Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa
File:                     323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (raw, json)
Hash identifier:          bvxbPWIS0uAzvdY3Dugvyta8wACG+wyWnUBJPNu213M=
Subject key identifier:   52:C0:36:6B:1A:19:31:A5:62:11:7F:7B:CE:16:1F:CC:6A:44:5C:FC
Certificate issuer:       /CN=E488CA807EE2E83B97BD3CD3DE145C8D03388442
Certificate serial:       5E428FAFDE434BD691F4032A3CCC9BFB5BC0D7D1
Authority key identifier: E4:88:CA:80:7E:E2:E8:3B:97:BD:3C:D3:DE:14:5C:8D:03:38:84:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa
Signing time:             Thu 04 Apr 2024 01:43:34 +0000
ROA not before:           Thu 04 Apr 2024 01:38:34 +0000
ROA not after:            Thu 03 Apr 2025 01:43:34 +0000
asID:                     269265
IP address blocks:        2804:61ec::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:42:8f:af:de:43:4b:d6:91:f4:03:2a:3c:cc:9b:fb:5b:c0:d7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E488CA807EE2E83B97BD3CD3DE145C8D03388442
        Validity
            Not Before: Apr  4 01:38:34 2024 GMT
            Not After : Apr  3 01:43:34 2025 GMT
        Subject: CN=52C0366B1A1931A562117F7BCE161FCC6A445CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:8c:b2:4e:5c:05:97:b5:30:ea:3e:f9:57:
                    76:3e:74:cc:5a:36:64:0e:5c:1c:95:dd:93:00:c7:
                    ac:4f:60:86:d6:dd:63:bf:af:1e:c7:76:eb:9b:b5:
                    36:66:96:4b:18:70:7c:8b:e5:9e:ea:7e:9d:cb:d3:
                    db:d0:ff:ca:55:3c:71:94:5e:6d:0e:c9:34:94:4b:
                    2d:4e:ea:aa:4d:04:11:f3:e7:dd:36:25:08:3d:e8:
                    66:76:14:e6:2b:19:ef:70:92:42:96:17:7c:de:d2:
                    cb:1e:01:3d:22:ae:a5:42:45:a2:cb:2c:6c:99:a1:
                    af:1b:e8:64:35:ce:a0:e6:25:e8:08:6f:d8:aa:5e:
                    cc:40:4b:4e:fa:86:8f:98:bd:01:16:5a:5c:33:64:
                    bf:82:9c:00:81:e2:27:6d:76:61:89:26:8f:4a:af:
                    fb:fe:74:6e:24:e3:a9:cf:94:c4:21:00:50:3a:84:
                    77:52:8c:ab:1b:27:81:0b:6b:fc:f0:f5:6b:b8:d7:
                    d4:08:53:6b:8a:e0:c7:6d:ba:3f:81:1a:44:f7:cb:
                    43:ca:5e:30:e8:7e:64:fd:f0:73:0b:7a:d3:d3:74:
                    f0:d9:a1:c2:1a:53:47:e1:fc:8f:7f:a6:da:f8:f6:
                    b6:8d:59:9a:84:b1:a6:4c:95:30:98:50:b9:50:5d:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C0:36:6B:1A:19:31:A5:62:11:7F:7B:CE:16:1F:CC:6A:44:5C:FC
            X509v3 Authority Key Identifier:
                keyid:E4:88:CA:80:7E:E2:E8:3B:97:BD:3C:D3:DE:14:5C:8D:03:38:84:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E488CA807EE2E83B97BD3CD3DE145C8D03388442.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/1/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:ae:30:87:bb:de:65:46:32:4d:78:16:99:d9:2f:49:9f:
         b2:93:a9:89:48:aa:54:b6:f6:99:ab:1a:9d:50:04:fb:1a:27:
         43:4d:8a:ba:0d:a2:63:67:b9:d6:90:d0:47:89:de:fb:d7:e0:
         2d:a9:8a:08:58:6b:f8:27:fe:0e:4c:72:f0:d5:3a:da:5c:2f:
         df:3e:ef:b0:a9:ff:ee:58:b2:61:3b:dc:c2:c5:49:43:15:47:
         82:f4:7e:e8:eb:c1:dc:f6:a3:c5:dc:5c:d1:2c:79:5d:26:9c:
         c4:c7:46:61:04:05:ce:3d:d5:64:a2:95:3f:bf:37:b0:1a:e8:
         5f:14:f2:a7:e1:d7:dc:97:fe:5f:07:43:2e:e6:56:a7:53:b7:
         c3:57:63:ab:74:c9:87:0d:ba:75:92:c3:b6:cf:24:b3:e6:bc:
         f8:65:cf:91:46:d6:98:ef:37:4a:ba:69:7e:e4:77:47:b5:eb:
         f8:d1:be:b8:b8:c8:c5:73:77:48:0e:ba:1a:85:0d:b4:2f:07:
         53:61:a6:f5:c3:26:24:dd:ea:c2:1f:59:6b:b5:84:d5:0a:a7:
         5b:13:85:3e:74:0b:96:46:e5:ec:93:00:2c:92:cb:f0:a3:6b:
         6c:58:f3:df:e7:95:88:84:16:2c:cd:28:78:de:49:e8:6f:d6:
         2f:31:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:47 2024 by rpki-client on console-fra.rpki-client.org