Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a383030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a383030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          oSN1pvjldgetxo0rsXvZMARKrFTghusL4borq+zfR3I=
Subject key identifier:   5B:B2:48:10:CB:5F:0F:1E:9D:D6:10:41:0E:BD:24:00:0E:40:FA:BD
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       6A1F73277CCDD0C64D7509793FFD87DF0D73AAB3
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a383030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        2804:fec:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1f:73:27:7c:cd:d0:c6:4d:75:09:79:3f:fd:87:df:0d:73:aa:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=5BB24810CB5F0F1E9DD610410EBD24000E40FABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:6a:29:42:86:90:1f:3b:19:54:14:60:b3:
                    65:07:31:13:f2:ac:7c:5e:d7:f1:d4:82:d2:04:99:
                    04:03:33:98:32:d4:71:02:b8:c9:c7:31:64:13:ab:
                    8c:8d:3d:d2:f5:71:e0:99:26:af:16:2b:e0:81:df:
                    1b:1d:90:63:99:41:7d:e4:64:47:c8:d7:b0:4d:a6:
                    fd:1d:1b:46:f4:41:01:64:32:36:71:78:9b:e0:87:
                    44:be:c4:bb:98:25:91:1c:12:ae:d8:83:00:13:51:
                    1e:63:eb:05:1a:8d:c7:52:4b:f4:d8:79:15:dd:27:
                    b4:08:08:d4:a2:2b:5a:37:1c:c1:7b:89:1d:26:1c:
                    b8:4e:84:11:95:e1:8f:81:d4:cc:7d:58:e8:17:19:
                    6b:a5:f0:b6:12:8d:21:d0:5a:ac:e1:d4:a1:66:ae:
                    e8:9f:06:b1:ec:11:95:9c:ab:6e:c9:9a:5a:1b:6f:
                    8e:f0:d7:5e:a8:02:dc:82:c6:3a:ff:1f:6c:74:51:
                    d2:c4:6d:d7:67:3b:e3:79:e9:ef:20:84:ce:44:b4:
                    63:e2:23:51:ec:0f:d0:2a:72:22:36:1e:02:9c:52:
                    35:d0:1b:3e:a4:8b:8d:92:44:1e:0b:84:e7:66:6d:
                    97:52:50:10:df:aa:01:7c:27:98:82:74:0c:38:14:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B2:48:10:CB:5F:0F:1E:9D:D6:10:41:0E:BD:24:00:0E:40:FA:BD
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a383030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:2b:4b:dd:b1:70:8c:ff:4f:3f:a1:8b:d6:5f:a9:1a:f3:
         0b:f9:2b:cc:c0:90:11:7e:22:c4:1b:a0:36:68:42:e2:88:e5:
         23:ba:00:5b:0c:49:42:d8:4f:b3:b3:09:68:a9:f0:b0:8d:69:
         b3:18:5d:99:50:d8:0b:93:37:70:47:93:e1:08:ee:70:74:f7:
         a8:ce:0a:1d:52:c7:de:b4:2f:2d:03:b6:5a:4c:99:75:6a:a2:
         a0:93:2f:71:fc:a7:99:4e:2d:01:33:92:4f:91:19:76:03:f6:
         03:93:4b:af:a0:b7:f2:b8:72:17:0c:e8:7b:1b:07:b0:ae:d9:
         92:2a:de:52:30:b8:11:6c:49:a4:a4:de:91:3a:f2:e7:78:db:
         55:a8:d2:8e:2b:c8:2a:8b:63:85:1e:8a:ca:1e:62:03:3e:36:
         56:65:88:9a:63:5b:06:0b:82:5d:55:19:6a:e3:e5:2c:b0:99:
         60:2b:9a:8c:c4:d3:f5:18:a9:12:a6:ff:7c:96:43:3e:5d:09:
         e8:10:3b:0b:18:13:79:f2:83:3f:f4:5e:83:9d:84:b4:22:ce:
         d1:89:e1:4f:b6:af:0d:16:51:bd:92:bc:be:a4:d7:06:cd:0a:
         b5:41:2a:fc:c1:22:dc:9c:45:83:a3:ea:12:dd:4a:cd:f1:89:
         12:98:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org