Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/323830343a353233383a3a2f33342d313238203d3e20323638353033.roa
File:                     323830343a353233383a3a2f33342d313238203d3e20323638353033.roa (raw, json)
Hash identifier:          TI1ih04jRD/xrdzdGFzHTHVpR1CuXzqalkN3DJmFpqg=
Subject key identifier:   37:7B:66:EF:BB:37:BB:73:3D:36:8E:16:01:5E:A8:13:2E:68:85:68
Certificate issuer:       /CN=CB4E9C406D5F0885AD85C9212628075DF1A74B32
Certificate serial:       4F27220C540BEAC93790AF640E18F61B4022F985
Authority key identifier: CB:4E:9C:40:6D:5F:08:85:AD:85:C9:21:26:28:07:5D:F1:A7:4B:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/323830343a353233383a3a2f33342d313238203d3e20323638353033.roa
Signing time:             Tue 26 Nov 2024 19:53:14 +0000
ROA not before:           Tue 26 Nov 2024 19:48:14 +0000
ROA not after:            Tue 25 Nov 2025 19:53:14 +0000
asID:                     268503
IP address blocks:        2804:5238::/34 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.crl
                          rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:27:22:0c:54:0b:ea:c9:37:90:af:64:0e:18:f6:1b:40:22:f9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4E9C406D5F0885AD85C9212628075DF1A74B32
        Validity
            Not Before: Nov 26 19:48:14 2024 GMT
            Not After : Nov 25 19:53:14 2025 GMT
        Subject: CN=377B66EFBB37BB733D368E16015EA8132E688568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:5a:14:84:6e:f9:1a:43:03:4f:11:02:69:
                    07:1f:6c:63:04:39:c4:e3:4d:07:3a:3f:a7:f2:a9:
                    77:28:5f:e6:67:c6:7f:49:fa:76:57:48:3c:54:61:
                    dc:7e:8e:19:3b:92:11:23:5f:75:e5:e2:28:4b:a3:
                    73:1d:69:c0:38:11:0d:b0:57:f6:49:8b:06:c9:d8:
                    6b:4e:0d:90:0d:ee:67:d0:5b:a0:6d:16:6b:fc:4a:
                    dd:85:64:0c:39:d1:bf:f4:5b:18:c3:0d:d4:df:b0:
                    49:6a:00:d8:b3:81:46:80:d9:5c:12:76:bb:50:d5:
                    54:f4:f9:6b:3c:5c:03:e4:e9:46:ae:00:28:0b:20:
                    98:29:5d:c8:99:be:34:aa:03:7a:4b:73:5e:84:5a:
                    16:f6:7e:94:fd:cc:3a:29:4f:db:58:90:99:99:0c:
                    d5:bb:44:2d:09:4a:a3:48:fc:7c:4a:76:a3:f2:7e:
                    b3:9e:0d:65:6a:5c:13:4d:f3:bf:c6:36:60:58:7e:
                    3e:b4:e7:52:5e:e2:5d:c8:be:e1:e4:92:81:fa:ff:
                    b4:d2:25:a5:53:ae:c7:c0:0f:0d:7f:58:7f:82:1f:
                    da:d2:c7:14:a5:89:e5:f1:f0:58:a0:c5:46:ab:60:
                    76:ac:63:68:49:ce:b4:f5:aa:51:47:ce:62:dc:ce:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:66:EF:BB:37:BB:73:3D:36:8E:16:01:5E:A8:13:2E:68:85:68
            X509v3 Authority Key Identifier:
                keyid:CB:4E:9C:40:6D:5F:08:85:AD:85:C9:21:26:28:07:5D:F1:A7:4B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/323830343a353233383a3a2f33342d313238203d3e20323638353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5238::/34

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:e9:9b:c6:fe:8d:f5:d0:e8:7e:06:9b:1f:3e:c0:eb:24:
         8c:98:93:f6:06:39:51:9b:8a:e3:01:31:27:da:96:8f:13:d8:
         1d:f1:44:11:72:84:7f:55:bc:64:38:d7:05:d6:4e:e0:fb:f5:
         0e:f8:dc:7e:81:49:77:78:05:a5:1d:3a:7b:85:28:f3:61:88:
         89:58:00:21:e7:e7:ed:68:8d:5f:00:15:f2:47:30:e1:d1:08:
         ed:9b:ae:10:c9:8b:41:5a:07:90:65:ae:0a:30:b3:0a:b8:c9:
         f0:f0:b4:44:35:dc:fa:6f:62:ef:26:70:4b:6e:93:74:5a:29:
         30:06:27:2b:38:dc:14:fc:2c:04:67:a1:e7:ce:1a:ce:13:87:
         3d:2f:4b:f1:22:a7:8f:27:9d:fc:5c:61:5e:2b:fb:2d:97:f8:
         dd:3a:17:5e:e8:13:af:1b:63:46:83:5b:e9:4e:c6:13:53:c8:
         2b:41:32:d4:66:6d:14:7d:d8:70:e3:91:28:d7:22:03:a6:ab:
         3d:49:aa:62:97:62:e3:c0:b1:c7:f6:f2:3d:30:44:ad:28:5b:
         85:f2:87:cc:49:d5:e2:b9:77:4f:ab:b2:40:37:fe:83:32:26:
         5b:f5:f7:22:41:fa:de:e8:b2:ce:3a:0a:c9:b6:e1:f9:21:3b:
         5b:1c:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:51:28 2024 by rpki-client on console-fra.rpki-client.org