Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa
File:                     323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa (raw, json)
Hash identifier:          S1fNicod6FkK/msPDEAbmUMRRCMExZT8NhM6CKnP2H0=
Subject key identifier:   72:C9:82:43:A9:A0:31:08:0D:F8:9C:80:A5:B5:42:E5:1C:82:18:F6
Certificate issuer:       /CN=B224D943E8065A18929A784B51D1633209C1CC91
Certificate serial:       0BFDEA02BA6AF4BEC4AB8FC281A1964287021E62
Authority key identifier: B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa
Signing time:             Thu 04 Apr 2024 04:46:47 +0000
ROA not before:           Thu 04 Apr 2024 04:41:47 +0000
ROA not after:            Thu 03 Apr 2025 04:46:47 +0000
asID:                     263967
IP address blocks:        2804:2888:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl
                          rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fd:ea:02:ba:6a:f4:be:c4:ab:8f:c2:81:a1:96:42:87:02:1e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224D943E8065A18929A784B51D1633209C1CC91
        Validity
            Not Before: Apr  4 04:41:47 2024 GMT
            Not After : Apr  3 04:46:47 2025 GMT
        Subject: CN=72C98243A9A031080DF89C80A5B542E51C8218F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:d8:17:07:24:ef:96:25:4e:50:5e:18:b3:
                    63:f9:bb:c3:4a:ee:88:f0:f2:7b:92:0d:5f:aa:d2:
                    f6:3c:d3:3d:45:cc:a2:f7:a1:05:bd:0a:e3:41:9d:
                    c5:ba:a0:47:27:71:41:92:f9:bf:28:1a:4f:1b:ef:
                    60:9e:bf:4d:68:59:7f:79:27:56:24:8e:6c:64:ec:
                    f4:6a:b8:77:22:89:f1:d7:08:65:43:72:3d:cb:62:
                    d5:a5:87:a8:31:bd:ff:93:a0:58:b4:41:1e:b4:3b:
                    13:04:38:fa:2d:d9:bf:50:ee:b4:6d:43:da:b4:d3:
                    0d:44:df:51:fd:77:ef:02:53:80:ac:cc:33:79:93:
                    65:4d:0d:b7:fe:a0:98:5e:7e:51:4e:c4:0e:61:ed:
                    33:f8:d2:2c:11:a1:d8:2e:00:08:f2:63:55:02:26:
                    a8:c9:88:f0:69:70:a7:00:83:6d:ed:0b:65:04:a7:
                    f4:a1:09:d4:94:89:e6:d2:98:91:13:6d:d6:bb:78:
                    b2:7c:5b:b3:90:cd:9f:ac:5e:e1:28:f1:de:c5:e3:
                    76:96:c5:cc:e2:35:87:79:4f:74:9c:61:48:b8:06:
                    5b:d8:73:15:8e:a8:1e:d5:3b:45:f1:2d:c0:96:8a:
                    35:0d:58:7d:6e:37:9b:55:30:7e:f8:9b:a6:26:ca:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C9:82:43:A9:A0:31:08:0D:F8:9C:80:A5:B5:42:E5:1C:82:18:F6
            X509v3 Authority Key Identifier:
                keyid:B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/323830343a323838383a383030303a3a2f33342d3334203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2888:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:2d:48:26:b7:5a:8c:41:8a:b1:68:b6:82:b8:93:55:0e:
         7d:6b:55:1f:e6:53:e3:ea:23:94:28:86:95:ef:be:86:9d:ba:
         77:7d:34:4c:76:20:09:26:65:41:e6:39:32:bb:0f:0e:ed:40:
         b2:25:6c:51:e1:03:c3:1e:65:1e:53:db:48:24:66:8f:a1:9e:
         84:ad:ba:b8:e6:71:79:d0:b8:f5:b2:8f:ac:38:e7:a0:be:62:
         f2:70:fb:46:60:84:3c:16:b4:f8:08:9a:1a:47:a7:75:c4:01:
         34:ed:4d:aa:fb:76:99:9e:be:01:46:cc:22:89:0e:d2:69:a8:
         e8:07:6f:8d:e0:85:3a:98:91:5d:97:4d:f4:5a:58:83:cc:8d:
         20:dd:6e:3c:85:b7:44:f5:1b:4b:70:0e:20:64:04:58:30:58:
         37:a2:8c:58:a3:45:22:81:bd:07:19:09:44:03:8e:f6:7d:5c:
         cc:26:dd:a6:c3:aa:78:cc:02:32:5a:fc:23:97:af:3b:f8:04:
         5a:59:59:05:ed:32:20:2f:cd:76:fa:30:03:b5:13:a0:2f:c9:
         91:0e:ab:a6:46:fb:4f:91:43:c9:ef:98:cf:0e:9f:b7:2c:d4:
         1b:02:f9:96:34:41:f2:b9:c7:67:e1:81:6b:81:aa:14:33:28:
         3e:3d:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:54 2024 by rpki-client on console-ams.rpki-client.org