Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa
File:                     323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa (raw, json)
Hash identifier:          VMehq5kuZGk74vB8DlF1uloGyXnpYn3jBjN/MwvcpZs=
Subject key identifier:   5F:88:D4:B1:96:36:1C:19:14:62:2F:9D:84:51:BD:92:47:BC:D0:2F
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       7BCC41079EE846AA41A80AA41A11B2B3F0A28D43
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa
Signing time:             Thu 04 Apr 2024 05:26:13 +0000
ROA not before:           Thu 04 Apr 2024 05:21:13 +0000
ROA not after:            Thu 03 Apr 2025 05:26:13 +0000
asID:                     268068
IP address blocks:        2804:577c:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cc:41:07:9e:e8:46:aa:41:a8:0a:a4:1a:11:b2:b3:f0:a2:8d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Apr  4 05:21:13 2024 GMT
            Not After : Apr  3 05:26:13 2025 GMT
        Subject: CN=5F88D4B196361C1914622F9D8451BD9247BCD02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:01:0e:21:bb:b7:f5:9c:58:a0:ec:47:47:
                    61:ba:a5:79:56:82:51:b4:02:84:1a:06:55:9a:ac:
                    05:c9:c2:19:0e:56:bf:4a:23:79:e2:8a:e3:42:90:
                    d8:c5:4f:1f:ec:f3:7e:8b:a3:91:de:fa:1b:3b:b4:
                    b8:05:43:d7:16:bf:02:d4:47:c9:68:a0:d7:65:78:
                    b8:f7:4f:8b:39:c6:39:82:68:02:03:93:2e:7a:9b:
                    9d:79:68:d3:98:7d:16:10:dc:c2:2a:91:ac:a0:76:
                    23:24:91:53:02:14:15:0e:45:16:d8:61:aa:78:30:
                    1c:a1:cb:35:80:e7:de:28:a9:92:bd:93:77:bf:e7:
                    9d:de:69:a5:30:ee:d8:05:7a:d6:7e:f0:be:07:13:
                    26:1c:e8:36:df:02:5d:af:0e:73:bd:d4:3b:20:c9:
                    6d:8b:7a:46:51:2b:08:f9:3f:0a:f3:d0:5b:0d:71:
                    5c:3b:51:a5:fe:3b:2b:af:46:51:0e:e2:c9:3a:12:
                    97:dc:94:98:fb:2f:83:d6:67:0e:c2:e1:e3:14:30:
                    c0:80:a6:89:b5:49:80:36:b2:af:5a:74:36:50:6c:
                    e0:6a:75:07:86:dc:79:de:4a:de:fe:e1:04:18:80:
                    2c:e0:c5:69:97:fe:44:6d:7b:19:9c:50:83:b8:1e:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:88:D4:B1:96:36:1C:19:14:62:2F:9D:84:51:BD:92:47:BC:D0:2F
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:10:83:a6:e2:f6:0f:a6:c3:f2:d1:ff:45:24:9e:b0:17:84:
         eb:e8:df:a7:87:04:99:e0:dc:b1:ae:52:ce:24:28:96:63:86:
         bd:8b:8c:c3:b6:63:c3:07:bd:0a:19:58:97:9d:b9:80:cd:f2:
         ce:18:ea:9c:1c:66:7f:16:da:77:92:e9:c7:1e:73:15:23:09:
         65:fb:05:39:eb:55:32:8e:a7:38:fa:4a:df:d4:b2:8c:47:9b:
         d5:03:7c:c2:39:9f:f0:21:8d:65:1c:d4:27:3a:eb:87:9e:a6:
         19:db:e6:5d:f9:f8:74:1a:c5:ca:94:5b:1e:4a:07:b7:c2:a6:
         ae:0a:6c:bc:c7:a7:51:66:ba:65:d9:51:59:da:d3:30:99:5a:
         dd:d1:b2:7a:f5:7b:92:f6:e4:91:5f:81:e9:39:3b:fb:8b:13:
         52:7a:23:c4:d1:63:fb:63:f7:a8:71:54:39:49:59:4a:00:20:
         6c:87:0f:1f:a3:b9:bf:e8:6a:b6:9e:2a:4f:a6:3f:c0:82:ff:
         51:a1:23:b5:5f:f8:e8:bc:8d:2d:0f:f6:39:69:f2:62:18:77:
         fa:18:ff:00:30:bb:6e:2f:41:50:ae:be:fd:c4:a2:e0:7f:bb:
         84:ac:b6:de:bf:cc:9b:34:0f:f2:bf:70:e6:ac:80:16:1b:ab:
         b7:3f:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org