Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33352d3335203d3e20323637363638.roa
File:                     323830343a343530383a383030303a3a2f33352d3335203d3e20323637363638.roa (raw, json)
Hash identifier:          aOOIR+BE3j4L27SvdFmL//QMinzFuRx59sT/LVkOWoA=
Subject key identifier:   AD:26:D9:0A:B0:6C:47:83:8A:E1:8C:B0:5A:7F:8C:40:58:C7:5C:01
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       4C071EA8E9CED85357A35A435B6BB7DE48F96D54
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33352d3335203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:11:29 +0000
ROA not before:           Thu 15 Aug 2024 20:06:29 +0000
ROA not after:            Thu 14 Aug 2025 20:11:29 +0000
asID:                     267668
IP address blocks:        2804:4508:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:07:1e:a8:e9:ce:d8:53:57:a3:5a:43:5b:6b:b7:de:48:f9:6d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:06:29 2024 GMT
            Not After : Aug 14 20:11:29 2025 GMT
        Subject: CN=AD26D90AB06C47838AE18CB05A7F8C4058C75C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:10:9a:c5:9f:39:71:e1:55:f9:a2:62:7d:
                    9a:1e:16:0d:0d:62:12:cc:26:d1:85:56:d2:ce:6e:
                    90:09:31:8f:2a:15:d6:50:72:4b:54:6a:e9:3d:25:
                    ff:03:ed:61:c9:49:52:b2:36:b8:68:95:0d:56:2a:
                    71:32:31:a7:82:66:4f:f0:f6:57:4c:6b:b5:6a:2c:
                    1c:fd:96:38:91:63:ff:8b:fe:7d:42:fa:18:64:2e:
                    9e:76:7b:4c:e3:c1:fa:98:9c:41:6f:4c:f9:df:c8:
                    69:93:3a:a9:20:0a:68:1f:45:1c:14:75:e6:42:a1:
                    19:45:22:15:5f:0d:5c:a8:b1:f6:e4:20:5b:45:0e:
                    c7:32:1d:6f:c4:a9:c2:15:45:0c:9a:47:e6:fd:57:
                    68:bf:49:ef:c0:bc:35:89:62:09:c7:df:4e:2c:d1:
                    6a:af:64:cc:a9:2f:ea:60:aa:13:b1:61:79:06:76:
                    8d:6f:af:6b:7f:2b:60:ea:8b:71:fa:68:49:f9:e6:
                    8e:d9:ad:99:4e:e1:bf:c1:73:be:26:4f:07:ba:a0:
                    33:ac:a6:66:cb:ed:00:ce:3f:d0:71:70:cb:a8:bf:
                    14:53:96:09:f9:46:4f:db:54:96:ad:8d:19:92:03:
                    cb:61:fc:a4:eb:2b:ee:45:55:de:36:99:9f:cd:e0:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:26:D9:0A:B0:6C:47:83:8A:E1:8C:B0:5A:7F:8C:40:58:C7:5C:01
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33352d3335203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         73:77:08:25:30:84:ac:a4:1f:ee:e8:71:8a:ca:50:af:77:94:
         6e:2c:68:be:b6:92:fe:78:d3:6a:98:49:77:a2:d3:5a:74:69:
         5c:24:fb:84:06:87:9d:c9:51:7e:2b:af:d8:5e:6a:67:42:2c:
         50:33:46:ef:19:ab:86:40:58:7d:2b:52:70:ff:60:15:e8:2b:
         a8:5d:83:14:c2:86:d6:5a:bc:a9:4b:fd:a2:4c:99:a9:12:f3:
         27:c6:a8:0f:0c:d7:d8:81:13:62:80:15:12:c8:3b:79:f9:15:
         d2:4e:70:15:fa:01:e9:57:1a:24:45:bd:be:a8:79:b7:a2:8a:
         71:bd:8b:8b:b4:18:ff:f2:f2:b4:99:a8:b6:05:5e:5d:77:cd:
         fb:06:92:e2:f7:16:c3:26:d5:c9:f9:d4:86:a5:cc:53:5e:da:
         ed:9e:a1:42:85:27:e2:cf:9c:bd:42:28:1b:d3:15:8f:82:82:
         10:0c:b0:e5:2e:0a:30:96:53:2d:1f:1a:9b:80:19:19:a6:e2:
         06:3a:d9:a6:31:01:4f:26:8e:bc:e7:a1:1d:7e:bc:2c:99:88:
         db:1d:34:c7:33:16:7e:f9:64:38:d0:a5:a2:1a:58:c9:10:c3:
         6f:68:19:dd:57:67:ed:d1:45:f1:35:4e:09:1e:fa:86:81:cb:
         92:11:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org