Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
File:                     323830343a343133343a3a2f33322d3332203d3e20323636303130.roa (raw, json)
Hash identifier:          O1uK2iWA5AbVwYreYWBTh9I7q624f1O808bQCr9ACtA=
Subject key identifier:   E5:7A:A8:17:45:7F:48:CC:6E:F1:4A:FD:86:04:84:E8:7D:61:65:32
Certificate issuer:       /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial:       26F94EE6A3CBDAC0DF9FB2ACB76D9D0D187DADC5
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
Signing time:             Wed 03 Apr 2024 20:46:02 +0000
ROA not before:           Wed 03 Apr 2024 20:41:02 +0000
ROA not after:            Wed 02 Apr 2025 20:46:02 +0000
asID:                     266010
IP address blocks:        2804:4134::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl
                          rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:4e:e6:a3:cb:da:c0:df:9f:b2:ac:b7:6d:9d:0d:18:7d:ad:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
        Validity
            Not Before: Apr  3 20:41:02 2024 GMT
            Not After : Apr  2 20:46:02 2025 GMT
        Subject: CN=E57AA817457F48CC6EF14AFD860484E87D616532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:ca:38:f8:68:58:34:e1:30:3a:ac:3c:82:
                    84:05:62:c8:b0:70:5e:78:db:99:8e:a1:5b:a2:3a:
                    04:f6:42:f9:d5:4f:eb:37:07:c2:b8:da:38:d2:d1:
                    1a:d8:29:8c:96:f3:57:a0:72:a0:2e:d1:18:6c:ae:
                    40:f1:78:41:a2:1b:5a:95:bc:fb:e6:0e:93:ba:4f:
                    0b:8d:da:7f:25:06:a8:44:19:fd:a2:23:16:4d:e5:
                    9e:5b:39:aa:eb:45:e2:85:1f:2e:fb:b3:5a:92:1f:
                    ae:b6:04:de:2f:5e:ad:9a:37:66:1c:23:16:72:f8:
                    d6:8d:6d:10:55:4a:79:4d:fb:58:d1:5d:12:e8:98:
                    7c:4f:8a:de:cc:c8:a5:b0:2b:b9:3f:7f:57:42:4e:
                    2a:f9:42:14:4b:fc:62:28:96:85:77:76:6a:da:a9:
                    42:02:22:49:80:a7:cc:51:26:23:67:65:63:56:92:
                    0a:87:87:42:ba:03:89:21:c8:ae:46:5d:00:11:cb:
                    90:2a:50:ae:ab:10:84:19:78:38:44:47:69:05:cd:
                    93:6c:94:63:f2:1e:38:e1:c1:49:6a:f9:44:d3:e8:
                    26:63:77:d1:3f:14:69:dc:b9:1e:f2:ae:0f:a2:d0:
                    de:c7:12:58:42:49:97:26:38:08:32:47:ba:2f:c0:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7A:A8:17:45:7F:48:CC:6E:F1:4A:FD:86:04:84:E8:7D:61:65:32
            X509v3 Authority Key Identifier:
                keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4134::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:e0:97:ad:55:ba:c0:a1:46:5e:84:de:bc:ed:a4:25:24:
         54:b4:1c:dd:e6:c3:72:bf:36:23:11:8c:2e:2b:be:73:d4:6d:
         0f:8b:3e:ad:2b:fd:cf:16:48:cc:db:65:6f:e7:68:94:01:fc:
         a8:a2:74:fb:b1:04:27:14:5c:dd:d5:72:de:55:3c:db:ce:61:
         02:f7:d1:ea:63:b9:0c:72:cd:79:87:01:33:3b:f2:0e:46:64:
         8a:ee:1a:fc:02:00:00:ac:11:20:78:5f:62:65:fb:be:ce:2e:
         d0:bf:df:05:ac:51:d6:a7:7c:3a:02:47:08:d3:25:c6:26:c8:
         c2:94:45:8b:99:ce:8e:c8:3f:74:52:69:8f:5c:4f:34:be:86:
         f8:cf:d9:da:fc:9f:29:3b:76:ce:b9:2d:fd:02:fe:59:40:fc:
         9a:3c:ff:b7:8b:c2:f9:bf:ab:9b:0e:87:98:23:63:72:e1:e4:
         87:77:71:03:42:fa:73:a1:2e:8d:72:98:ef:96:95:1a:1d:4a:
         86:f9:44:88:d7:ad:62:79:fe:ad:d0:db:45:e1:85:9a:ee:7d:
         6e:da:9e:9f:8a:6b:b1:4b:68:51:61:22:98:eb:b2:21:c4:97:
         eb:c8:f9:a6:f5:24:58:b4:71:a0:3c:a3:7d:78:b6:37:5b:f9:
         63:f8:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org