9f:86:8b:c1:e7:33:64:ee:e1:be:e8:7b:da:63:
                    28:d7:b7:fc:5f:ba:96:1d:d8:95:fe:41:0b:8e:24:
                    6b:12:b7:bf:a9:4f:56:6a:b7:79:58:e8:90:0e:f6:
                    88:4c:d5:85:07:7c:3d:3a:0e:2a:3d:d1:07:ee:00:
                    e1:dd:6d:7a:f0:5a:70:ed:e1:fa:ed:d1:95:c6:a7:
                    7c:76:c1:7b:d6:a2:fb:b1:d1:ca:ed:16:5c:98:07:
                    b8:e4:87:9f:85:0c:20:54:f8:86:64:15:26:44:23:
                    3b:65:27:a7:bb:e5:fb:51:77:7b:66:ef:7e:13:08:
                    2b:c0:52:66:04:a3:48:11:6e:a0:6f:e2:8a:42:c0:
                    90:10:67:49:86:be:b0:94:c9:bf:43:78:2a:40:77:
                    55:25:49:fe:00:f5:12:3e:dd:42:cd:3d:ed:fb:94:
                    cf:e0:4e:f9:e7:c5:20:28:fd:dd:64:44:d6:64:27:
                    b2:a7:8f:63:d3:e9:8f:36:70:ee:a0:2c:41:8f:89:
                    32:a1:9f:17:53:43:5a:18:7c:fd:90:4d:90:07:72:
                    03:82:b7:0f:46:8c:a1:b8:db:2e:f7:06:e7:ad:b0:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2B:E7:EB:AD:D5:59:52:D5:43:20:39:3D:12:7C:8D:28:CF:C0:52
            X509v3 Authority Key Identifier:
                keyid:EC:D3:69:9D:71:C4:16:1A:24:BD:94:F5:28:51:A2:36:62:D6:FC:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/323830343a326436303a3a2f33322d313238203d3e20323635323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:53:4d:5f:be:62:f8:4d:c3:b1:86:f5:8d:28:7b:f7:68:a1:
         15:a7:c1:51:1c:6a:9c:22:2b:7b:ae:e1:02:05:8f:dc:e9:af:
         63:b2:be:93:10:f8:9a:a4:ff:af:42:45:35:b0:3a:af:b8:5d:
         52:2b:5c:df:5e:9e:5d:44:03:d0:c0:27:97:c4:f3:68:62:de:
         d0:2b:29:0e:83:54:04:b4:e1:40:b3:06:9d:16:c6:d8:ae:35:
         2e:51:92:aa:39:d7:a9:2c:c5:bc:c9:bb:e2:73:d4:59:d3:c1:
         b0:bf:64:a5:58:ba:f2:83:15:bf:dc:dd:c0:fb:0f:53:8a:ce:
         a9:68:3d:e1:1d:49:93:2f:c4:1d:de:e6:f1:4e:f4:67:5b:10:
         f1:60:e9:68:89:97:d7:0b:54:05:92:bf:f2:e8:bc:a1:1f:4c:
         90:28:10:7f:32:0e:25:58:17:b1:41:31:59:2a:39:c3:2e:ce:
         6a:51:56:84:67:19:03:48:2c:03:f0:1f:e3:fe:a6:60:6a:f9:
         15:a5:cc:48:90:4c:df:ae:5f:58:2c:fc:dd:f7:e7:83:2a:bb:
         07:20:e3:81:95:85:9e:09:a7:29:c8:8c:87:11:1b:1f:67:4f:
         7e:1f:f1:53:36:53:b0:62:dd:7f:ba:57:d3:7a:de:9f:15:5b:
         cb:5d:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:14 2024 by rpki-client on console-ams.rpki-client.org