Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33322d3332203d3e20323637353735.roa
File:                     323830343a343338343a3a2f33322d3332203d3e20323637353735.roa (raw, json)
Hash identifier:          MCMTsXE0Frqgl/kO2B2uOMHW25IxBfYqdtc4VeMtpQ8=
Subject key identifier:   11:1A:A5:37:20:45:36:02:25:5A:D3:73:97:AD:B1:32:D1:F4:B5:A9
Certificate issuer:       /CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
Certificate serial:       10231499F94476BAF584E2E6988B28D43813C1E2
Authority key identifier: E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33322d3332203d3e20323637353735.roa
Signing time:             Wed 18 Sep 2024 12:17:31 +0000
ROA not before:           Wed 18 Sep 2024 12:12:31 +0000
ROA not after:            Wed 17 Sep 2025 12:17:31 +0000
asID:                     267575
IP address blocks:        2804:4384::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl
                          rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:23:14:99:f9:44:76:ba:f5:84:e2:e6:98:8b:28:d4:38:13:c1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
        Validity
            Not Before: Sep 18 12:12:31 2024 GMT
            Not After : Sep 17 12:17:31 2025 GMT
        Subject: CN=111AA53720453602255AD37397ADB132D1F4B5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:3b:7f:3c:c6:6b:d6:79:ea:02:22:18:2e:
                    24:50:df:9a:15:26:81:15:e4:ae:62:0b:24:3a:c5:
                    7b:04:80:d2:a7:69:8e:f2:28:3b:2f:f2:b0:14:32:
                    f6:98:7a:a7:8a:9e:68:9d:b5:c6:20:f3:c2:36:bb:
                    72:45:68:b2:f9:f9:79:13:65:1b:af:d7:bb:ca:f1:
                    fa:22:e0:65:0c:7d:0d:4f:3f:50:de:65:fb:8c:e0:
                    50:89:96:2e:86:a4:c0:79:0b:78:46:1c:42:c4:4d:
                    75:28:b4:7d:85:ca:36:34:60:3c:da:c7:53:33:c8:
                    e2:2c:9f:92:68:c4:15:84:27:06:e2:2e:4f:38:d5:
                    40:66:4d:53:6b:95:c8:f9:84:b4:61:c3:69:bf:16:
                    d9:ce:38:65:78:04:cd:76:e3:2f:d5:de:29:13:7c:
                    6f:a2:cb:b5:1b:db:27:f8:8b:e2:34:cc:01:85:09:
                    6c:cf:45:8f:46:de:12:2f:35:7c:76:00:a1:d0:c2:
                    49:65:08:4a:f0:e9:de:21:9f:5b:29:ec:28:3d:dc:
                    7c:00:3d:c1:68:97:5f:70:17:bc:fa:79:2e:23:27:
                    fe:77:05:26:80:1e:e2:d9:94:25:fa:29:98:b3:25:
                    99:58:39:a4:c0:1a:94:b7:31:82:4c:2d:57:46:c1:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1A:A5:37:20:45:36:02:25:5A:D3:73:97:AD:B1:32:D1:F4:B5:A9
            X509v3 Authority Key Identifier:
                keyid:E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33322d3332203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4384::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:2d:a7:30:ee:c4:b5:47:ba:cd:2f:4a:b9:30:ac:46:be:
         17:51:a3:44:b8:aa:61:a3:45:0b:6a:2a:f4:c1:7d:3c:6c:48:
         d3:6a:93:38:2b:11:fc:bc:c4:4c:27:e3:52:51:1a:84:d9:de:
         48:57:84:18:4e:2d:f4:a1:18:4b:ca:de:23:5e:bd:44:f0:eb:
         81:67:49:87:4c:2a:ab:d8:1f:c7:51:ad:d3:64:8f:d8:b9:7a:
         3b:02:f1:db:7d:72:39:9a:6e:51:1c:01:50:fb:12:fe:ce:fe:
         be:b8:a0:5f:c0:3e:06:07:6d:08:9b:ff:7f:d6:a0:44:53:af:
         d0:39:cf:8b:1a:23:b8:fa:57:f0:5d:d3:97:ef:e7:7a:fd:2a:
         38:71:00:95:f1:49:07:f1:6f:4f:09:7f:f8:db:1b:93:7e:18:
         51:b3:eb:be:93:55:63:9f:a5:ee:0d:5b:ce:7c:04:39:79:a1:
         33:62:18:9c:e6:7e:c8:4e:85:4e:2e:d1:83:da:d9:cc:80:0f:
         b4:b1:84:50:56:ec:34:08:b7:2a:2c:12:0f:5d:b8:60:33:15:
         38:5b:f2:8a:09:da:03:67:eb:29:cb:56:92:e1:30:9f:ca:a1:
         45:da:24:e0:b1:a2:d5:9c:ef:eb:6d:92:d3:1a:3b:8e:0f:34:
         18:8a:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:14:01 2024 by rpki-client on console-ams.rpki-client.org