Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa
File:                     323830343a366534383a3a2f33322d3335203d3e20323730353836.roa (raw, json)
Hash identifier:          KIWD5JdLMAa2dZhCWXl4BED6Ds4H7Da32fd7QWBbmmw=
Subject key identifier:   D5:E9:9D:9B:D1:B9:B5:F5:07:8A:50:76:84:B1:5D:11:D3:FF:B6:DD
Certificate issuer:       /CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Certificate serial:       0921986434BF2B1274004B1ED5FC234660FC8169
Authority key identifier: EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa
Signing time:             Wed 03 Apr 2024 18:32:40 +0000
ROA not before:           Wed 03 Apr 2024 18:27:40 +0000
ROA not after:            Wed 02 Apr 2025 18:32:40 +0000
asID:                     270586
IP address blocks:        2804:6e48::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
                          rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:21:98:64:34:bf:2b:12:74:00:4b:1e:d5:fc:23:46:60:fc:81:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
        Validity
            Not Before: Apr  3 18:27:40 2024 GMT
            Not After : Apr  2 18:32:40 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:4d:c8:04:9d:8c:73:80:74:e3:76:fc:b6:
                    b7:b8:eb:31:fe:e4:a3:6e:b3:15:79:ee:a4:aa:43:
                    e2:bf:46:50:18:cd:1f:17:cc:00:fd:a9:19:39:7f:
                    48:c7:c9:6f:d2:4a:e2:97:33:48:05:dc:4d:53:76:
                    64:ab:13:0d:9d:9b:69:fd:df:00:38:98:a7:44:f7:
                    bc:0f:0e:d4:56:11:2c:2c:b6:aa:83:8c:9e:46:6e:
                    7f:90:f1:cb:e5:b1:f0:ce:3a:ed:eb:5c:0e:09:47:
                    f9:8e:cd:86:62:91:c0:5d:ed:f9:f8:4f:07:a0:9c:
                    ff:80:44:dd:01:74:6b:33:30:c8:c1:57:63:f0:f7:
                    34:1f:8f:2b:85:ae:9d:fa:36:4f:b9:78:cc:08:59:
                    ed:4d:f9:47:c0:63:bf:55:fe:5c:eb:ca:ea:5f:e7:
                    fd:ff:c7:44:45:e4:4b:0d:a7:66:e8:af:66:7a:4a:
                    8e:83:20:bb:19:75:05:d1:55:0e:7d:8d:69:07:d4:
                    1f:80:75:00:c3:0b:57:7e:e2:25:79:b1:49:99:22:
                    27:fb:b7:d3:68:81:03:d7:1b:1f:c3:08:70:25:12:
                    c8:23:78:72:25:54:ae:51:4d:9a:2b:7c:fb:62:93:
                    6f:83:c4:92:f8:a2:53:1e:ec:6b:12:a5:be:4c:4a:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:9D:9B:D1:B9:B5:F5:07:8A:50:76:84:B1:5D:11:D3:FF:B6:DD
            X509v3 Authority Key Identifier:
                keyid:EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:20:36:3a:ae:20:ea:b3:a9:70:1a:62:e2:68:25:b9:18:
         d1:8c:ef:21:d2:7a:86:c0:aa:a8:09:cd:f2:71:d5:fa:3a:67:
         e9:04:d5:b6:f1:73:6b:a6:68:f4:58:fa:28:2e:ab:f4:31:0c:
         2b:06:85:78:d8:f0:e4:6f:b2:21:a1:ef:5e:01:56:02:42:18:
         b7:e5:eb:36:80:fe:70:3a:16:33:ef:68:8f:70:fb:b2:0a:e0:
         99:40:92:05:eb:e2:00:26:4a:0e:4f:25:76:de:0b:a9:d6:d1:
         9d:cf:49:73:65:db:51:74:df:e2:7d:4f:25:fc:77:41:b2:e9:
         6f:40:27:5f:4c:c8:59:47:35:b3:8c:64:3d:05:af:b8:21:50:
         90:d4:50:c1:6b:bb:1a:48:bb:e6:01:07:81:ed:6d:3a:ea:34:
         56:a9:2e:de:1f:d1:40:86:7f:78:f4:3f:e3:33:e9:27:a9:45:
         59:08:83:79:0c:48:56:6d:ab:09:70:57:58:6b:ee:54:db:09:
         6f:c9:20:4f:b5:13:3d:3c:94:ce:4c:d2:57:be:33:1a:d7:4a:
         24:fe:1f:33:a7:d3:70:53:94:fb:0b:c8:7d:dd:e7:5b:60:dd:
         7b:35:99:e7:71:e6:7f:22:fc:2f:bd:ed:1e:3f:bb:a7:40:69:
         6a:88:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:34 2024 by rpki-client on console-ams.rpki-client.org