Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/323830343a363163343a3a2f33322d3335203d3e20323639323535.roa
File:                     323830343a363163343a3a2f33322d3335203d3e20323639323535.roa (raw, json)
Hash identifier:          dfDrncv/u0KgIP8q7mm+UhhHwP4IPTEC3e7/snAyDx8=
Subject key identifier:   D2:AB:FF:C5:38:82:13:F1:E2:88:54:FF:6C:79:19:E4:A8:4A:92:DA
Certificate issuer:       /CN=EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4
Certificate serial:       4E627FBD6F58F0EB01E6DC1A36BD730729A11ECD
Authority key identifier: EA:2A:C1:DA:78:3C:FE:A5:BE:27:5D:4B:18:41:F5:D2:0B:FF:B1:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/323830343a363163343a3a2f33322d3335203d3e20323639323535.roa
Signing time:             Wed 03 Apr 2024 21:49:39 +0000
ROA not before:           Wed 03 Apr 2024 21:44:39 +0000
ROA not after:            Wed 02 Apr 2025 21:49:39 +0000
asID:                     269255
IP address blocks:        2804:61c4::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.crl
                          rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:62:7f:bd:6f:58:f0:eb:01:e6:dc:1a:36:bd:73:07:29:a1:1e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4
        Validity
            Not Before: Apr  3 21:44:39 2024 GMT
            Not After : Apr  2 21:49:39 2025 GMT
        Subject: CN=D2ABFFC5388213F1E28854FF6C7919E4A84A92DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:88:fb:b5:6e:2a:85:d3:2d:3a:a2:8b:c4:
                    32:8d:24:a2:91:33:35:6d:02:64:30:43:b1:14:94:
                    2e:1d:1a:fd:f2:af:c3:75:cd:ba:b9:ca:64:9d:28:
                    c9:fe:d0:c5:42:bd:08:7b:ee:72:ed:ca:69:50:02:
                    c8:09:dd:2c:cb:ce:d8:51:4f:b3:b6:45:76:12:02:
                    15:de:23:fd:fc:bc:a5:49:a3:13:91:0e:e3:51:e0:
                    69:66:f9:ed:16:5e:31:c9:07:d4:24:12:2c:60:35:
                    18:67:c6:07:f4:f5:e7:0e:3a:47:d1:e2:c3:b2:f4:
                    2a:7d:5a:74:f0:fe:4c:7b:92:02:e6:25:4f:ba:18:
                    c3:0f:5a:06:2d:8f:4b:eb:45:31:9a:59:9a:4c:57:
                    59:e7:49:e1:64:62:df:e9:ab:27:dc:c7:76:b1:91:
                    da:9a:5c:db:75:ac:74:98:a0:4e:00:5b:dc:43:8c:
                    f4:ca:14:4f:67:b1:bd:36:ee:40:c4:b3:57:c4:23:
                    ed:5e:89:48:f5:02:3a:a5:3b:4b:45:75:13:85:4b:
                    16:db:b8:33:3b:ad:e6:4f:8e:b5:c5:a0:e7:d6:a6:
                    a5:20:2c:f7:23:b6:22:3f:61:4b:7d:ca:69:80:c5:
                    4d:5e:5d:31:6a:d3:04:62:e2:7b:b0:a3:5d:8e:af:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:FF:C5:38:82:13:F1:E2:88:54:FF:6C:79:19:E4:A8:4A:92:DA
            X509v3 Authority Key Identifier:
                keyid:EA:2A:C1:DA:78:3C:FE:A5:BE:27:5D:4B:18:41:F5:D2:0B:FF:B1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/323830343a363163343a3a2f33322d3335203d3e20323639323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:fe:cb:eb:40:18:c8:24:60:19:95:d9:11:9b:23:9f:49:c1:
         34:69:bd:1a:7b:c1:5c:6f:c9:e6:13:d0:91:5a:cf:95:ec:f8:
         04:5f:d7:19:c2:a7:11:81:9f:e8:0c:ee:d6:4b:d4:3f:59:42:
         b6:2e:a8:59:52:21:a7:76:6c:2c:7f:e7:1e:1d:db:3f:bf:66:
         2f:62:13:db:be:b6:d3:c7:2b:21:f3:5f:21:b3:7b:c6:7c:cb:
         95:d8:fb:f0:6a:3c:27:4d:4f:34:fc:21:43:b7:af:56:11:b1:
         82:1b:0b:ab:85:bb:de:78:e1:44:4d:c9:d2:91:d0:f9:69:b3:
         73:23:de:f8:2e:01:04:3b:40:f9:89:af:f4:1a:31:8a:f6:74:
         b8:95:6f:49:b2:4c:a4:79:a5:09:b8:9e:87:9e:68:a4:6c:57:
         62:6b:d9:07:3f:41:d3:c9:eb:7a:1d:56:37:12:07:e0:32:e7:
         98:50:be:82:7f:21:cd:65:7c:88:8c:c8:90:91:7f:a1:1e:e4:
         f3:be:c0:03:e8:b9:01:6f:12:66:25:47:24:aa:cc:94:a3:c8:
         7b:7f:91:4c:2d:7f:77:9a:1e:d6:4a:98:a2:9f:72:b6:94:c9:
         f3:62:f0:64:15:f0:a1:1f:ce:5d:a5:d0:41:08:c9:fa:8b:01:
         82:91:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org