Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa
File:                     323830343a353737633a3a2f33322d3332203d3e20323638303638.roa (raw, json)
Hash identifier:          n1obcayYmaB/9nQrNK6oIXt/YrBVEheUo+NVfqib2pU=
Subject key identifier:   7E:D5:05:6E:4A:78:24:22:43:33:FC:D2:3C:FB:90:71:2F:C6:69:13
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       404DAC9A3F3DBAF59C542813C89EFF67146AFDA9
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa
Signing time:             Thu 04 Apr 2024 05:26:14 +0000
ROA not before:           Thu 04 Apr 2024 05:21:14 +0000
ROA not after:            Thu 03 Apr 2025 05:26:14 +0000
asID:                     268068
IP address blocks:        2804:577c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4d:ac:9a:3f:3d:ba:f5:9c:54:28:13:c8:9e:ff:67:14:6a:fd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Apr  4 05:21:14 2024 GMT
            Not After : Apr  3 05:26:14 2025 GMT
        Subject: CN=7ED5056E4A7824224333FCD23CFB90712FC66913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:c1:bf:d3:3e:87:28:11:3b:07:f1:ca:09:
                    44:0b:28:e3:46:97:aa:24:e4:aa:4e:1b:63:7c:01:
                    63:9a:5d:13:95:b9:48:b2:f7:4b:6f:1c:b0:90:57:
                    2e:19:22:38:74:33:0e:8b:bd:55:31:18:4b:84:f4:
                    ea:0c:61:b2:01:fd:02:34:4b:81:55:f7:2b:23:52:
                    18:b9:62:ad:4d:7d:e9:40:10:03:e4:68:f8:f4:96:
                    2d:4c:59:34:8e:8b:2d:16:be:f9:9a:bb:fd:db:93:
                    d7:ee:e4:9e:1f:b8:16:2b:c9:12:84:bf:56:4d:13:
                    c2:2d:cf:94:dd:7f:68:b8:f6:a2:72:0d:ab:86:28:
                    9b:e0:d0:5d:47:66:74:8b:69:d6:18:9e:44:42:a8:
                    4c:bd:a0:db:d2:9a:48:c2:9e:61:db:1f:d8:17:b8:
                    37:ac:42:0a:d3:da:a0:53:39:f7:10:a0:0e:63:cd:
                    dd:50:28:aa:e8:f4:b0:48:d4:e8:46:59:83:84:68:
                    9a:ff:bc:8b:c5:5c:dc:a4:59:48:3a:98:5a:68:be:
                    ed:0c:95:42:3a:d3:46:0f:36:d4:71:e1:0d:c0:2e:
                    4e:6d:82:03:20:a3:5e:ec:40:bd:47:35:bb:8a:d5:
                    bf:d8:ac:fc:22:93:20:1d:dc:5d:b9:95:23:54:71:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:05:6E:4A:78:24:22:43:33:FC:D2:3C:FB:90:71:2F:C6:69:13
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:5a:df:ed:8f:4b:cb:2e:32:56:d4:ca:bb:dd:5c:da:0a:5f:
         4d:a0:ce:12:ff:8d:1b:b8:5b:a9:68:16:13:6b:92:2d:98:12:
         9a:9a:f4:59:5d:86:f1:77:92:c4:81:31:d3:3d:e1:4b:27:14:
         c3:b8:39:53:d1:56:cf:9b:e0:7a:e6:e3:40:75:ec:a0:dc:bc:
         17:57:c1:fa:a7:67:1e:a6:bd:a4:37:67:5c:1f:41:52:0f:23:
         78:14:3f:31:f3:78:a5:84:85:a1:c3:2e:ab:55:b5:6b:cf:af:
         41:7a:97:09:4b:18:9a:24:35:3c:2f:24:0e:ed:7b:e0:92:ff:
         76:9f:f4:c0:91:aa:12:7b:fa:55:fd:56:99:9e:62:f0:2f:ca:
         3a:13:74:00:0a:79:f1:fa:09:f5:f0:3b:8e:e7:21:69:29:85:
         79:89:67:20:d3:c1:be:fd:b1:a8:75:68:f2:c0:d6:a7:1d:03:
         1c:cd:f0:4e:20:3f:12:cd:a2:00:ee:2b:63:34:c5:f5:72:cd:
         a4:51:f5:75:0d:ee:d1:1f:92:73:5a:c7:40:eb:62:ca:a3:88:
         e2:80:62:d5:98:79:8a:45:72:57:8d:8b:2e:41:1c:28:0f:9b:
         7b:14:d1:58:e1:21:62:d9:46:f8:2a:c4:be:12:6b:47:9b:8a:
         9a:2c:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:41 2024 by rpki-client on console-ams.rpki-client.org