Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33322d3332203d3e20323638303333.roa
File:                     323830343a353666303a3a2f33322d3332203d3e20323638303333.roa (raw, json)
Hash identifier:          o2RoMqySDSkfEqGDIJhoimqIpSO7pg6TRDz46872d1k=
Subject key identifier:   65:83:11:D2:6A:87:D6:AB:BB:D2:A8:FC:40:CE:46:EA:42:B4:EF:8D
Certificate issuer:       /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial:       66F26DC09E5AC61C9C7E52F1A72656551E0F0979
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33322d3332203d3e20323638303333.roa
Signing time:             Thu 31 Oct 2024 14:03:02 +0000
ROA not before:           Thu 31 Oct 2024 13:58:02 +0000
ROA not after:            Thu 30 Oct 2025 14:03:02 +0000
asID:                     268033
IP address blocks:        2804:56f0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f2:6d:c0:9e:5a:c6:1c:9c:7e:52:f1:a7:26:56:55:1e:0f:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
        Validity
            Not Before: Oct 31 13:58:02 2024 GMT
            Not After : Oct 30 14:03:02 2025 GMT
        Subject: CN=658311D26A87D6ABBBD2A8FC40CE46EA42B4EF8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:87:0e:5a:8a:7c:79:06:a8:43:a2:0c:02:
                    f4:cb:2a:0b:10:14:38:be:12:65:bc:11:5a:9a:36:
                    cd:22:da:48:3b:b7:17:cf:44:06:66:a7:ce:62:75:
                    89:a6:7e:5e:fb:3c:b0:1b:4e:34:ed:b5:c2:f3:60:
                    2c:4b:72:5a:0f:47:53:61:8c:d7:8e:5a:c8:17:73:
                    1b:33:02:e9:95:96:ad:9e:f9:10:dc:ef:73:c2:43:
                    91:7e:0d:5c:dc:4f:46:35:64:e1:14:ff:63:87:ca:
                    42:15:a3:b1:89:cd:10:ee:90:89:68:1e:66:ed:9e:
                    e8:1d:2d:9e:22:fd:f9:1e:64:21:81:51:ee:ca:71:
                    83:5c:a7:ad:ab:95:38:25:f5:52:56:0b:05:c8:6a:
                    76:90:fa:4d:5f:5a:c8:52:dd:1d:14:79:da:5c:2c:
                    44:0d:99:20:ac:8a:62:6c:ba:5c:61:d9:85:44:3e:
                    f4:de:58:2b:b0:89:9f:b6:2b:49:75:7b:97:b6:9f:
                    ad:7d:36:2b:c8:aa:1b:1b:57:e7:c1:c7:c3:90:4c:
                    bd:84:e8:85:36:78:19:1c:47:fe:74:0e:d4:62:47:
                    f7:da:62:2e:f9:aa:06:6f:e4:cc:8d:a6:50:0d:90:
                    8f:ab:55:c4:3b:63:d4:9e:79:19:c5:66:c2:33:23:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:83:11:D2:6A:87:D6:AB:BB:D2:A8:FC:40:CE:46:EA:42:B4:EF:8D
            X509v3 Authority Key Identifier:
                keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33322d3332203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:00:a5:55:1a:4c:d8:ed:ea:8b:35:e2:c7:53:21:6f:ff:cb:
         89:b3:18:e0:e4:50:38:19:51:14:14:30:f7:30:85:64:06:1c:
         3c:9b:b3:39:7a:95:b6:e7:fd:e5:13:a6:4f:42:64:41:01:e7:
         be:c2:b7:91:e7:94:b0:9a:04:22:7b:55:4e:45:b3:97:8e:08:
         fc:de:f6:91:51:ec:2d:1a:d6:94:24:04:0f:15:7e:11:5e:71:
         0c:40:88:3d:8b:37:b4:33:44:64:3e:0b:4e:22:bb:f6:d6:45:
         a0:e5:60:59:c3:f8:2f:17:bb:8f:da:d4:36:22:fd:f2:e5:88:
         76:dc:3c:8c:71:a1:e8:1d:80:65:e0:33:85:3e:87:84:24:79:
         9e:bd:8c:fa:da:35:e4:b2:69:d6:79:67:08:36:65:f4:83:f8:
         93:0e:f4:f6:2b:60:94:4e:5c:d3:ab:52:3c:4c:4b:67:97:7e:
         63:59:54:1f:3b:d6:fd:09:b2:16:ae:2f:76:3c:95:fd:c2:c9:
         1f:cc:01:bd:6d:34:aa:26:c4:e7:c9:aa:7d:71:98:39:27:37:
         ca:53:2f:d3:76:c9:2e:25:af:16:aa:ae:05:d3:06:cc:ea:03:
         19:9f:e7:99:26:40:76:75:ae:26:6a:bf:09:e1:ad:a3:78:b3:
         7e:af:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org