Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a363030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a363030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          r/Z6XOHVbk7xviHRbbUhNp9FLy6t5hh4DJE0ya/lyZI=
Subject key identifier:   04:B5:F3:52:E1:E1:4F:5B:10:FD:82:D6:C0:72:9F:F6:F1:AA:84:8D
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       34346F9C9A49CA7AF5975C6491488422FE6601A0
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a363030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        2804:fec:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:34:6f:9c:9a:49:ca:7a:f5:97:5c:64:91:48:84:22:fe:66:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=04B5F352E1E14F5B10FD82D6C0729FF6F1AA848D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:06:a7:dc:e3:95:9c:79:37:d1:36:34:4c:
                    e0:2f:3b:a3:d8:f4:c7:e1:82:82:83:7a:8a:f8:50:
                    f2:f0:04:90:1a:df:dd:2a:41:b0:bd:69:c3:fe:de:
                    f8:c1:2e:0b:4d:cf:03:ee:6f:69:00:59:f9:1e:a5:
                    90:93:94:f5:a3:32:d9:2a:8d:42:37:72:68:a1:2a:
                    13:f1:86:b0:90:1f:ed:3c:24:ce:77:5f:f1:55:76:
                    ec:2b:d3:1e:4e:f4:9f:f5:9a:88:2b:12:f4:59:fe:
                    fc:e0:ed:13:50:c5:67:2f:18:ee:2a:15:dd:b0:78:
                    64:78:5b:3f:c1:19:6b:48:57:f8:ba:41:99:93:35:
                    bd:6e:9c:6e:34:8c:59:6f:32:e0:0a:65:7b:41:5c:
                    a1:e7:96:b0:40:90:cb:07:52:3d:70:4a:d6:8a:a2:
                    32:36:b7:6e:c7:a9:21:00:bf:d7:d9:50:24:0c:9d:
                    f4:04:17:5f:e8:16:1d:40:c3:3a:f7:93:69:95:ee:
                    ca:c6:4e:a4:90:e6:af:2d:3f:93:3c:ac:2c:f8:1e:
                    8e:ec:7f:ce:26:51:02:1a:ed:02:77:5b:ae:3b:a7:
                    f8:9a:99:22:d2:4f:fb:51:af:f4:6e:41:78:2b:2f:
                    d3:c7:11:05:4c:8b:64:97:40:07:c3:61:1a:ba:29:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B5:F3:52:E1:E1:4F:5B:10:FD:82:D6:C0:72:9F:F6:F1:AA:84:8D
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a363030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:42:89:fb:a2:39:fe:5c:29:8a:7e:4d:f5:a4:cc:c2:1b:e8:
         66:a9:6b:22:a1:3e:30:36:c9:cd:bc:7c:b0:b6:74:da:e4:04:
         40:82:34:c9:5e:a9:bd:11:98:72:87:c9:72:7d:e9:2e:2a:20:
         b5:45:62:f2:7a:7d:87:14:ad:5e:f4:e8:d1:c2:3b:9c:12:3f:
         d7:5c:3a:2c:43:bd:b5:46:c5:af:38:f5:ec:bd:c0:18:98:fa:
         f3:d4:0b:37:cb:97:0d:bd:1f:fb:fc:a7:83:0c:ff:48:11:d6:
         c8:a6:d4:41:8f:eb:06:b7:0c:c8:f5:1c:12:e1:2e:a3:de:8e:
         fd:7f:ff:30:54:bc:37:dc:0f:05:4c:3d:72:b3:09:f1:14:b2:
         52:8d:dc:2d:60:37:d7:6d:be:6b:33:61:0f:cc:cf:75:52:4e:
         88:c7:d7:fd:b5:93:c4:fa:22:dd:a7:4c:b2:88:d5:6a:24:74:
         3f:05:1c:8c:70:b1:18:bb:3a:cd:7b:cd:59:4d:85:32:f9:0b:
         00:59:2a:45:80:ca:81:b3:38:15:b2:ed:cf:e0:21:85:fe:0e:
         fe:70:0c:ca:14:04:c7:cf:3c:83:bf:65:26:77:a3:6b:e3:57:
         5c:91:30:6e:59:83:28:d6:f5:64:1f:10:36:7b:6e:54:cd:85:
         4e:8e:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org