Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/323830343a3538343a3a2f33322d3335203d3e203533303732.roa
File:                     323830343a3538343a3a2f33322d3335203d3e203533303732.roa (raw, json)
Hash identifier:          ytdxnJEyXWMW+C38djHc+dIsm52QV4xkzWe/VL97TOc=
Subject key identifier:   80:FD:5E:A1:24:E9:AA:C7:E9:81:96:86:70:AC:18:CC:D2:D3:44:6D
Certificate issuer:       /CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768
Certificate serial:       31F325C5CC76D2D870F6AEAA789414B0CAB899DC
Authority key identifier: EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/323830343a3538343a3a2f33322d3335203d3e203533303732.roa
Signing time:             Mon 15 Apr 2024 18:38:56 +0000
ROA not before:           Mon 15 Apr 2024 18:33:56 +0000
ROA not after:            Mon 14 Apr 2025 18:38:56 +0000
asID:                     53072
IP address blocks:        2804:584::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl
                          rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f3:25:c5:cc:76:d2:d8:70:f6:ae:aa:78:94:14:b0:ca:b8:99:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768
        Validity
            Not Before: Apr 15 18:33:56 2024 GMT
            Not After : Apr 14 18:38:56 2025 GMT
        Subject: CN=80FD5EA124E9AAC7E981968670AC18CCD2D3446D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:ae:4c:ac:ee:5c:5b:6a:f6:29:3f:8d:47:
                    0c:2e:43:df:60:8e:33:3e:cb:94:6b:bd:d1:89:3d:
                    80:cc:21:f2:19:36:c6:e1:a1:4c:b1:61:22:40:cd:
                    dd:8f:99:97:7e:6e:a9:7a:7d:04:81:1e:5e:d2:7f:
                    bf:47:e5:51:01:20:d3:74:6a:64:18:c9:04:c1:5e:
                    81:5a:9e:a7:e7:8d:3e:aa:83:48:bc:58:16:cd:06:
                    91:20:89:3a:e5:11:32:ca:4a:ec:b8:24:ab:46:a8:
                    49:04:cc:b9:bb:4a:8a:8c:b1:b8:5b:46:99:1b:eb:
                    7c:4e:2f:e5:14:3b:58:78:63:16:39:9d:80:0c:d3:
                    14:1f:7f:85:a5:9b:ed:8a:a5:4e:9e:c4:32:8d:59:
                    da:f7:1b:9e:11:29:78:e9:d3:f8:3e:ed:86:d0:ae:
                    de:61:68:4b:09:03:ef:65:61:5e:10:5c:8b:f5:a3:
                    37:3e:f9:7c:df:e4:29:4c:2d:37:e5:41:7b:ca:36:
                    2c:78:39:cc:94:45:d7:0c:2b:c3:1e:6b:74:69:89:
                    c0:33:7d:d8:cd:5c:8d:57:db:37:c1:55:2a:8f:b0:
                    c5:bf:0b:82:5f:61:f3:78:a9:e9:c1:d1:3e:60:a8:
                    22:c9:df:89:73:a1:08:2d:03:5e:eb:3e:96:66:b9:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:5E:A1:24:E9:AA:C7:E9:81:96:86:70:AC:18:CC:D2:D3:44:6D
            X509v3 Authority Key Identifier:
                keyid:EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/323830343a3538343a3a2f33322d3335203d3e203533303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:584::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:56:d0:ee:5c:cf:69:ec:ac:b1:b0:a3:35:19:5d:a1:cd:c4:
         92:bd:d4:c7:6a:70:38:17:5d:52:70:de:c4:81:c7:b1:e9:3e:
         08:ab:4c:88:8e:f3:cd:e6:35:e1:26:e1:3b:71:b8:e3:32:62:
         0c:15:fe:0d:4c:72:f4:b1:e4:f7:0d:1e:c2:a8:25:f0:83:7a:
         2d:b7:b9:f5:a8:c2:82:87:64:9b:04:a5:8f:74:f1:99:2a:6a:
         d0:1d:05:b9:d3:67:63:89:81:86:c5:6c:ca:f0:a7:fd:80:96:
         ca:7d:6c:34:9a:c7:78:af:94:cd:3b:08:6e:5b:7d:5d:7a:71:
         e3:a3:78:c3:40:07:c9:8a:be:b8:37:1a:e9:76:1e:75:0b:ea:
         1c:06:e4:51:cc:00:e1:a7:ba:c2:ea:0f:0d:c7:f8:9a:02:dc:
         b4:ae:2a:88:04:b4:60:7e:78:dd:9a:e4:c2:2b:a6:f0:0f:54:
         41:8d:04:77:dd:56:9f:7a:b2:36:c9:6e:7a:ca:89:fe:7f:8c:
         2d:fe:ad:32:23:e4:4c:b1:a1:bc:13:ce:7a:e7:17:4e:01:2b:
         73:cb:df:c6:b3:e8:b3:d0:af:b8:29:1e:48:d2:5d:5b:74:b8:
         85:f6:cf:e1:c0:59:a8:60:0c:3d:4b:b0:01:a9:c3:c9:d0:fe:
         9a:58:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:22 2024 by rpki-client on console-fra.rpki-client.org