Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a633030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          bnd3VcVlpfkpZ+mVPLCjFftpRVkESzy661aDgUG4tss=
Subject key identifier:   EE:F1:75:6F:D5:B5:5C:A4:10:82:11:71:67:82:D8:BA:0F:34:B0:F4
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       776B0071385135BC90CBA491D08973460797109C
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:41 +0000
ROA not before:           Thu 07 Nov 2024 20:49:41 +0000
ROA not after:            Thu 06 Nov 2025 20:54:41 +0000
asID:                     262493
IP address blocks:        2804:fec:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6b:00:71:38:51:35:bc:90:cb:a4:91:d0:89:73:46:07:97:10:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:41 2024 GMT
            Not After : Nov  6 20:54:41 2025 GMT
        Subject: CN=EEF1756FD5B55CA4108211716782D8BA0F34B0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:12:83:fa:91:fd:60:80:bd:35:67:da:b6:
                    7a:e2:2c:d2:a6:aa:6a:fd:3f:5d:79:3c:9e:04:d1:
                    e7:a6:b4:24:1b:62:27:e7:61:3b:b2:48:3f:d2:21:
                    8c:05:5a:64:41:14:80:97:60:66:42:cb:c6:b9:50:
                    d4:ee:27:7e:96:6d:35:90:8c:5b:de:e2:da:b7:4c:
                    91:b1:22:e7:b4:92:b5:04:ff:21:dd:1b:f8:6f:9c:
                    10:1d:0e:e6:db:5f:db:f7:f1:e7:29:f0:24:e5:82:
                    bc:b1:e2:e1:58:61:a2:35:80:29:32:2e:37:34:33:
                    c6:6b:37:f0:0c:a2:8b:ba:40:31:83:d1:50:b5:e6:
                    96:a6:6f:2c:de:06:a9:cd:be:13:e6:10:ee:1f:44:
                    84:4c:d4:44:f0:a9:af:90:bc:94:1b:f6:e7:9b:f8:
                    ef:f9:5c:98:cf:65:fa:e2:15:21:f0:9e:1f:7b:6f:
                    c8:57:df:78:3a:36:6d:05:d0:3b:5c:50:5a:e2:96:
                    41:57:56:ca:f3:69:97:5f:76:3a:b3:28:06:d8:61:
                    e3:8d:c4:b3:06:64:ca:8e:5a:f5:ba:1e:ee:5b:c3:
                    32:e0:02:c1:7d:db:88:ff:3f:12:d4:26:0d:b7:b6:
                    29:82:97:ad:de:99:2b:bd:d4:b6:17:ee:4a:83:00:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F1:75:6F:D5:B5:5C:A4:10:82:11:71:67:82:D8:BA:0F:34:B0:F4
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:73:75:33:d2:77:a0:cc:6c:25:fa:5f:7b:3e:8c:12:01:
         2a:7d:58:71:a4:43:9c:59:64:1f:35:9b:8c:38:0a:97:34:df:
         a1:8d:2d:0e:21:64:58:f4:fb:2a:c2:d2:5e:e6:07:8f:50:85:
         09:33:fa:ad:cd:cb:fb:d9:43:da:21:fb:19:d0:9d:4b:77:30:
         66:db:25:88:9c:d9:37:74:d2:74:5c:44:59:2e:1b:17:61:bc:
         18:92:41:ec:9f:f8:fa:7c:b2:21:1f:f7:38:7b:c9:c6:6a:28:
         0f:88:e7:d7:7f:bf:d8:1e:56:5a:8c:79:27:fe:5e:11:fd:d8:
         0b:ba:96:ad:3c:74:fb:db:28:4a:02:e8:60:00:33:54:bf:f2:
         24:b1:70:36:59:a0:b8:c3:30:c6:d6:0a:28:d7:08:0d:08:c7:
         a3:5c:71:43:bb:38:a5:54:08:31:d3:f9:1c:fd:6b:0f:12:1f:
         7c:db:6b:e5:b6:2b:7c:f3:9b:b1:b8:58:a2:25:78:e5:c3:c2:
         d8:6f:3c:30:49:36:f3:86:d2:a6:9b:ef:2f:34:d0:16:14:ad:
         44:3e:1b:dc:76:fd:80:56:ce:08:0d:0e:9d:24:57:40:2b:3a:
         6f:9f:d5:8e:d0:da:99:8e:12:92:3b:39:88:3d:ad:8c:b1:5a:
         26:f1:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org