Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          kxns5hLXFXS3sx/GPdVSmSJdRFnvIB8PKvmPv7wU/Yk=
Subject key identifier:   1D:F8:54:9B:2B:C9:8F:37:F6:C0:A2:43:07:AE:75:18:74:40:F1:6D
Certificate issuer:       /CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
Certificate serial:       32A41A8D35A23A767B0EC816C6DC6B250EB94D8B
Authority key identifier: 66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:30 +0000
ROA not before:           Sun 14 Apr 2024 02:00:30 +0000
ROA not after:            Sun 13 Apr 2025 02:05:30 +0000
asID:                     262493
IP address blocks:        2804:fec:c548::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jul 2024 12:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a4:1a:8d:35:a2:3a:76:7b:0e:c8:16:c6:dc:6b:25:0e:b9:4d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6624A24FC6D51C1A5035DC8EDFFE7A2663699409
        Validity
            Not Before: Apr 14 02:00:30 2024 GMT
            Not After : Apr 13 02:05:30 2025 GMT
        Subject: CN=1DF8549B2BC98F37F6C0A24307AE75187440F16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:c1:1b:4e:db:a3:bd:87:7b:9a:f3:24:b5:
                    d7:05:4e:15:79:71:e3:d0:50:97:9f:d6:9e:8e:16:
                    dd:37:ad:b6:78:8c:f9:a3:5e:ee:da:3e:5d:2e:9b:
                    3e:54:6b:33:fa:85:27:b0:68:7e:81:31:9f:b6:d4:
                    16:ab:d8:de:f2:0b:12:2a:ac:3c:5f:97:06:a4:5c:
                    85:98:08:90:2f:3c:c1:b7:3c:1e:64:af:e4:44:57:
                    7d:fa:72:77:38:2e:d8:0f:06:0e:8f:33:fd:75:c2:
                    09:d1:62:99:c1:52:10:58:29:23:fa:3e:99:21:c1:
                    93:b1:fe:d6:f3:a9:11:15:9a:36:d7:fd:36:9c:32:
                    b5:d8:81:8d:93:2c:ac:49:41:c0:a6:c5:5c:39:85:
                    19:ab:99:6b:31:c7:12:2b:a6:25:67:c1:f3:4f:9b:
                    08:a6:72:f2:ff:86:32:ae:04:19:22:4f:7f:ab:06:
                    5b:63:ce:f6:62:e8:92:a2:38:4c:8c:a8:ab:1c:a8:
                    eb:a5:a0:f8:b9:1d:15:bd:5a:a7:15:1e:e8:5e:13:
                    40:06:d6:0e:e7:ec:d9:c3:9b:9d:c8:52:7d:54:8e:
                    49:d8:30:1e:29:27:6c:ba:7c:ae:35:3e:62:8c:c7:
                    17:df:ac:0f:96:4a:cf:cf:ea:36:80:f9:14:93:f5:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F8:54:9B:2B:C9:8F:37:F6:C0:A2:43:07:AE:75:18:74:40:F1:6D
            X509v3 Authority Key Identifier:
                keyid:66:24:A2:4F:C6:D5:1C:1A:50:35:DC:8E:DF:FE:7A:26:63:69:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6624A24FC6D51C1A5035DC8EDFFE7A2663699409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633534383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c548::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:3b:e1:bc:e6:80:6d:00:78:35:05:78:38:42:5e:79:15:
         7d:18:c0:1d:14:c8:d1:bb:1f:51:04:42:49:7d:a3:e2:67:0c:
         a2:cb:bb:7a:e6:c2:64:1a:64:11:95:dc:80:92:dd:fc:0f:c1:
         02:26:f3:e4:44:6c:2e:d4:c3:33:15:0b:17:9f:84:27:d3:50:
         27:04:17:ef:73:8d:c3:2c:5d:c1:23:5f:f9:57:ba:11:46:d8:
         e4:4c:f1:0e:67:4c:61:eb:5f:b2:17:e8:b1:08:1f:eb:ae:67:
         4a:f0:fb:f1:67:dd:84:61:af:3d:38:1c:ba:82:28:eb:78:32:
         98:a9:00:76:d8:cf:db:60:42:c6:76:72:a2:5c:40:39:02:3f:
         4a:74:ff:5b:ab:d2:c3:76:c0:a7:5d:38:b7:f1:4f:c4:46:e4:
         71:fc:43:2d:08:21:17:76:84:0c:dc:c9:27:31:50:59:54:0c:
         02:86:51:1d:91:66:d1:82:1e:5e:e2:0e:f4:3c:da:1c:db:42:
         a0:b0:95:b4:83:32:f3:e6:3d:6d:7c:dc:78:29:cc:4e:cf:d6:
         62:55:8f:0c:a5:84:99:c6:0a:07:8e:ec:68:10:bc:4a:67:08:
         74:df:6d:16:d6:2d:db:13:f8:5d:1f:d0:78:33:b2:1b:6b:42:
         aa:ee:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:28:32 2024 by rpki-client on console-fra.rpki-client.org