Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          YU/iKOrff3OdCC2Jj1xaWdzKua72v/Jx77S37qj9kys=
Subject key identifier:   40:B1:29:D0:47:B6:C3:DD:72:34:79:B9:3A:48:9B:DC:2F:21:97:AC
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       41980CBA52550C32FB45EBAEA10A924764F43C
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:36 +0000
ROA not before:           Thu 07 Nov 2024 20:49:36 +0000
ROA not after:            Thu 06 Nov 2025 20:54:36 +0000
asID:                     262493
IP address blocks:        2804:fec:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:98:0c:ba:52:55:0c:32:fb:45:eb:ae:a1:0a:92:47:64:f4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:36 2024 GMT
            Not After : Nov  6 20:54:36 2025 GMT
        Subject: CN=40B129D047B6C3DD723479B93A489BDC2F2197AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e3:0e:30:c3:28:5d:cc:ae:74:e0:12:6f:60:
                    53:f7:95:0f:d5:b9:fc:48:72:ea:74:5a:a8:61:8c:
                    09:f8:33:07:01:31:1d:9d:35:b0:0c:f6:98:88:9c:
                    db:cf:24:db:60:48:54:39:9e:ef:35:8f:a9:6e:96:
                    60:ba:be:67:fe:7a:c7:db:26:c9:10:f5:4c:69:d7:
                    43:9d:09:6d:a5:13:72:9c:4a:15:9c:6b:89:95:11:
                    bd:79:6c:18:35:50:91:33:e5:6a:53:d4:12:a2:fb:
                    64:c4:e9:77:49:63:4c:2a:81:76:83:d8:b6:4c:72:
                    fa:85:e8:b2:88:a8:4f:a6:48:91:a4:ea:c4:fc:f4:
                    fb:94:08:79:a6:b0:fa:ec:a4:04:ba:1b:86:8f:84:
                    09:50:71:dc:21:4c:f3:eb:12:c8:42:92:70:db:2c:
                    aa:75:ad:2f:47:0f:76:1b:f8:2e:0d:a6:d6:1a:64:
                    85:4a:27:5f:10:e3:29:60:8e:c2:cf:be:ad:2f:a2:
                    12:3c:ee:e4:26:e0:5a:26:c0:89:c1:21:34:59:e0:
                    4d:ab:cc:74:bb:ab:16:7f:90:ba:0a:1c:fd:7e:24:
                    6b:f9:2a:ea:9a:1b:95:af:2b:3e:a0:2e:00:77:7f:
                    85:3e:64:9e:19:4f:af:1c:b4:7b:d4:3d:98:5d:d9:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B1:29:D0:47:B6:C3:DD:72:34:79:B9:3A:48:9B:DC:2F:21:97:AC
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a653030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         de:95:09:11:e1:8f:72:03:94:e4:bf:54:e0:cd:ac:59:89:85:
         aa:3e:17:68:d7:92:f1:05:9f:98:04:5d:76:c2:15:a6:aa:6b:
         0e:8b:48:1c:41:4b:89:d6:17:aa:a1:33:10:18:2a:7f:73:4d:
         6b:58:e4:29:90:b1:62:94:52:d3:db:8f:e0:54:90:e6:21:64:
         da:39:71:1c:0b:66:eb:62:2a:79:84:8f:63:b1:77:14:e4:ae:
         a4:b3:9a:02:7c:0f:b6:8f:3a:a9:7a:47:94:18:46:d5:b3:1d:
         7d:5b:ef:3b:6e:21:00:a7:64:b0:32:cc:d1:08:fb:75:ed:80:
         1b:f8:a8:b9:9a:18:53:b5:87:63:a2:27:01:42:4a:f5:a7:02:
         4b:da:48:8f:1f:79:ab:40:62:e6:ad:40:73:f0:76:f3:4a:da:
         9d:ca:85:95:54:3c:05:2a:61:a0:f6:d4:b7:40:ad:11:19:47:
         d1:e7:94:60:a0:1b:69:c1:6f:21:ea:71:f4:f0:5e:b6:db:2e:
         14:b4:21:4b:bd:a6:22:31:d0:78:fb:1b:11:10:c1:a6:4e:57:
         84:b2:ca:db:fe:92:a3:72:49:97:c2:67:aa:78:ae:d8:49:c1:
         fa:3b:58:13:57:a6:a0:40:62:e7:73:20:74:56:3d:97:9a:32:
         b0:8c:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:43 2024 by rpki-client on console-fra.rpki-client.org