Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33342d3334203d3e20323638303333.roa
File:                     323830343a353666303a3a2f33342d3334203d3e20323638303333.roa (raw, json)
Hash identifier:          qeUmst3bhoZpVA1t0gdr1rr8IrEuBE3A1XJuratQRqU=
Subject key identifier:   96:41:49:73:0A:3E:61:2B:00:10:7B:A0:63:A2:DC:3B:D4:5B:DB:FB
Certificate issuer:       /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial:       2FFAD460FE7411753C8919E9C4E8BF7C434E587E
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33342d3334203d3e20323638303333.roa
Signing time:             Thu 31 Oct 2024 14:03:03 +0000
ROA not before:           Thu 31 Oct 2024 13:58:03 +0000
ROA not after:            Thu 30 Oct 2025 14:03:03 +0000
asID:                     268033
IP address blocks:        2804:56f0::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fa:d4:60:fe:74:11:75:3c:89:19:e9:c4:e8:bf:7c:43:4e:58:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
        Validity
            Not Before: Oct 31 13:58:03 2024 GMT
            Not After : Oct 30 14:03:03 2025 GMT
        Subject: CN=964149730A3E612B00107BA063A2DC3BD45BDBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:20:43:7f:19:b0:7c:0b:ca:f7:b8:fa:0b:
                    0e:d5:64:81:bf:74:81:3b:e9:97:ed:e3:8a:7b:b4:
                    15:38:23:a2:82:c4:d8:71:eb:d3:81:78:70:40:a8:
                    2d:ae:46:ef:49:dd:ef:34:cf:4e:34:dd:71:b5:be:
                    89:cb:9c:ff:1d:ca:8c:2f:f5:f4:2f:94:ef:9a:f9:
                    59:36:fc:e1:2d:30:e3:a3:80:41:b5:8d:ad:d1:73:
                    78:b5:7c:da:bd:bb:ee:ee:aa:a0:d2:64:5f:f4:79:
                    27:d3:b5:ea:bc:41:6e:b8:9c:f3:82:8c:17:de:cc:
                    36:88:55:fd:03:c3:64:33:d9:4f:83:dc:85:a5:77:
                    3d:e5:9b:82:a8:0a:77:a2:2c:52:d7:85:9e:89:9a:
                    1a:ee:bb:5b:c2:ef:7c:66:5a:5a:4b:74:fb:36:a9:
                    62:0e:b5:fa:75:90:b2:fd:3a:37:7a:e0:19:3c:d5:
                    8c:54:57:3b:22:e8:87:dd:f9:c0:1b:7c:ce:31:12:
                    d3:91:f5:41:c1:94:0f:34:59:d8:5e:d1:a5:3e:e9:
                    99:46:82:50:87:83:cc:2b:37:03:c9:fc:52:d4:9a:
                    30:db:54:43:a0:51:c9:e3:f9:7d:ba:72:cc:10:07:
                    e9:f1:43:d1:4f:fa:47:45:1e:81:ab:ee:cd:74:d9:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:41:49:73:0A:3E:61:2B:00:10:7B:A0:63:A2:DC:3B:D4:5B:DB:FB
            X509v3 Authority Key Identifier:
                keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33342d3334203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:31:3f:4e:ba:9f:8f:36:0e:33:36:97:1c:0d:45:4b:db:
         5f:14:04:af:01:76:4d:46:ac:8d:ba:4c:70:ba:df:18:8d:c7:
         b5:c0:a7:a9:a6:d3:54:07:be:0e:4f:e3:78:2b:8c:76:cd:76:
         4f:c8:5f:95:d1:e0:46:46:26:f0:46:2a:12:0f:82:30:73:c5:
         74:50:a3:40:ec:f6:79:9a:6a:61:2c:88:05:6e:f4:cd:02:b3:
         ef:6b:ea:d9:bd:40:97:b1:03:a1:a4:a7:5b:6b:96:ce:b9:4f:
         c0:8c:ac:cd:a9:79:98:7e:6c:2d:5b:f1:f4:9c:40:33:e0:20:
         58:84:80:43:13:7c:7a:fe:9c:23:3d:95:5a:56:ff:af:c3:c2:
         4c:2b:ba:31:c0:65:d4:0c:81:fc:97:c2:69:3a:86:79:89:e3:
         af:4b:90:31:86:b5:4e:4e:f6:e3:47:6f:93:ce:0c:db:a2:9d:
         f7:44:c2:68:41:f7:fc:e2:4b:25:73:69:a8:ed:d9:51:9a:d3:
         75:b9:f9:c9:e9:89:7c:94:63:78:9c:86:c7:3c:5b:96:4a:7a:
         8e:d5:14:6a:bc:7b:4d:0b:78:82:0e:da:4f:f8:38:d6:8d:4a:
         02:75:0d:e7:fb:e2:66:5a:fb:c6:a4:c5:57:f1:d5:59:09:e4:
         e8:80:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org