Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          28YOgRXmi+bxrNTnB7BmP8xYW/CNu+NOlanSfXReb/I=
Subject key identifier:   B6:2F:73:D1:47:1D:8F:72:A2:B9:FF:FA:93:F0:62:6C:4B:3B:E1:BD
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       448806EB7240829EA5E3D375D4CA019FD05AFC09
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:37 +0000
ROA not before:           Thu 07 Nov 2024 20:49:37 +0000
ROA not after:            Thu 06 Nov 2025 20:54:37 +0000
asID:                     262493
IP address blocks:        2804:fec:c548::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:88:06:eb:72:40:82:9e:a5:e3:d3:75:d4:ca:01:9f:d0:5a:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:37 2024 GMT
            Not After : Nov  6 20:54:37 2025 GMT
        Subject: CN=B62F73D1471D8F72A2B9FFFA93F0626C4B3BE1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f8:b5:37:1c:88:04:5a:96:08:ec:c7:a2:18:
                    b6:79:4c:51:60:96:c7:8d:35:2e:97:43:2b:da:8d:
                    e9:f9:94:8a:08:5e:9c:ff:8d:4e:bd:6d:5f:36:8f:
                    f1:ad:bf:40:7d:8d:0a:c7:8d:a8:a5:80:75:19:48:
                    2c:de:78:40:c0:55:31:0a:73:bb:1c:88:3e:82:d3:
                    58:e6:b6:65:60:8f:09:53:62:ad:f7:b9:78:06:9f:
                    80:21:66:c1:d1:05:18:7e:71:19:e4:ac:4d:23:b5:
                    2f:a4:66:d2:0b:c4:92:26:a8:d9:65:05:0a:d3:31:
                    38:f1:91:c9:4a:a6:36:d0:fb:9c:09:dc:cc:cd:16:
                    f3:13:81:b1:03:cb:e2:18:c2:db:19:9f:71:3e:b9:
                    af:d8:c1:97:f6:0f:f8:28:fb:31:88:bf:1d:bd:75:
                    0c:0e:e5:2a:47:ca:0d:99:3b:ef:51:ae:f3:b1:73:
                    66:98:58:51:19:92:29:d1:48:0d:22:64:b2:36:3e:
                    3d:f0:a2:33:66:ac:62:f9:e9:55:2f:2e:1c:6e:01:
                    44:f3:96:3b:59:5b:76:95:6b:5c:ae:2c:b5:b6:46:
                    1b:df:36:05:9f:45:64:50:36:5e:d6:d9:d6:d4:d5:
                    a0:77:2c:26:eb:a8:0d:4a:80:d0:88:40:f7:e6:9b:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:73:D1:47:1D:8F:72:A2:B9:FF:FA:93:F0:62:6C:4B:3B:E1:BD
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c548::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:6c:cd:15:57:b3:ab:e1:76:cd:71:be:57:cb:29:31:a6:2c:
         be:97:91:b7:70:70:ef:b8:54:04:3c:a5:c0:48:d9:da:d9:1b:
         21:13:05:3b:25:a9:5a:74:e9:fb:26:7a:58:b2:5d:a5:3a:4a:
         2e:b7:5b:18:30:e7:2a:76:e1:ab:e4:84:00:06:29:c5:7c:33:
         ee:2a:35:19:59:d6:69:d6:43:9d:c6:d7:38:ba:04:01:da:c8:
         ce:35:99:1d:0c:3b:0e:77:b7:40:9f:e8:c3:f9:67:73:84:4c:
         1f:3d:6c:5c:0f:49:53:59:d3:1a:9a:47:30:29:1b:1a:68:1a:
         ae:37:89:90:a0:b6:92:9c:2d:24:ea:39:72:e7:c6:15:0e:94:
         15:26:22:d5:4b:9d:eb:5c:bf:8f:61:17:6d:77:da:cb:57:05:
         70:37:02:b0:7b:84:fc:86:c9:96:06:ff:b4:c9:ca:e4:f1:93:
         c9:41:0f:00:a1:ba:9e:0f:3c:95:a4:e2:ae:cc:a0:dd:09:60:
         5b:ef:ee:49:7d:2d:ae:71:33:0e:6a:4b:dd:69:69:25:91:54:
         2b:1a:63:95:94:72:93:e2:a4:44:61:8d:67:3c:bd:20:90:54:
         76:30:e8:45:36:2e:13:bb:e9:39:f2:29:5a:1b:bb:a5:70:3b:
         3f:fd:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org