Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/323830343a343432303a3a2f33322d3438203d3e20323637363034.roa
File:                     323830343a343432303a3a2f33322d3438203d3e20323637363034.roa (raw, json)
Hash identifier:          VPZxE8FVHaAV9P3v4h29zcy/Pox1VKLhJaWM1DWy4cM=
Subject key identifier:   6E:1B:EA:9A:EB:AE:0D:10:A6:AC:C3:E3:61:48:9D:B1:E5:CE:6C:98
Certificate issuer:       /CN=62504691574999BE3FC471A877B8D5C052A750B8
Certificate serial:       6D7D39A6CE870A892F5647DB3B378128609FF0A3
Authority key identifier: 62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/323830343a343432303a3a2f33322d3438203d3e20323637363034.roa
Signing time:             Thu 04 Apr 2024 16:48:01 +0000
ROA not before:           Thu 04 Apr 2024 16:43:01 +0000
ROA not after:            Thu 03 Apr 2025 16:48:01 +0000
asID:                     267604
IP address blocks:        2804:4420::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.crl
                          rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7d:39:a6:ce:87:0a:89:2f:56:47:db:3b:37:81:28:60:9f:f0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62504691574999BE3FC471A877B8D5C052A750B8
        Validity
            Not Before: Apr  4 16:43:01 2024 GMT
            Not After : Apr  3 16:48:01 2025 GMT
        Subject: CN=6E1BEA9AEBAE0D10A6ACC3E361489DB1E5CE6C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6c:fc:5a:ea:b9:24:d8:c6:a8:58:b0:ed:ba:
                    10:89:4e:eb:dd:68:45:77:83:e5:17:c9:05:9e:0f:
                    64:47:f7:06:f0:44:d5:5a:d0:c9:42:37:3b:24:42:
                    f4:85:c4:f0:08:db:8a:32:ca:50:a4:d8:45:e4:89:
                    75:b2:f2:47:b5:4b:e4:9e:3c:f1:8c:7c:23:a3:fb:
                    40:75:08:cf:69:68:c7:ff:18:10:0b:62:59:2c:e3:
                    44:27:9f:c7:96:ba:91:ff:7b:61:3f:cd:28:bb:11:
                    90:21:c1:3b:dc:cd:be:9b:9e:9a:bc:c4:4e:77:98:
                    79:a5:98:09:d5:8a:5c:a0:e4:9f:70:3c:92:27:3d:
                    fb:b6:1d:46:b9:be:5e:90:fc:0f:fa:36:f7:08:ba:
                    e7:96:ed:1b:45:21:57:b4:87:3d:88:98:40:16:83:
                    b0:3f:17:90:f5:5b:75:cd:7f:cf:44:49:ea:68:51:
                    da:81:35:be:8b:c0:1f:c6:ed:26:1d:08:9d:97:c0:
                    01:17:e6:fe:37:4e:f8:80:7d:12:86:c7:fc:5b:05:
                    b2:8b:a2:97:c2:4b:7e:3b:be:08:8f:f5:47:e3:68:
                    bc:0b:f8:4c:3c:71:84:a2:ff:a9:36:0d:d5:fd:66:
                    c5:c3:21:bc:49:49:ae:e8:7b:dd:77:9c:a5:85:1f:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1B:EA:9A:EB:AE:0D:10:A6:AC:C3:E3:61:48:9D:B1:E5:CE:6C:98
            X509v3 Authority Key Identifier:
                keyid:62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/323830343a343432303a3a2f33322d3438203d3e20323637363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4420::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:a5:5b:7a:0e:a7:8a:b4:50:78:90:98:62:10:4d:0f:45:
         c8:39:43:c3:fd:f9:cd:6e:50:5b:be:77:7f:a7:f0:1b:c2:53:
         a9:88:e1:4c:82:a2:8d:91:b2:78:97:07:66:3c:4b:5d:20:a7:
         3c:e4:bc:58:8c:ea:2d:c9:c3:b5:d1:d1:43:f9:9f:c4:f7:95:
         73:5f:dd:4e:85:5b:71:39:69:2a:b3:63:46:3f:d0:3a:d3:eb:
         b2:14:36:f3:98:cd:43:c2:09:f4:44:18:9e:7d:b0:f1:f6:10:
         74:0b:5b:60:3b:39:63:9f:39:f6:bf:ce:00:d3:45:4e:4a:be:
         9d:ab:69:b1:af:67:4f:94:46:78:eb:71:bf:24:32:bd:99:53:
         d4:ea:03:c8:f3:4b:6f:0a:86:eb:79:ca:aa:eb:b4:78:f9:8d:
         ca:eb:a3:bb:76:d7:07:3a:40:28:5e:d1:ef:25:31:80:31:d0:
         e1:e8:e2:23:c1:1f:e8:eb:83:51:85:e4:7a:08:e1:65:3a:9a:
         cd:ea:74:f2:5d:59:15:32:7d:c1:3f:3e:d0:00:a3:e1:1e:26:
         ce:f7:6c:ea:62:9d:0e:11:04:b8:a8:83:01:10:54:5f:5b:0e:
         80:cf:4e:53:f8:47:ca:c3:5a:69:bb:78:ab:64:3a:60:eb:ce:
         9a:ca:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:54 2024 by rpki-client on console-fra.rpki-client.org