Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a643030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          /VqFEByXSyPOovrexFK6wKRKl9CT15MhZGTJdgj8EpA=
Subject key identifier:   CE:CD:85:84:FD:73:1C:79:3D:C8:0F:0C:CC:48:2B:C5:C1:3B:9A:67
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       6FCC541BE0723D46027A0B46DD241A4B3B30D098
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:39 +0000
ROA not before:           Thu 07 Nov 2024 20:49:39 +0000
ROA not after:            Thu 06 Nov 2025 20:54:39 +0000
asID:                     262493
IP address blocks:        2804:fec:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cc:54:1b:e0:72:3d:46:02:7a:0b:46:dd:24:1a:4b:3b:30:d0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:39 2024 GMT
            Not After : Nov  6 20:54:39 2025 GMT
        Subject: CN=CECD8584FD731C793DC80F0CCC482BC5C13B9A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:4d:55:86:aa:a0:37:c2:79:47:b9:c8:fe:
                    78:40:57:f0:87:31:4a:ee:d6:3b:d5:e0:50:4f:97:
                    01:36:7e:c2:1c:c3:90:d8:b8:a9:fa:74:3f:98:a8:
                    91:75:7b:36:dd:44:77:7e:de:5c:cc:1f:7a:9f:de:
                    bd:85:c2:b9:65:e4:e5:95:79:51:74:f0:1f:03:4f:
                    8c:96:68:84:4a:de:1a:8a:1e:28:f5:cc:d8:40:a2:
                    fb:1a:cd:47:e6:f9:c8:2a:5b:2d:0b:11:88:f5:61:
                    2c:a9:cd:3a:52:97:ce:e6:39:5b:bf:c7:ea:86:72:
                    94:34:1e:93:b0:40:8e:64:c2:48:7f:5f:30:84:99:
                    af:23:e9:52:56:4d:46:f9:db:b4:a4:d1:5d:cb:4f:
                    f7:f0:34:79:8a:8f:23:6d:90:46:0d:2a:70:b4:51:
                    20:51:6a:ab:b6:b7:96:33:16:d4:f4:ec:50:60:13:
                    09:53:74:08:cd:63:82:e1:6f:32:9c:f3:52:bd:ef:
                    e3:87:87:8b:c7:a6:ee:37:66:d8:66:63:df:82:2f:
                    d5:b0:69:1d:d1:a0:3d:88:b6:14:bc:bb:8e:8e:4a:
                    9e:4a:3e:b7:d9:c5:b3:9c:49:87:2e:dc:28:6d:08:
                    f0:2c:15:fe:c4:a8:f7:03:0e:68:d9:1e:cf:9c:09:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:85:84:FD:73:1C:79:3D:C8:0F:0C:CC:48:2B:C5:C1:3B:9A:67
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a643030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:d8:f9:e7:0e:15:2e:0a:3c:ec:f0:2b:e9:4d:3a:9b:2e:23:
         64:1a:22:11:4e:0a:6a:2e:db:15:0c:17:eb:73:0f:2a:09:a3:
         40:44:ef:aa:d6:21:98:44:97:98:00:01:57:ba:cd:4b:7c:4e:
         f6:84:54:f5:5b:92:e0:0f:74:50:0f:92:83:7b:5b:ea:5b:5b:
         c1:77:52:0d:db:0e:26:c7:02:2e:86:e0:bf:6d:59:b7:6a:63:
         e3:32:6d:47:32:f1:65:32:04:56:74:d5:fe:ee:6b:6b:65:3b:
         cb:23:38:b9:c5:39:cd:fb:e1:80:ba:86:63:b1:e6:9b:a7:b1:
         bf:fb:c9:54:a1:fd:7f:c1:db:d1:97:88:62:41:b9:00:d8:a3:
         89:9d:37:a1:36:0e:84:fc:75:80:8f:36:06:ec:db:fb:9c:ec:
         50:9c:0c:a2:f2:40:22:2c:9c:60:cd:15:c6:e8:86:5c:9f:78:
         ba:c8:03:bc:4e:05:c7:a8:6d:8b:8d:7b:da:4c:8d:53:62:7d:
         d7:b0:11:63:8c:0f:ff:ca:a4:f3:8c:67:0a:79:62:96:29:7d:
         3f:b3:a9:b3:e9:0f:d4:5c:21:24:66:6e:73:9a:cf:e2:d7:00:
         b7:8c:e3:b1:e5:70:74:66:a7:07:ef:91:cb:39:04:35:11:b9:
         20:28:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org