Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          xsCg+0HqiUFFKiiKq+KToTiGU75dJmdg8Upl9Bjnklk=
Subject key identifier:   1E:68:FC:5A:E3:67:36:22:93:B5:C3:F0:C1:31:5D:5F:40:1D:3D:92
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       537D009B387422181B731D8ABACAAC1CB77CC745
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:41 +0000
ROA not before:           Thu 07 Nov 2024 20:49:41 +0000
ROA not after:            Thu 06 Nov 2025 20:54:41 +0000
asID:                     262493
IP address blocks:        2804:fec:c648::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7d:00:9b:38:74:22:18:1b:73:1d:8a:ba:ca:ac:1c:b7:7c:c7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:41 2024 GMT
            Not After : Nov  6 20:54:41 2025 GMT
        Subject: CN=1E68FC5AE367362293B5C3F0C1315D5F401D3D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:b8:f0:98:75:21:88:89:13:41:ed:d0:7a:
                    16:f7:a5:44:68:6a:4a:cd:ed:a9:8a:ad:ac:86:6b:
                    db:48:06:d5:83:89:ae:7f:f8:e9:3b:3d:a5:da:cb:
                    96:6e:55:78:fe:30:44:10:dc:c2:3b:be:04:11:28:
                    c9:e8:7d:f8:78:63:6e:03:95:2a:cc:cd:27:9b:04:
                    d2:b9:82:de:2f:79:37:b4:a7:d2:1d:ac:e8:13:c1:
                    9f:33:37:55:f0:6b:0f:2d:9f:99:76:cb:44:4b:67:
                    8d:ae:46:48:d3:57:f5:db:78:30:71:09:dc:e4:10:
                    d9:63:77:47:19:8a:77:8c:5a:3a:80:f6:4a:bf:43:
                    6b:eb:29:9d:1e:b5:42:ba:9a:c1:9f:fa:9e:b4:bd:
                    80:3a:3d:8f:4f:57:e9:b3:3c:12:56:c1:6a:5f:d1:
                    9a:e2:0c:a5:2f:c8:9f:89:ef:15:58:54:13:a5:1f:
                    6d:ae:e4:cd:c7:03:db:1c:c7:3c:9d:0e:a8:47:41:
                    77:2d:ff:34:b9:3a:1a:f7:0f:d0:40:b9:da:93:1b:
                    27:b6:94:03:90:b3:d5:f8:85:36:69:27:2c:28:df:
                    94:5b:49:c8:ef:a3:63:af:b3:f5:5e:95:fc:40:8e:
                    6e:8e:00:fe:2d:3c:8f:84:9e:ca:fd:04:72:b1:06:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:68:FC:5A:E3:67:36:22:93:B5:C3:F0:C1:31:5D:5F:40:1D:3D:92
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633634383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c648::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:08:48:70:72:27:14:f4:b6:d4:0a:cc:41:0a:ed:97:25:57:
         26:82:a0:6d:80:c3:e5:ac:b0:74:7c:e0:3f:f9:91:f7:13:74:
         e4:c3:91:c8:9a:ea:82:f2:93:03:3a:2b:a0:6d:13:1e:53:ad:
         bf:27:9e:d0:74:f2:59:3c:22:de:09:1e:13:05:4e:a8:c1:ee:
         9f:77:49:1b:e9:52:b1:89:57:ac:2e:5d:93:38:f0:3d:5a:bf:
         4d:2b:11:b2:3a:ba:b6:b5:b2:78:e2:0d:87:5e:74:f0:72:8c:
         02:9c:5b:89:54:1d:5b:9a:d6:85:72:bc:5b:c3:43:8d:91:bc:
         c9:cc:1b:de:24:60:38:3e:e7:70:ec:d0:25:53:f3:10:b6:f9:
         70:c5:18:31:f0:c0:d3:95:3a:1c:05:a4:93:bc:ae:32:bb:71:
         ba:ea:4c:01:63:8b:53:b8:ba:a6:fc:64:c8:c0:bb:10:8a:2e:
         9c:02:9d:bb:01:2c:e8:d3:0a:85:e0:ae:2f:d6:9e:aa:30:08:
         b5:33:a7:35:d8:64:e3:28:8a:54:c0:e5:d8:31:56:a9:c3:56:
         b1:05:1d:c3:51:ff:09:da:d0:8f:f8:fd:a9:a2:38:26:43:5c:
         a1:e8:dc:8c:e2:0d:57:ce:fb:6f:51:fb:02:ea:39:e7:61:35:
         26:27:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org