Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/1/323830343a313632303a3a2f33322d3438203d3e20323633323639.roa
File:                     323830343a313632303a3a2f33322d3438203d3e20323633323639.roa (raw, json)
Hash identifier:          NExc/lnJhsur+1HgtEcECC4R1K1UlGK9mYQu+2V9fUo=
Subject key identifier:   F9:20:E3:E1:99:8C:1D:4A:A3:36:15:60:09:38:D8:CC:06:0E:CB:F9
Certificate issuer:       /CN=15755BA826ABB680DA812A9A25EF86765B8EC9B3
Certificate serial:       22F7520A2D2BC52BC16CA8DC20FDF26B7196CCE9
Authority key identifier: 15:75:5B:A8:26:AB:B6:80:DA:81:2A:9A:25:EF:86:76:5B:8E:C9:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15755BA826ABB680DA812A9A25EF86765B8EC9B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/1/323830343a313632303a3a2f33322d3438203d3e20323633323639.roa
Signing time:             Thu 04 Apr 2024 01:01:00 +0000
ROA not before:           Thu 04 Apr 2024 00:56:00 +0000
ROA not after:            Thu 03 Apr 2025 01:01:00 +0000
asID:                     263269
IP address blocks:        2804:1620::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/1/15755BA826ABB680DA812A9A25EF86765B8EC9B3.crl
                          rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/1/15755BA826ABB680DA812A9A25EF86765B8EC9B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15755BA826ABB680DA812A9A25EF86765B8EC9B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f7:52:0a:2d:2b:c5:2b:c1:6c:a8:dc:20:fd:f2:6b:71:96:cc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15755BA826ABB680DA812A9A25EF86765B8EC9B3
        Validity
            Not Before: Apr  4 00:56:00 2024 GMT
            Not After : Apr  3 01:01:00 2025 GMT
        Subject: CN=F920E3E1998C1D4AA33615600938D8CC060ECBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:89:ca:9a:12:0e:37:6a:60:65:37:82:ff:
                    0c:b7:66:b4:72:7c:11:6e:a1:37:5e:1d:19:fc:86:
                    ed:57:54:da:88:07:87:7a:6c:be:d4:36:24:29:5d:
                    77:7c:e1:31:25:85:a2:a0:92:b6:60:8a:50:89:61:
                    86:49:0b:f1:ab:4d:08:cd:29:70:20:ab:f4:d7:3f:
                    46:e7:75:4a:06:b4:70:25:61:46:12:8c:e1:d3:bf:
                    d8:70:f1:ce:0b:b7:65:37:97:44:fb:12:e7:b9:34:
                    ae:e3:14:5f:3f:95:ab:f0:4b:32:3a:5e:79:55:24:
                    dd:7d:74:a3:4c:30:74:9b:c9:c5:43:e0:43:03:cb:
                    e8:ab:50:2b:ef:7a:b7:3c:52:0f:20:46:26:26:0d:
                    34:e5:48:60:d9:04:ec:76:e9:42:22:d1:44:19:e2:
                    c0:9b:d7:5c:2d:43:fc:64:c0:e0:c5:dd:3f:1c:07:
                    4d:89:bc:f1:62:38:78:ff:4c:b7:25:d9:62:e9:eb:
                    75:1c:28:ca:b8:a1:39:87:51:00:b4:7a:5d:b6:a3:
                    de:b0:95:f7:5c:fd:a8:43:35:b5:b8:da:f3:ef:7d:
                    76:4b:22:37:bf:38:5f:e2:a4:b7:da:4f:7e:59:d7:
                    17:c6:2a:57:8f:05:e9:40:31:25:c0:8b:14:51:08:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:20:E3:E1:99:8C:1D:4A:A3:36:15:60:09:38:D8:CC:06:0E:CB:F9
            X509v3 Authority Key Identifier:
                keyid:15:75:5B:A8:26:AB:B6:80:DA:81:2A:9A:25:EF:86:76:5B:8E:C9:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/1/15755BA826ABB680DA812A9A25EF86765B8EC9B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15755BA826ABB680DA812A9A25EF86765B8EC9B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/1/323830343a313632303a3a2f33322d3438203d3e20323633323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1620::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:b3:8c:bb:fe:bd:9c:ed:8d:4a:2d:1d:4e:13:6d:15:86:2d:
         67:70:92:aa:8e:81:34:18:35:d5:80:6f:b5:cf:8e:c5:7a:6c:
         3f:98:b6:b5:29:fb:da:3c:2b:1d:24:c0:8a:79:3e:ce:bf:c2:
         e1:44:42:34:66:93:63:33:f2:e0:c2:ec:d3:5e:61:fc:d7:c5:
         29:3b:31:26:bd:98:04:77:5c:d5:43:79:eb:f5:69:ba:be:17:
         1b:7c:ec:90:d6:cf:30:3b:25:cc:c9:6e:31:7f:78:3c:4b:7c:
         c7:c5:0e:6c:5d:f1:17:71:c6:d4:82:23:5f:bd:28:98:1d:2b:
         e9:73:75:ca:01:cc:5e:2b:58:cc:70:fc:7d:ec:f5:01:83:8c:
         33:17:65:3b:fa:62:1a:8e:55:b0:6b:f2:b5:c0:c9:8e:9f:98:
         66:13:da:d5:76:b9:a9:fd:79:4f:8e:59:6f:39:e7:52:2f:c0:
         d0:c9:8c:d3:c2:98:c5:b7:94:7a:77:c5:a1:77:77:4b:6b:3a:
         fc:b7:29:ec:6d:24:1c:ef:ee:2d:5e:56:5a:03:5b:d6:7b:f2:
         94:ac:2b:1b:67:95:cf:30:17:a4:b6:fa:aa:53:58:76:8e:8c:
         05:18:7e:b9:87:10:ba:01:b4:96:91:b5:df:2a:0d:e9:de:11:
         a9:d8:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:43 2024 by rpki-client on console-fra.rpki-client.org