Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa
File:                     323830343a353535633a3a2f33322d3438203d3e20323634313035.roa (raw, json)
Hash identifier:          zRr8vgEwZ9AoLdUuZoZ5ijA2Cez3tGcdN/XX5d/wb2s=
Subject key identifier:   59:A5:F1:AE:FB:C3:87:50:7C:71:F9:5E:B5:50:A1:3B:23:04:24:0B
Certificate issuer:       /CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
Certificate serial:       0ECAC7B02057256AF949BD19097A392B80B7A17E
Authority key identifier: E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa
Signing time:             Thu 04 Apr 2024 12:21:50 +0000
ROA not before:           Thu 04 Apr 2024 12:16:50 +0000
ROA not after:            Thu 03 Apr 2025 12:21:50 +0000
asID:                     264105
IP address blocks:        2804:555c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.crl
                          rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ca:c7:b0:20:57:25:6a:f9:49:bd:19:09:7a:39:2b:80:b7:a1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
        Validity
            Not Before: Apr  4 12:16:50 2024 GMT
            Not After : Apr  3 12:21:50 2025 GMT
        Subject: CN=59A5F1AEFBC387507C71F95EB550A13B2304240B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:1b:92:b3:cc:0a:b6:ff:a8:05:fd:65:23:
                    b1:57:43:15:b1:6d:a2:82:ec:13:63:41:21:81:79:
                    3f:60:9a:b4:d4:c9:3b:0f:41:a0:b8:51:09:2d:0a:
                    45:1a:b5:05:84:05:3f:e3:d4:16:07:81:94:9f:d4:
                    a4:5c:bf:37:c0:cb:f0:47:08:1c:44:2e:3d:c4:6e:
                    51:61:54:15:f6:16:94:83:52:2f:af:01:d0:88:09:
                    75:ab:6f:72:45:9a:90:08:9b:2c:02:be:c9:38:82:
                    b4:58:ef:23:7b:4e:c2:e9:10:6c:e6:38:6f:9c:74:
                    50:3a:44:28:6e:dc:6c:92:6c:c9:5e:5e:e7:e7:61:
                    b3:90:cf:90:e7:b8:c8:a3:98:d0:1d:79:c1:e6:64:
                    fc:2d:22:db:8d:d5:6e:44:fa:11:c9:3b:87:da:8c:
                    c1:c6:14:d0:7d:08:11:f7:37:af:70:a7:04:01:79:
                    c8:c3:92:b4:a6:a5:32:fa:2f:ea:59:3c:02:cd:74:
                    bd:78:2c:89:d7:7b:98:a4:41:fd:fa:10:2e:4c:5a:
                    84:86:1d:39:65:c2:20:4d:b5:36:cb:d8:55:c0:67:
                    80:40:fc:5e:6c:5a:f4:96:0e:29:21:20:f7:ae:77:
                    8e:61:64:6a:e5:5b:a7:41:1c:00:1a:39:b1:76:af:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:F1:AE:FB:C3:87:50:7C:71:F9:5E:B5:50:A1:3B:23:04:24:0B
            X509v3 Authority Key Identifier:
                keyid:E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:555c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:a5:96:03:84:93:2d:b1:8a:d6:7c:ee:65:07:34:81:36:ae:
         89:d7:e6:28:1f:92:1c:95:0b:33:2c:d5:df:3d:ff:29:33:26:
         ad:ba:b9:44:4c:5a:7c:f5:3c:ee:d7:74:ae:20:62:bc:de:1e:
         ea:9d:da:e3:5a:47:93:39:76:7c:cf:39:06:78:26:05:6e:b8:
         fc:17:67:a5:d0:fb:54:c9:16:c2:72:66:cd:53:8a:99:59:cd:
         94:5d:d0:76:9b:c5:57:4d:51:db:8f:15:6d:cd:6d:f4:df:54:
         5b:56:dd:fe:a3:2d:ca:52:5b:f8:8e:be:b9:74:95:77:4e:c2:
         12:4c:86:4a:c9:f5:e7:ea:0c:49:54:73:26:d6:1e:5b:73:d8:
         d7:41:7b:ad:33:0a:8a:9c:fa:fc:49:bc:e0:e3:3b:52:2e:28:
         db:d5:83:e2:01:a2:8a:30:5a:9d:06:16:b0:f8:dd:df:54:f0:
         cf:13:c6:51:4b:51:dc:05:4a:b1:b3:68:eb:04:06:2a:6f:66:
         53:ca:84:43:86:28:62:4d:29:a2:08:34:63:81:8d:86:72:78:
         31:b9:a9:17:94:fa:05:20:88:99:8b:95:af:a4:1d:71:2b:73:
         23:f8:7a:65:2b:b2:75:f0:12:12:52:e2:47:a1:d1:1b:7a:d8:
         ae:5d:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org