Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/323830343a346136383a3a2f33322d3438203d3e20323637323338.roa
File:                     323830343a346136383a3a2f33322d3438203d3e20323637323338.roa (raw, json)
Hash identifier:          uonSD98IZrRg4/xyYTloXXn3h+nY2EcgepzzHxGOn1A=
Subject key identifier:   43:D4:DC:4C:EE:89:F9:02:EA:0F:43:2E:48:33:31:61:2D:C0:E3:06
Certificate issuer:       /CN=E80FE9AB1687AC2792B069391E076B77BA48B549
Certificate serial:       577B7AF4A10CFA3D1ABC801541FEF0588D5483C6
Authority key identifier: E8:0F:E9:AB:16:87:AC:27:92:B0:69:39:1E:07:6B:77:BA:48:B5:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E80FE9AB1687AC2792B069391E076B77BA48B549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/323830343a346136383a3a2f33322d3438203d3e20323637323338.roa
Signing time:             Tue 25 Jun 2024 17:38:41 +0000
ROA not before:           Tue 25 Jun 2024 17:33:41 +0000
ROA not after:            Tue 24 Jun 2025 17:38:41 +0000
asID:                     267238
IP address blocks:        2804:4a68::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/E80FE9AB1687AC2792B069391E076B77BA48B549.crl
                          rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/E80FE9AB1687AC2792B069391E076B77BA48B549.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E80FE9AB1687AC2792B069391E076B77BA48B549.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7b:7a:f4:a1:0c:fa:3d:1a:bc:80:15:41:fe:f0:58:8d:54:83:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80FE9AB1687AC2792B069391E076B77BA48B549
        Validity
            Not Before: Jun 25 17:33:41 2024 GMT
            Not After : Jun 24 17:38:41 2025 GMT
        Subject: CN=43D4DC4CEE89F902EA0F432E483331612DC0E306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:43:c4:3f:11:12:0d:1c:82:90:e6:a7:1b:
                    3d:dc:6c:8f:1b:0f:71:ec:a0:88:06:e2:b7:dd:38:
                    8f:c4:90:77:bc:71:87:99:a8:4f:c1:b5:d4:6a:c3:
                    cc:53:18:89:ce:63:61:7f:09:4f:8b:4f:17:f0:dd:
                    d4:82:19:bc:78:34:aa:60:89:ac:a2:5e:86:aa:4c:
                    c4:0e:8b:9e:19:2d:42:95:87:95:26:16:af:3c:8d:
                    d0:99:1b:6a:cd:2d:d3:bf:ec:89:7f:1b:ea:ff:8d:
                    74:d6:ca:ff:2a:7f:b5:de:ba:a8:8d:99:d0:06:5d:
                    fc:6b:23:fe:e5:9c:d0:ea:39:8b:79:ea:e4:97:be:
                    ea:2c:c3:96:a3:f2:56:a3:8a:ab:79:83:45:6e:2d:
                    f1:0c:eb:7a:60:63:e2:9e:44:78:e1:b4:5d:f1:a6:
                    d2:bd:74:c2:cb:b2:79:6d:54:32:08:7e:b4:56:65:
                    f5:d6:54:bf:5d:6d:4f:03:05:0d:a6:1b:1d:be:30:
                    48:56:43:23:da:da:0a:7d:77:08:eb:00:46:c7:78:
                    82:e9:b9:03:96:90:6b:dc:33:c8:38:dc:f5:e4:9d:
                    7d:20:10:fd:48:f7:19:a7:90:48:c3:b7:5c:34:0c:
                    45:08:af:92:f3:0b:33:40:ab:0d:75:34:d0:cb:c6:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D4:DC:4C:EE:89:F9:02:EA:0F:43:2E:48:33:31:61:2D:C0:E3:06
            X509v3 Authority Key Identifier:
                keyid:E8:0F:E9:AB:16:87:AC:27:92:B0:69:39:1E:07:6B:77:BA:48:B5:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/E80FE9AB1687AC2792B069391E076B77BA48B549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E80FE9AB1687AC2792B069391E076B77BA48B549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/323830343a346136383a3a2f33322d3438203d3e20323637323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a68::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:30:85:24:5e:de:65:52:e9:85:57:1a:4c:25:94:6f:ee:
         3b:50:59:44:ca:d2:6c:46:bb:05:87:b1:53:64:41:9e:ec:75:
         d1:62:c2:34:73:42:8f:3f:2c:b9:e3:26:e9:4f:56:79:dc:3e:
         31:5d:8f:db:9f:8d:e9:e4:34:9d:fd:f3:63:05:2d:f3:c1:58:
         82:c3:0c:8b:3f:9f:f9:8d:70:47:a5:18:85:45:c5:43:67:ce:
         03:21:f9:7c:91:b6:83:10:f3:32:9d:31:31:28:73:1a:b7:b4:
         78:19:89:ca:3b:ca:5b:e3:9f:0d:60:9f:81:e1:18:67:37:da:
         b1:41:eb:35:a2:ac:7c:4b:09:ea:df:df:68:25:06:97:5c:0a:
         63:5d:97:aa:44:31:d0:2b:55:18:f5:e7:59:ec:b3:32:f9:6e:
         6c:ed:aa:a9:af:8a:f9:21:1b:01:8b:8e:26:60:58:9b:5c:55:
         d1:65:c5:7f:2e:03:70:07:2f:d5:ce:2a:20:37:2b:51:93:d6:
         dc:a0:26:15:95:d6:cb:6c:6d:f2:17:60:93:82:fc:0f:ce:62:
         07:c8:af:f8:0f:6f:3c:92:42:3d:64:31:a1:02:10:83:3b:9d:
         7f:63:6e:28:ef:fd:55:9f:67:c5:b2:44:f6:f7:36:91:33:35:
         48:1a:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:36 2024 by rpki-client on console-ams.rpki-client.org