Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          zF0R+aocFylIlN6tff/qJLOLTKqJmmMxUvr2jWIYwXo=
Subject key identifier:   11:C4:DF:A3:F9:26:59:22:64:42:63:4B:72:B8:2C:0E:AD:80:D6:7F
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       5533F44FBC14D47F48C39541EDE6CC2BE8454244
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        2804:fec::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:33:f4:4f:bc:14:d4:7f:48:c3:95:41:ed:e6:cc:2b:e8:45:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=11C4DFA3F92659226442634B72B82C0EAD80D67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:88:b2:70:0f:8a:d7:16:0b:07:3f:d1:34:
                    eb:ff:09:02:31:66:d4:8b:12:d7:46:84:46:91:c4:
                    7a:aa:c5:0a:4b:02:30:63:09:07:00:28:4c:99:c6:
                    33:6f:2d:3a:88:d3:57:35:8a:4b:1f:ac:9e:07:af:
                    9e:e4:e7:6f:b4:ea:67:0b:0c:3b:5f:5b:eb:3c:10:
                    92:9b:10:21:4f:5e:e4:90:44:2c:d1:da:c8:a6:97:
                    f3:f2:75:fa:63:dc:ba:68:12:99:98:c4:bf:2f:fe:
                    fa:65:54:eb:3a:d0:8a:39:ad:2e:07:6e:b8:b3:90:
                    a0:bd:e0:3a:9c:83:91:75:69:a0:0a:9d:fa:dc:63:
                    e7:c2:84:c0:fd:c4:e5:0a:74:66:56:af:9b:db:74:
                    f6:c1:8c:ef:e6:63:04:6a:95:2d:f7:d2:5b:de:19:
                    2c:80:bd:fe:57:bb:b3:a1:ac:0a:80:e2:51:14:cf:
                    ef:2f:6f:48:ac:7c:04:f2:5b:09:1a:1f:02:a6:1d:
                    c3:b0:97:ae:b5:bb:33:2f:10:08:48:13:8d:a9:bc:
                    1a:2a:47:36:67:5a:69:a0:31:34:72:f0:cf:1c:ff:
                    2a:63:ab:56:92:78:26:bd:f9:84:e6:a9:39:c4:fa:
                    49:f9:bb:91:8a:5a:4c:32:96:a0:cf:c0:45:65:c0:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:DF:A3:F9:26:59:22:64:42:63:4B:72:B8:2C:0E:AD:80:D6:7F
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:ce:4b:7b:02:d0:b9:b3:6b:43:2c:f5:5e:e4:d6:89:39:
         9c:48:db:fb:b9:a4:b8:c8:1e:5f:de:8b:4f:97:20:50:20:a6:
         30:77:b0:d9:8d:74:c0:5c:af:24:52:8d:d9:2b:e3:5c:92:53:
         6d:50:96:2e:ec:d4:4c:52:ca:66:f3:e4:f7:09:b2:dd:49:6c:
         78:bd:cf:bf:16:78:d8:49:d2:b8:01:6b:c0:54:c8:15:da:80:
         3d:0e:d9:6b:1e:2b:98:b9:80:2c:48:d0:2f:d4:af:9f:3e:ca:
         73:66:90:df:08:fd:a3:1d:2e:d6:cd:79:98:e7:08:e4:4b:06:
         d7:b9:af:a9:40:c1:be:78:2b:d2:6c:8e:b5:f7:0f:5f:03:f2:
         07:9e:18:b6:11:ef:76:e8:e6:3d:19:55:f9:cc:76:20:3a:1e:
         62:13:59:34:85:3b:42:3d:33:fe:13:bd:26:b8:43:9d:09:27:
         cb:9b:f7:dd:dd:86:c8:78:a9:b3:4a:92:32:24:18:1f:eb:6e:
         67:17:a5:8f:26:6d:a4:b0:86:a3:6c:da:bf:fb:33:ce:38:30:
         86:61:d2:7f:aa:df:8f:ac:f8:92:b9:c7:35:e5:92:d0:51:93:
         f5:0d:db:cd:30:99:b7:80:f3:c9:f0:96:43:49:60:08:29:a0:
         67:11:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org