Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a393030323a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a393030323a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          RNlncDVvM0HAoMA+5GvEAQWqck0QfSdMl5I76Hz+Avo=
Subject key identifier:   F0:1B:66:77:30:C2:6D:60:A2:28:98:EF:AD:59:4B:7E:00:F7:CC:63
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       7AF4FA7DE3D7F9AB1360CD184F76FB563E5EF7D8
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a393030323a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        2804:fec:9002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 18:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f4:fa:7d:e3:d7:f9:ab:13:60:cd:18:4f:76:fb:56:3e:5e:f7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=F01B667730C26D60A22898EFAD594B7E00F7CC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:dd:f7:8b:0d:33:80:df:31:c4:27:06:63:
                    7a:49:c1:cc:86:3a:e0:7a:f8:bd:c3:99:80:ae:c9:
                    e4:9e:08:23:70:11:5c:1e:da:1d:d2:44:3d:31:f1:
                    67:0c:e2:19:97:5b:d9:15:ef:01:a3:ab:4d:2b:64:
                    75:97:1a:f3:be:a5:d3:37:90:6f:3b:f2:de:8e:4f:
                    d3:d6:4c:50:00:e7:df:07:16:b1:dd:ff:cd:cf:af:
                    84:c4:ec:c4:ad:3f:cb:48:12:87:e2:2b:61:98:41:
                    e3:a6:63:92:1e:02:93:0d:5e:9d:32:88:5c:96:30:
                    53:7e:ca:be:c1:31:b0:25:1a:49:f7:ed:7d:f7:84:
                    83:b8:17:b9:55:ea:bc:64:11:b4:83:71:b6:06:78:
                    be:86:87:f2:84:86:da:b6:15:85:af:8b:f4:53:74:
                    a8:e7:47:58:fc:d5:60:35:5f:79:16:e6:b1:cd:09:
                    fc:cf:0c:a4:f3:b8:94:f2:ab:44:36:9d:c0:63:19:
                    a1:1e:94:de:9d:d3:5a:00:98:3f:90:f0:2c:c4:4b:
                    42:14:5b:84:35:fc:63:27:4d:e2:45:a9:6e:26:d6:
                    98:49:77:7e:3c:d6:07:96:07:71:d8:63:e0:94:63:
                    d9:fe:37:7a:e8:64:ed:17:04:05:20:ce:fb:15:60:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1B:66:77:30:C2:6D:60:A2:28:98:EF:AD:59:4B:7E:00:F7:CC:63
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a393030323a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:9002::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:33:6e:9a:f5:05:e3:67:1d:7b:88:2b:c1:8f:71:9e:2c:
         30:88:b4:77:b1:28:cc:b0:1a:76:8e:c8:c4:1a:89:c4:c7:80:
         fd:1a:13:39:a4:eb:cc:83:8e:01:70:f0:26:da:68:58:dd:47:
         85:9f:aa:67:a9:c0:3f:73:23:d5:13:5d:6b:bb:04:4b:78:be:
         77:04:08:18:ee:27:62:0a:78:1d:7e:9c:92:48:c8:9b:a8:95:
         4b:c3:11:23:6b:2a:9e:88:f8:48:f4:a8:d3:01:b9:72:ad:81:
         85:ba:50:ce:fc:01:11:c1:2d:19:15:e1:7d:da:3b:3b:9b:a0:
         48:c0:da:21:12:4f:de:f7:43:de:b9:21:78:36:ce:f4:4c:30:
         e9:80:5b:01:49:29:67:6c:d6:51:2f:99:5b:7e:05:0c:09:00:
         8c:f4:ae:bc:b2:12:c5:61:a9:11:64:5a:d2:b0:51:20:8b:17:
         27:ae:ac:ca:0f:4a:79:aa:a2:d1:e3:49:16:a0:8d:28:d4:10:
         eb:f4:6e:50:d9:30:af:1c:fa:4e:50:72:1e:6f:20:56:89:8f:
         5a:84:97:97:25:23:13:3a:3e:ba:7b:5d:b8:22:1a:a3:86:9b:
         73:f9:2f:39:47:89:3b:a5:6d:ac:8d:ba:e3:b4:1d:99:fe:00:
         30:84:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:52:07 2024 by rpki-client on console-fra.rpki-client.org