Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
File:                     323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa (raw, json)
Hash identifier:          K+llZhWLogc8kLKS0U+OJRD8A1KcLwIdobjWJ4ls/fk=
Subject key identifier:   A5:FF:00:1F:4C:AD:89:D7:AB:6D:28:A5:5F:27:64:B7:E9:01:85:CF
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       2A93CB3904B3631393150E1E81E9A87E6F931711
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:08:03 +0000
ROA not before:           Thu 15 Aug 2024 20:03:03 +0000
ROA not after:            Thu 14 Aug 2025 20:08:03 +0000
asID:                     267668
IP address blocks:        2804:4508:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:93:cb:39:04:b3:63:13:93:15:0e:1e:81:e9:a8:7e:6f:93:17:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:03:03 2024 GMT
            Not After : Aug 14 20:08:03 2025 GMT
        Subject: CN=A5FF001F4CAD89D7AB6D28A55F2764B7E90185CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:8b:70:43:bd:a5:4a:a3:3a:fd:3e:d4:89:
                    d1:08:72:77:ae:8e:63:ec:af:93:ad:55:09:a7:05:
                    6b:01:3f:51:20:a6:36:a1:8a:29:6e:92:df:ce:96:
                    c2:f6:60:42:be:eb:ad:e5:9a:ad:d0:91:91:c2:7c:
                    c5:2e:0e:37:7a:8d:8f:31:7a:b1:33:eb:b7:a6:01:
                    3d:07:69:b3:da:1e:01:51:d9:19:63:f6:f9:95:18:
                    5a:bd:eb:6c:cd:da:35:68:7b:48:8d:3f:01:11:8d:
                    17:4f:db:4e:63:5b:54:5e:e5:2d:90:81:35:08:d3:
                    69:8c:d1:36:23:f9:b1:c3:90:95:d5:b4:4d:86:ec:
                    da:6d:0a:50:4f:5e:ab:7c:54:a5:66:aa:41:b5:72:
                    fe:b3:d8:6e:d1:e3:c9:7b:86:4d:6e:c1:a5:9e:a4:
                    7c:1e:ff:27:51:40:51:d3:af:ef:aa:07:5e:5f:c5:
                    c5:84:2f:72:84:fe:62:cf:df:f1:94:5b:61:b3:fd:
                    c4:4b:55:d2:0c:40:a1:61:b0:31:42:af:ef:f7:52:
                    48:4f:43:3f:95:19:0e:c6:5d:35:e0:9d:ab:bc:d7:
                    da:9b:2c:41:48:29:27:1b:6d:a1:c1:d4:0a:c1:ac:
                    0f:a4:ce:7e:81:57:62:a6:8a:54:26:5c:12:21:cb:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FF:00:1F:4C:AD:89:D7:AB:6D:28:A5:5F:27:64:B7:E9:01:85:CF
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d4:59:02:e6:17:2a:34:ef:55:17:c5:e7:d2:3c:b8:d2:24:27:
         1c:fc:56:3d:ec:34:8a:f5:e2:61:f4:fe:f9:fd:84:41:f1:90:
         1e:2b:1c:50:ee:9b:6f:45:83:25:0a:03:4c:b8:18:e4:31:bb:
         56:f1:5e:c1:1c:83:fe:47:92:c0:c8:0b:37:7d:81:16:6b:7c:
         74:c2:75:b0:e3:c4:93:ef:de:36:c4:75:98:a2:32:8d:48:3f:
         90:98:5d:90:6f:96:74:24:2e:9a:16:2d:b8:9d:55:64:8d:e2:
         6e:54:51:2a:5f:c8:ba:a3:07:39:58:43:ec:20:80:a3:9d:4c:
         21:78:33:26:e0:60:8e:95:dd:01:b2:84:c4:44:f7:62:f0:59:
         ee:02:1b:88:d3:a0:e2:d4:bf:45:3f:83:e5:d7:26:ec:2f:e5:
         9a:e0:d3:b2:6f:4a:00:fd:81:fa:68:d4:1a:da:4c:e6:eb:06:
         1b:b5:1a:6d:14:e3:6b:a8:71:a7:47:37:1c:8b:4d:b7:11:d3:
         5e:2b:a0:f3:2c:1c:80:ff:ef:5d:8d:21:3e:ba:ab:c3:7f:10:
         ba:68:3c:40:ed:3b:1a:31:67:5e:88:d5:c6:0a:cf:ea:b8:c6:
         cb:75:21:02:70:83:26:21:7c:c2:a8:00:8b:37:c3:fe:79:c4:
         a7:86:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org