Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa
File:                     323830343a353838343a3a2f33322d3332203d3e20323638313334.roa (raw, json)
Hash identifier:          eZU94tYY5qqmntWI2paIbQBf9Q4UT832CXjaIq9UiSg=
Subject key identifier:   10:29:84:EA:83:77:81:E4:92:AE:EF:58:43:9B:4A:3D:1C:F7:18:FB
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       4EA3C5FFEDDFBCB317E457E8840F1228F6D9344B
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa
Signing time:             Thu 04 Apr 2024 14:07:30 +0000
ROA not before:           Thu 04 Apr 2024 14:02:30 +0000
ROA not after:            Thu 03 Apr 2025 14:07:30 +0000
asID:                     268134
IP address blocks:        2804:5884::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 10:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a3:c5:ff:ed:df:bc:b3:17:e4:57:e8:84:0f:12:28:f6:d9:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Apr  4 14:02:30 2024 GMT
            Not After : Apr  3 14:07:30 2025 GMT
        Subject: CN=102984EA837781E492AEEF58439B4A3D1CF718FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:22:d0:b6:e7:87:06:9b:41:ca:38:34:6f:
                    5d:ce:d5:47:13:d8:32:c7:11:8a:b2:1c:27:73:04:
                    9f:ee:d1:54:2f:08:ce:49:3b:f0:b5:8e:18:13:aa:
                    f8:ac:90:78:1d:8d:a2:66:84:3a:14:51:4f:ac:69:
                    c9:78:6b:09:dd:02:3d:30:b9:22:59:3f:c5:40:45:
                    05:1d:e1:6c:5c:bd:29:aa:b2:38:a7:c2:49:21:22:
                    8c:7d:0c:4b:9d:80:7d:a0:65:59:7b:49:bc:40:dd:
                    d0:38:5a:f2:e1:18:07:55:f7:8d:f8:c9:9c:59:82:
                    98:f7:02:06:5f:66:22:d2:cf:43:4d:35:5f:79:14:
                    35:9e:df:81:f0:c3:bb:bc:7e:7c:f1:6d:1e:88:c2:
                    45:30:ba:ba:fe:26:33:35:51:a9:c4:52:6b:95:3c:
                    d5:37:8c:a6:10:e0:ff:9e:e3:62:71:56:9e:86:7b:
                    f0:0d:06:d1:23:6b:8c:ca:0c:6a:c0:34:a9:0f:66:
                    88:15:55:4f:d8:42:39:a7:2f:b7:92:cd:45:82:73:
                    13:de:81:08:e4:ea:e3:f3:86:61:67:8f:6a:31:41:
                    88:4c:f6:7d:0b:95:82:23:cd:6c:47:d1:98:b7:aa:
                    3d:4e:17:07:59:e4:22:73:4c:9f:5c:dd:3a:6c:3b:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:29:84:EA:83:77:81:E4:92:AE:EF:58:43:9B:4A:3D:1C:F7:18:FB
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:0e:ad:90:d7:ee:fc:02:6d:5c:07:23:ee:4f:e1:08:bd:
         d5:1b:e7:f0:0a:b5:18:99:81:03:0c:99:f2:71:81:c8:4f:1b:
         14:79:c9:0b:67:f6:c1:d6:e1:32:0f:dc:e8:7e:11:5c:ee:82:
         3f:aa:fa:cf:61:f0:40:eb:9b:5f:f9:e8:fc:09:4e:27:aa:26:
         a3:a4:b3:52:13:9a:ad:8a:ef:65:33:07:1c:63:bb:f5:88:d6:
         cb:b8:c1:c8:b6:0c:53:12:35:eb:57:1c:a2:13:38:92:70:fd:
         90:96:e7:f8:32:da:c4:1d:45:7c:7c:45:9b:d7:c7:de:ea:2c:
         84:fe:6e:78:60:fd:d4:12:1d:b7:01:c5:92:b4:1d:c9:a4:72:
         ea:d3:91:07:de:5e:fc:a1:d4:14:cb:f9:9b:b6:c3:0c:bb:24:
         7a:9b:bc:44:d4:2d:da:c8:cc:6b:bb:13:d7:c1:e2:53:ee:bc:
         9f:71:e1:7e:6c:7e:99:e3:06:1f:1f:a2:b0:e6:01:5d:de:d4:
         f9:20:9b:b4:46:26:7a:9d:79:b6:b4:43:d7:52:f5:d1:c5:f5:
         f7:a2:f2:7b:0f:6d:ac:aa:70:08:42:63:94:9f:35:bc:7d:a4:
         20:23:ae:10:22:da:b9:82:13:68:88:f8:35:d5:0d:bf:19:d6:
         6f:8f:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:19 2024 by rpki-client on console-fra.rpki-client.org