Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/323830343a353830303a3a2f33322d3438203d3e203532383433.roa
File:                     323830343a353830303a3a2f33322d3438203d3e203532383433.roa (raw, json)
Hash identifier:          KtEfSPl3Zv87MSG2FJ8dW+T7TQEzQS74ZQWA/qpG57k=
Subject key identifier:   EB:2A:43:A5:DD:6C:71:4F:07:29:C0:F1:50:2D:86:3D:4A:EF:DF:A4
Certificate issuer:       /CN=206BD12DC7EB1E7A26A659020EDF0978056AB21A
Certificate serial:       4CD665506F07D2683DFCAEA06EE27C4569F86C9C
Authority key identifier: 20:6B:D1:2D:C7:EB:1E:7A:26:A6:59:02:0E:DF:09:78:05:6A:B2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/323830343a353830303a3a2f33322d3438203d3e203532383433.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     52843
IP address blocks:        2804:5800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.crl
                          rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d6:65:50:6f:07:d2:68:3d:fc:ae:a0:6e:e2:7c:45:69:f8:6c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206BD12DC7EB1E7A26A659020EDF0978056AB21A
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject: CN=EB2A43A5DD6C714F0729C0F1502D863D4AEFDFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:38:32:f2:2c:3a:3c:33:13:51:84:aa:5e:
                    47:eb:53:43:b7:5c:19:5c:9a:d6:ec:fa:05:f0:72:
                    d3:44:d0:28:4f:16:3b:a7:65:da:7c:a9:8b:24:75:
                    52:3d:89:0a:ce:1f:7e:a3:24:19:87:af:63:50:8f:
                    18:27:48:73:ed:cb:83:58:45:6b:9e:1f:bb:d2:66:
                    8d:d2:9e:e0:97:79:e6:19:f5:d6:ed:89:95:af:86:
                    25:b3:e7:8b:4a:61:51:92:27:7e:15:f9:9b:48:8a:
                    a0:5c:5a:e7:64:15:e5:df:9f:c0:6f:83:44:a5:8a:
                    59:0f:8c:2f:d8:dc:b3:57:a1:fc:0a:11:98:24:e3:
                    a2:30:d6:62:68:9b:18:8f:43:ad:ea:9f:c7:53:4e:
                    ff:e4:46:86:08:50:68:ff:2d:a0:8b:d3:3b:12:72:
                    fa:0a:a7:71:9c:07:69:13:52:2a:88:f1:57:88:32:
                    4c:54:fb:1e:e8:6b:d3:b9:b0:78:b1:b2:f8:d4:7f:
                    b0:fc:23:02:70:07:d1:4c:5d:5c:68:e1:31:d0:67:
                    ec:c7:81:41:58:e4:57:fb:9e:d4:b0:68:6c:fe:83:
                    9c:d0:72:9b:ae:96:43:a5:5e:05:64:6d:92:1d:d8:
                    f8:37:71:cd:20:26:e8:42:00:24:f5:a4:2a:70:19:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2A:43:A5:DD:6C:71:4F:07:29:C0:F1:50:2D:86:3D:4A:EF:DF:A4
            X509v3 Authority Key Identifier:
                keyid:20:6B:D1:2D:C7:EB:1E:7A:26:A6:59:02:0E:DF:09:78:05:6A:B2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/323830343a353830303a3a2f33322d3438203d3e203532383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5800::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:da:0b:dd:31:d2:7d:fa:b9:c6:11:14:62:05:10:3b:78:
         aa:d0:3a:5b:d2:60:31:02:df:87:16:a6:52:90:0f:59:b9:0c:
         d0:d5:d2:00:fc:6b:64:18:9f:04:48:6a:dc:a9:2a:b9:92:bb:
         38:f1:e0:2f:ac:d8:4f:94:2b:20:b0:ef:70:92:18:98:cf:1f:
         82:34:52:24:dd:59:14:9e:6a:39:ce:1d:34:37:1f:50:5d:4f:
         db:eb:4f:10:83:e1:02:87:36:70:79:77:b5:f7:44:ca:6f:13:
         b9:47:91:ac:13:ec:23:60:df:e0:7f:9e:ac:3e:42:8c:ee:e5:
         7d:de:73:bb:a8:34:22:09:f1:5c:a9:3a:c4:43:30:79:27:f3:
         53:8a:ff:9e:15:9e:5f:be:18:ee:98:ca:b0:35:21:91:79:8a:
         c5:44:0f:69:f7:b6:f4:16:dc:26:a5:66:94:53:5e:ea:d9:2e:
         ce:3c:a1:4e:2c:06:87:d7:8f:8b:28:c6:d3:01:e9:43:8b:3d:
         9c:d4:1f:40:e3:c8:7a:14:a3:3b:51:55:ec:a8:e4:d2:ef:5a:
         14:c4:5f:9e:9c:60:55:26:39:77:2d:31:20:fa:59:06:8e:e1:
         81:97:5a:d1:7c:3f:3a:2f:ac:af:5b:27:d1:4c:36:e0:31:f1:
         3e:cf:b1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org