Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          xBNFkcf6LSxohEWi05EZjp6evQYQzB9T8pZYE+NROCc=
Subject key identifier:   11:96:02:0C:FB:3C:11:65:EC:96:5E:2F:E6:48:D6:8E:BE:06:ED:20
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       28688BFE31528B776EC39AB26C1A6693F35DBA6F
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:34 +0000
ROA not before:           Wed 03 Apr 2024 20:46:34 +0000
ROA not after:            Wed 02 Apr 2025 20:51:34 +0000
asID:                     52916
IP address blocks:        2804:2b10:1000::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:68:8b:fe:31:52:8b:77:6e:c3:9a:b2:6c:1a:66:93:f3:5d:ba:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:34 2024 GMT
            Not After : Apr  2 20:51:34 2025 GMT
        Subject: CN=1196020CFB3C1165EC965E2FE648D68EBE06ED20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:3e:e0:c3:f6:76:e2:e7:0d:23:f9:a4:ac:
                    da:0e:fa:66:18:b9:34:fb:e3:52:23:48:a4:66:97:
                    a3:45:cf:b5:63:46:a9:fc:52:e9:39:cf:49:d7:3c:
                    2c:6e:f8:a1:c3:05:6c:78:66:7e:ac:9f:73:e6:13:
                    b8:e2:4c:35:e0:91:c1:4f:c7:80:39:8c:e8:d3:6e:
                    68:5c:2a:b8:01:5c:45:d0:a4:cf:82:14:88:92:9c:
                    32:e8:b6:9f:aa:b5:09:fb:2e:52:40:27:49:9d:7d:
                    2f:af:23:72:da:32:13:79:79:4e:d9:e8:60:f7:18:
                    10:f2:7a:e9:1d:6d:60:a5:48:06:c6:c4:f9:70:14:
                    0c:a3:ae:b4:8c:91:dd:60:fa:83:23:73:a4:66:5a:
                    4c:e3:84:a0:dc:ec:ea:08:08:6e:69:f9:db:09:57:
                    d5:ce:24:25:cf:d5:cf:df:de:f7:ee:9c:83:db:5d:
                    e2:10:8f:88:ee:35:55:7c:4c:76:f9:fc:3a:fc:23:
                    76:17:a3:8e:3e:e3:72:77:86:79:71:86:34:ad:68:
                    26:a4:99:a6:0b:7b:5d:a6:62:c3:92:58:45:a9:37:
                    13:9a:bd:07:da:47:dd:29:5a:3a:ba:93:dd:1b:8f:
                    05:74:bf:5d:18:8b:e1:1b:fa:a7:cb:7c:b6:df:c6:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:96:02:0C:FB:3C:11:65:EC:96:5E:2F:E6:48:D6:8E:BE:06:ED:20
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:1000::/39

    Signature Algorithm: sha256WithRSAEncryption
         02:85:f9:9a:b9:f8:38:4e:bf:5b:0d:d8:e0:3e:66:e3:63:a9:
         12:c0:8f:6e:5f:37:a4:e5:36:ad:9c:a1:94:c7:51:18:6d:1a:
         0d:01:52:75:eb:cf:9c:7a:a7:b8:b1:09:d0:65:d8:c0:7f:34:
         25:fd:41:38:a1:d9:73:0c:a6:f3:bb:4e:b4:4c:b8:9a:ea:31:
         a3:68:8d:41:a8:60:40:ed:5b:06:32:09:8e:ed:30:a7:6a:d2:
         d0:63:5c:c1:bc:21:89:a2:8b:7c:12:03:11:50:ce:53:1d:1f:
         7c:84:c6:e7:bd:99:4b:f3:09:ec:6e:70:a2:3c:32:3f:86:38:
         85:70:24:6e:fb:d3:30:53:f5:78:59:e2:40:44:3e:5f:8e:be:
         27:06:d8:97:4d:94:0a:f1:ac:16:d3:c8:1e:85:9e:47:5a:80:
         a1:69:fd:e1:8f:8c:9b:60:09:9c:37:fd:85:71:84:c8:13:9b:
         21:c9:81:a6:be:51:e9:83:79:d8:7a:ec:d4:34:cc:bc:7b:1b:
         41:cd:dd:a7:c0:2b:c2:89:eb:fa:d0:dc:4e:0a:18:aa:14:3c:
         31:d7:9d:69:61:98:94:cf:62:5b:2a:42:99:d8:29:78:5d:7a:
         89:5e:3b:ae:49:89:90:f3:81:98:db:da:95:7a:ce:58:56:83:
         e2:c4:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:40 2024 by rpki-client on console-fra.rpki-client.org