Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/323830343a3832633a3a2f33322d3336203d3e20323632333535.roa
File:                     323830343a3832633a3a2f33322d3336203d3e20323632333535.roa (raw, json)
Hash identifier:          RDDXu7auEF3bDwwCJU4tk6k1YsLS3kaYlVSNlmXHpnQ=
Subject key identifier:   8B:2A:B1:90:2D:6E:09:83:29:7E:37:92:CD:69:97:D8:43:1F:0D:97
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       7D671F7791D166B0AB33CA88E99920BCFF11A064
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/323830343a3832633a3a2f33322d3336203d3e20323632333535.roa
Signing time:             Mon 20 May 2024 17:32:26 +0000
ROA not before:           Mon 20 May 2024 17:27:26 +0000
ROA not after:            Mon 19 May 2025 17:32:26 +0000
asID:                     262355
IP address blocks:        2804:82c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:67:1f:77:91:d1:66:b0:ab:33:ca:88:e9:99:20:bc:ff:11:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: May 20 17:27:26 2024 GMT
            Not After : May 19 17:32:26 2025 GMT
        Subject: CN=8B2AB1902D6E0983297E3792CD6997D8431F0D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:26:47:20:cd:0e:bc:dd:4e:10:8e:d3:28:
                    1d:87:a2:f7:56:36:6d:57:1d:ce:5a:bd:c2:9e:3c:
                    9c:82:09:2e:dc:6d:30:ae:10:ed:9c:f5:cd:80:7a:
                    6b:32:e9:05:16:62:c4:67:d3:4a:1c:4c:4a:57:32:
                    45:24:28:bb:f9:d2:5b:8b:47:6c:14:2a:a5:ba:ec:
                    4e:1a:41:c6:3c:28:fb:fd:56:a5:f7:ec:3b:01:32:
                    e0:09:2a:13:91:d0:f0:f8:d0:38:db:d7:1a:72:98:
                    c1:d0:21:d2:19:15:db:80:6b:67:99:28:cc:5c:b9:
                    e7:1e:df:63:6a:d8:62:51:6a:9f:84:2c:a8:38:92:
                    02:d5:cb:a3:7f:a3:d7:0e:f1:c0:8a:bd:4a:fa:71:
                    25:0e:6c:35:0b:61:f2:eb:8a:1d:98:3f:d4:d3:3b:
                    e9:14:78:94:b4:91:c3:1a:6b:0b:a2:b9:ee:11:bf:
                    9c:91:e0:43:00:b0:10:e0:a0:7d:3b:89:93:78:52:
                    48:d1:13:a1:7e:cc:20:85:e3:26:1a:4e:6c:c4:d5:
                    e6:f3:3f:92:6e:06:67:ed:ef:ed:75:35:98:de:bf:
                    ea:83:fe:3e:e5:f2:a1:f9:7c:cc:23:8e:2c:ad:99:
                    92:fa:84:e1:79:a1:e6:a2:67:c3:19:6e:0b:f4:1a:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2A:B1:90:2D:6E:09:83:29:7E:37:92:CD:69:97:D8:43:1F:0D:97
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/323830343a3832633a3a2f33322d3336203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82c::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:82:79:ee:7b:26:36:3e:6f:e6:6a:df:f6:96:f5:65:f0:01:
         8f:44:41:d9:eb:ee:ee:1e:fa:fd:22:db:0c:81:c2:96:1e:44:
         9f:f0:94:82:c7:ba:21:ad:c7:a1:3b:0d:fb:4a:f2:a2:27:12:
         32:70:90:67:ac:e5:38:29:56:15:1d:76:9e:aa:62:12:31:f9:
         d9:1a:71:4d:72:33:16:da:8f:86:b7:4f:5a:36:c7:67:79:b4:
         c1:3a:07:d7:a0:10:2b:eb:0c:10:d4:5e:1b:18:c6:e9:75:0d:
         1a:9d:4c:e1:08:6f:82:e1:a5:35:b0:02:2b:6b:27:e9:6f:c7:
         72:d7:ea:64:eb:8a:b4:4f:c4:a8:e3:d3:e6:e7:9b:f6:9d:17:
         26:d9:de:25:b7:96:c6:20:06:4b:69:eb:7e:ce:e9:7c:0e:ed:
         c5:7b:aa:8c:9c:7f:96:1c:90:2d:fd:6a:4e:7d:ff:52:3c:29:
         cf:5f:e2:80:07:24:e5:94:6c:1d:e3:8f:d7:ba:b7:92:ba:db:
         d7:f3:0b:05:d4:50:1e:6f:d0:fd:d3:08:4d:51:d0:dc:fd:17:
         ff:2a:87:bb:7b:d9:58:ef:1c:f7:3f:39:dc:41:2a:e0:d3:2c:
         4c:7c:82:22:f5:71:e9:f5:31:25:f9:e8:6c:0f:b9:26:c4:15:
         72:0a:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:02 2024 by rpki-client on console-fra.rpki-client.org