Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          2Bx2/fz22FJVrrUyswgWiSjsjWQekVdITAlJ1Icv0ZE=
Subject key identifier:   2E:8D:20:86:80:B7:A8:FD:A7:51:CD:25:D3:1D:21:D5:BD:FC:AA:1F
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       452520989DB820C7FCAB6B83B2454C6BA487BC97
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        2804:fec:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:25:20:98:9d:b8:20:c7:fc:ab:6b:83:b2:45:4c:6b:a4:87:bc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=2E8D208680B7A8FDA751CD25D31D21D5BDFCAA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:48:c7:1b:22:45:4a:04:35:11:c4:1e:2f:
                    3f:19:0d:eb:6d:8a:a5:bf:ee:ce:63:96:f9:67:cc:
                    d5:9d:56:ab:5e:fc:d0:af:c9:5c:a1:f5:3a:32:b8:
                    9c:b9:df:9c:6a:b2:c4:9a:43:03:4f:19:e7:e1:ee:
                    86:fc:69:88:2d:64:8a:f1:a2:26:99:9d:a5:64:e6:
                    17:63:bd:e8:92:09:00:4f:b2:98:c7:0c:81:00:c1:
                    75:4f:5d:bb:55:6f:bb:9e:ad:e8:40:b8:6a:21:28:
                    8e:91:19:6c:89:eb:40:c5:56:79:c5:d3:02:0d:17:
                    4e:d5:85:ee:01:2e:21:5a:02:8c:15:e3:90:53:e9:
                    cd:06:d2:3e:08:e1:98:36:95:24:84:d6:9e:38:e0:
                    84:90:e7:d4:6c:d2:b8:a9:07:66:5c:93:d5:54:30:
                    d3:bf:82:ee:4b:04:ef:73:6c:e4:23:bb:fb:99:7e:
                    9c:64:c1:cd:5c:5a:00:cf:42:8f:55:8e:3b:40:b9:
                    68:27:66:27:f7:c6:e6:25:9a:2f:0c:e0:4d:f1:88:
                    0f:b4:9f:a7:77:44:0e:50:cf:42:a1:30:df:cc:c9:
                    b9:76:49:e4:ee:13:1f:af:b4:86:d8:7f:5f:22:d1:
                    2e:8d:45:0c:65:f1:a5:fb:e1:8c:66:41:46:af:df:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8D:20:86:80:B7:A8:FD:A7:51:CD:25:D3:1D:21:D5:BD:FC:AA:1F
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a323030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:15:64:fa:05:59:a3:02:ef:4b:e6:0e:3a:1e:7e:f6:97:
         86:ca:db:55:db:ec:51:d0:fa:8f:f9:ac:a4:3d:00:56:23:0e:
         b4:e5:3c:f5:27:0b:e5:9f:d8:21:c7:ad:56:5d:2b:1e:4d:4c:
         bd:98:9a:3f:f9:d0:37:c0:78:90:68:46:47:23:7e:33:04:8b:
         79:b5:32:64:cd:d6:a9:47:90:75:7b:4f:df:dd:a2:a5:83:fe:
         dd:e8:42:18:31:39:03:9d:b5:e5:4b:19:96:72:55:93:7a:20:
         f0:cc:a4:5e:b0:52:5f:1c:3e:a8:7f:9d:7e:aa:51:35:5d:d3:
         41:f2:d7:92:97:a1:d5:79:72:31:34:33:c4:4b:04:30:83:09:
         5d:a0:6b:d7:dd:c8:2e:9d:38:57:06:19:80:5a:38:27:fb:36:
         d0:ff:04:86:ec:e2:64:81:9e:21:78:06:fa:ac:27:3e:20:38:
         23:24:72:70:79:85:b7:1f:7b:66:d0:cf:7c:7c:ea:1d:9c:d9:
         7e:4c:01:0a:83:54:c7:c8:20:b0:7a:9c:cc:00:66:9f:6e:9e:
         1a:e6:db:09:89:6d:ec:ce:7f:83:85:16:67:ac:fa:bc:01:02:
         27:c4:ac:ee:36:b0:69:25:7c:b8:42:8b:91:04:bf:43:8a:b7:
         66:0d:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org