Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/323830343a353366303a3a2f33322d3438203d3e20323638363137.roa
File:                     323830343a353366303a3a2f33322d3438203d3e20323638363137.roa (raw, json)
Hash identifier:          qgqXU+lAuHZVWROKe35FpwJ1n/7vFykKh+cktn10Hec=
Subject key identifier:   7E:86:EA:58:02:B2:E2:4B:A4:3A:FA:0F:38:32:EB:46:93:62:33:E6
Certificate issuer:       /CN=11EA743ABF823F6CB73971D59B2C266295C87C6B
Certificate serial:       2230BF59A27E7665D9F5F5A04382447167FFF5B2
Authority key identifier: 11:EA:74:3A:BF:82:3F:6C:B7:39:71:D5:9B:2C:26:62:95:C8:7C:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/323830343a353366303a3a2f33322d3438203d3e20323638363137.roa
Signing time:             Thu 04 Apr 2024 22:47:12 +0000
ROA not before:           Thu 04 Apr 2024 22:42:12 +0000
ROA not after:            Thu 03 Apr 2025 22:47:12 +0000
asID:                     268617
IP address blocks:        2804:53f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.crl
                          rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:30:bf:59:a2:7e:76:65:d9:f5:f5:a0:43:82:44:71:67:ff:f5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EA743ABF823F6CB73971D59B2C266295C87C6B
        Validity
            Not Before: Apr  4 22:42:12 2024 GMT
            Not After : Apr  3 22:47:12 2025 GMT
        Subject: CN=7E86EA5802B2E24BA43AFA0F3832EB46936233E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:b2:97:cd:ce:df:4c:0f:7a:49:49:6d:6b:
                    2f:98:fa:a0:e3:1c:72:20:71:86:8a:ad:5e:71:0e:
                    28:8e:8e:d0:17:85:cb:8a:9a:d5:f4:af:57:3d:ff:
                    4d:0f:0c:78:dc:2a:9f:8f:f5:f3:29:e2:5d:fb:cd:
                    60:24:55:9e:44:3c:40:c4:55:38:0c:7d:64:ae:81:
                    2f:9a:ae:cb:ba:78:1a:bd:97:96:eb:2b:db:9e:e4:
                    90:41:8e:02:6e:89:aa:b8:99:83:12:f8:cc:b0:70:
                    4a:f9:42:81:12:20:d2:38:d3:0a:4b:2e:9a:f7:ba:
                    9e:b0:49:7b:ba:8c:68:80:43:8a:ea:18:d8:56:ed:
                    f2:6f:d9:80:b5:4a:a0:c4:8d:8d:c1:17:4b:67:33:
                    4b:cf:ea:ce:2e:ef:a4:15:3f:e3:75:9d:e1:e4:35:
                    a2:e5:71:b2:d7:91:f8:c9:6b:be:17:57:45:7b:77:
                    92:ff:fe:dd:cb:9e:ef:49:d0:2f:69:f2:2a:00:80:
                    24:e1:4d:8d:d1:0c:b1:c1:db:37:f7:b1:15:40:06:
                    bb:74:1c:2d:9b:4b:eb:1b:01:68:e2:60:27:04:38:
                    41:3a:77:85:49:47:2e:52:ff:81:00:af:71:89:e2:
                    29:ba:ff:82:38:88:64:b9:ad:ca:9e:f7:17:e4:0d:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:86:EA:58:02:B2:E2:4B:A4:3A:FA:0F:38:32:EB:46:93:62:33:E6
            X509v3 Authority Key Identifier:
                keyid:11:EA:74:3A:BF:82:3F:6C:B7:39:71:D5:9B:2C:26:62:95:C8:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/323830343a353366303a3a2f33322d3438203d3e20323638363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:40:eb:4f:77:2d:1b:cd:d7:7d:47:c7:d6:81:e6:ed:83:
         f4:b4:1f:46:4a:12:36:e5:0d:47:e6:d5:51:44:c6:c6:5e:29:
         b7:76:50:ba:6b:a1:74:d1:78:da:9c:c8:09:e1:5c:0f:30:5b:
         c4:3d:67:8e:6b:45:8b:b2:56:dd:34:83:42:6d:bc:b0:06:fe:
         81:6f:2d:ee:54:bc:77:34:20:0b:da:60:3a:ca:b6:0f:3e:68:
         c2:f8:84:85:4c:ee:19:1a:39:c0:6d:93:00:2e:e0:da:55:6c:
         51:6e:5c:91:48:62:e1:b9:7d:12:35:d7:35:5e:da:db:f5:0f:
         0b:aa:b6:43:21:58:00:a2:ca:c2:04:39:77:4c:61:c9:e0:2a:
         d1:51:e2:5f:14:3e:7f:e2:65:d5:6f:3f:dd:87:64:d8:30:cf:
         e5:b0:63:d6:b0:e5:34:ba:f5:71:6d:dc:bc:e1:af:14:d9:08:
         83:95:00:71:4e:09:c0:f6:17:b4:bd:b9:03:49:4c:ba:52:a3:
         a1:70:88:a9:b1:b2:ae:ca:27:98:57:65:c5:77:13:9f:bd:99:
         57:e8:8c:5d:49:51:11:89:37:dc:4f:62:bf:51:86:95:89:cf:
         68:e5:27:1d:39:4a:98:16:a8:ce:4b:e2:18:58:f7:42:ce:62:
         4f:94:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:36 2024 by rpki-client on console-fra.rpki-client.org