Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a363030303a3a2f33352d3335203d3e20323637363638.roa
File:                     323830343a343530383a363030303a3a2f33352d3335203d3e20323637363638.roa (raw, json)
Hash identifier:          5hJL0Y3eu4u3QDnHjI+okYlKbsuIveXHsN977l8CpaM=
Subject key identifier:   DD:08:65:24:F5:AD:EB:5A:6D:5C:28:8D:7A:5D:F0:8E:C3:10:E9:40
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       6FF3BBD16F65A38552C65B4CC2CAADCF1FD3EF7E
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a363030303a3a2f33352d3335203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:11:15 +0000
ROA not before:           Thu 15 Aug 2024 20:06:15 +0000
ROA not after:            Thu 14 Aug 2025 20:11:15 +0000
asID:                     267668
IP address blocks:        2804:4508:6000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f3:bb:d1:6f:65:a3:85:52:c6:5b:4c:c2:ca:ad:cf:1f:d3:ef:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:06:15 2024 GMT
            Not After : Aug 14 20:11:15 2025 GMT
        Subject: CN=DD086524F5ADEB5A6D5C288D7A5DF08EC310E940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:4b:c2:56:c1:b4:ad:60:7d:1c:f3:f1:19:
                    04:20:5b:8d:3b:f2:cb:f3:5b:f5:81:29:3e:5b:57:
                    8f:ee:4f:21:ea:c3:e0:d2:48:88:c1:2a:aa:96:2e:
                    a8:63:00:ac:83:1d:d8:c8:f3:08:7d:06:25:38:78:
                    8c:bf:51:f3:d5:4a:ab:6c:41:5d:52:3f:51:da:05:
                    61:5e:46:2d:98:3a:23:9e:18:bb:3e:08:f0:e8:d2:
                    6f:f3:1a:1e:19:ba:62:a4:bf:cc:1e:2e:b0:4f:7d:
                    4a:d0:3f:e5:ce:83:62:7c:53:cf:57:99:8b:7a:0b:
                    3b:cb:2e:cc:03:ea:bd:fc:3e:ee:1e:c2:4a:61:fa:
                    9b:90:bb:bb:d6:61:ba:73:b9:4c:14:d1:66:6c:3c:
                    8d:ba:7f:2f:51:db:ff:94:70:bd:3b:de:79:96:d9:
                    a0:6c:ef:25:96:dd:35:77:cb:06:0a:67:a6:13:86:
                    4c:9e:65:7f:7d:a3:bf:00:74:5e:d7:93:ab:78:28:
                    92:0d:56:c5:7b:ef:c4:38:99:fb:83:43:8a:8f:74:
                    ad:1a:b3:b7:ce:23:10:ca:22:de:c1:5f:72:c1:f8:
                    85:83:66:0e:3f:62:c8:91:f8:c7:3d:c5:7b:be:58:
                    9e:05:66:ae:66:cd:e6:2c:b7:d7:b5:7a:36:69:b3:
                    f8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:08:65:24:F5:AD:EB:5A:6D:5C:28:8D:7A:5D:F0:8E:C3:10:E9:40
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a363030303a3a2f33352d3335203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:1b:be:20:b7:87:3a:57:95:fd:ad:00:8a:df:ac:04:f9:
         42:b7:dc:11:ee:bb:e1:21:67:10:e8:04:1d:74:44:2b:4e:6b:
         13:bc:6b:34:af:25:48:74:50:c1:67:18:48:57:01:38:1f:39:
         e6:a5:b6:ee:9e:61:18:9a:1f:3e:fe:82:bc:95:86:c3:2f:d6:
         12:8d:1e:7f:b2:2c:b2:cc:84:26:8e:3a:3a:d4:71:57:5d:79:
         84:89:59:d1:b2:8b:e4:2c:2d:ce:3a:a3:8c:f4:88:f9:38:dd:
         8a:7e:8e:68:b3:9a:43:ae:d7:cb:48:33:7b:68:35:95:0c:4f:
         0d:25:3d:5f:64:91:9a:b5:3d:19:ea:2e:69:fe:d0:42:5b:cc:
         6c:e3:37:5c:3b:e2:6e:6e:e5:95:25:d4:56:62:47:52:39:be:
         c1:87:ea:ef:39:96:07:5a:0f:3b:3f:e8:13:1c:0d:fe:54:35:
         a7:91:3b:8c:14:9e:61:d2:02:06:32:e7:2c:be:60:1d:f3:f7:
         c5:49:15:84:ec:d2:5c:34:54:51:d1:59:a2:df:d7:f8:9b:ad:
         5c:cb:2f:d9:a2:e4:43:ce:81:b2:f4:c5:29:f0:36:99:d1:17:
         c9:ac:83:df:cf:d8:b5:92:a7:b0:6e:95:68:05:67:fb:eb:a0:
         a8:e8:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org