Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          2oCM1THUMLgLz1fb+9NtGf6Bc/LGBl8/ctCgwWU82Ek=
Subject key identifier:   D3:1A:20:10:FA:E4:3A:F1:F0:00:6F:7E:4C:70:73:B3:FC:5B:31:51
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       3B80735EF8062A592847912B25148A31756C24C4
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        2804:fec:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:80:73:5e:f8:06:2a:59:28:47:91:2b:25:14:8a:31:75:6c:24:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=D31A2010FAE43AF1F0006F7E4C7073B3FC5B3151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:c9:1a:0b:95:fc:26:aa:1e:78:c2:d6:8d:
                    d4:81:c2:88:25:a8:22:37:44:09:dd:35:d7:12:1c:
                    c6:c6:5d:98:cd:ba:d1:ab:bd:5b:f2:9a:12:72:cb:
                    53:04:7e:3a:56:c1:58:53:14:60:0a:13:46:df:2c:
                    8f:74:11:16:94:51:ae:c8:91:4f:f8:5f:0a:c2:bc:
                    97:a7:f3:bd:55:76:75:0a:c4:98:76:6d:1d:d5:65:
                    cb:7d:01:a5:08:81:3d:84:5b:c8:b3:a9:71:c5:9d:
                    be:de:58:ca:fd:61:0d:da:c1:d7:7b:78:38:fb:e8:
                    44:50:77:0c:4f:d6:81:15:99:01:7d:38:a7:77:e9:
                    6f:aa:3f:6d:56:6b:64:3c:b2:5c:df:1b:60:bc:04:
                    34:3c:50:c2:3c:a3:bf:d8:94:4f:84:dd:b3:c6:75:
                    42:2c:cd:85:4a:4f:1e:09:0c:db:29:8f:28:05:d5:
                    f2:02:12:f1:5c:b1:43:e6:7b:ff:91:a9:60:c6:c5:
                    c3:61:d4:93:5c:42:90:60:fe:31:f0:15:6c:0d:33:
                    bb:02:2f:30:7f:ad:d8:16:07:da:8b:6c:45:88:36:
                    ea:7a:ba:20:1b:d4:65:05:15:7b:fe:b8:76:0c:9f:
                    44:b4:4d:33:51:78:0a:7f:33:85:ec:53:b0:d5:09:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1A:20:10:FA:E4:3A:F1:F0:00:6F:7E:4C:70:73:B3:FC:5B:31:51
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a343030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:e0:6b:fa:dd:c2:0c:37:a5:ac:57:22:05:82:69:98:5e:
         ef:70:8f:3d:e8:44:ac:93:c0:a6:15:84:85:c3:3b:66:38:9a:
         e7:63:3d:02:e9:1b:88:c4:0a:e8:17:d5:b4:8e:27:c6:6d:7a:
         69:b4:42:04:fe:94:cb:49:95:bf:ac:b3:ba:8b:79:c0:22:0d:
         05:7f:14:d9:1b:f5:6a:d6:29:d7:b3:ff:e7:d0:bb:e7:bd:37:
         db:f3:4e:a4:e7:51:87:2a:a6:19:16:11:38:83:de:0e:8a:be:
         d7:11:57:e7:2d:7e:2b:37:b9:4c:cc:41:5d:87:e0:a1:50:2d:
         39:a6:01:30:17:02:04:e8:a8:64:ef:3d:e9:1a:4c:9c:bb:b4:
         34:10:c7:ca:70:51:26:d6:c5:55:20:2e:ea:16:a1:ae:27:24:
         06:81:f1:3b:20:b7:80:23:a4:85:6b:27:7b:20:84:e6:80:20:
         35:fb:8b:a3:13:25:de:23:b7:c0:3d:2b:fb:13:7c:1f:6c:16:
         73:18:76:e1:46:66:f2:84:ba:16:23:00:69:69:8f:9c:5b:c6:
         f8:58:55:3a:0c:9a:2d:e1:5b:8f:5d:dd:09:53:9e:6e:b8:dc:
         77:e7:79:ae:47:74:e0:fc:43:d5:79:98:0b:9e:c3:19:eb:83:
         34:39:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:40 2024 by rpki-client on console-ams.rpki-client.org