Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa
File:                     323830343a343530383a3a2f33332d3333203d3e20323637363638.roa (raw, json)
Hash identifier:          oWYh5lESDmRIuNPFC23ads4KY8O63NqQeWfh4wU1+yo=
Subject key identifier:   6C:ED:A6:DC:06:69:E7:E8:95:C4:40:4B:78:83:1C:FE:E1:BC:60:8E
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       265E38114C31B49836919518C3541DC0D0FF7819
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:09:00 +0000
ROA not before:           Thu 15 Aug 2024 20:04:00 +0000
ROA not after:            Thu 14 Aug 2025 20:09:00 +0000
asID:                     267668
IP address blocks:        2804:4508::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5e:38:11:4c:31:b4:98:36:91:95:18:c3:54:1d:c0:d0:ff:78:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:04:00 2024 GMT
            Not After : Aug 14 20:09:00 2025 GMT
        Subject: CN=6CEDA6DC0669E7E895C4404B78831CFEE1BC608E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:2b:1c:82:3a:ce:53:f0:8b:19:98:69:79:
                    32:9a:b2:b2:92:27:b6:12:3f:40:2e:58:bf:ed:20:
                    63:08:91:89:11:5f:c2:08:e1:be:1c:b6:51:8d:b6:
                    98:3f:d7:9e:bb:0c:c0:fe:e7:fc:17:93:74:f1:2e:
                    8f:39:9c:32:04:cd:54:d8:4d:4c:72:32:10:23:17:
                    33:9e:fd:94:14:ab:8b:cd:6a:cd:f2:7a:e2:34:96:
                    ec:30:04:96:0a:7c:43:cb:de:b8:35:8c:c0:44:bc:
                    10:d9:84:c1:b7:ff:1d:60:73:90:8e:e0:94:79:8c:
                    c0:29:2e:2f:c9:b3:c5:9c:13:f1:81:3f:08:d8:a6:
                    f9:ea:7e:01:d9:ae:14:1f:31:5a:42:82:c3:20:b4:
                    36:29:4c:93:38:ea:b8:51:6b:4f:2d:06:3b:a4:d5:
                    7f:da:19:2c:06:39:d9:6e:d3:47:b3:7f:e2:6e:fc:
                    6c:b7:ed:93:d5:15:b3:36:4e:04:cf:a5:e2:2b:4d:
                    8b:b7:04:77:03:1f:dd:b4:8c:37:4a:2d:13:1d:70:
                    60:3a:35:b9:69:33:95:4f:9d:72:cc:c4:e7:f0:31:
                    21:1c:52:06:6e:43:b9:e3:d9:d7:2e:e8:a1:fa:57:
                    d3:6e:56:70:65:0b:5d:66:d4:49:6c:35:8b:c9:5b:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:ED:A6:DC:06:69:E7:E8:95:C4:40:4B:78:83:1C:FE:E1:BC:60:8E
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508::/33

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:b3:54:20:2c:c9:5b:84:be:10:73:5e:1c:e1:3e:c6:90:
         49:ff:bd:55:25:b1:cc:2d:c2:65:bc:dc:e5:5a:66:86:47:07:
         d4:96:3c:7c:d8:06:b2:f2:8d:2e:3f:18:14:1d:d4:56:a6:8b:
         00:d8:3b:08:af:4f:01:14:03:3b:17:f9:4b:45:90:e8:3c:ab:
         05:e9:43:65:2d:be:b4:c2:2d:49:f5:fd:a7:82:5d:1e:0c:b1:
         b6:60:7a:e6:04:80:73:83:ab:38:3a:ec:02:5a:6d:96:35:e1:
         2d:04:0b:17:4a:54:9f:d3:9b:56:20:91:99:5e:8e:89:b0:9b:
         a8:69:8b:23:2e:6b:2f:92:2b:8a:dd:02:ea:92:04:f3:b1:3c:
         89:ed:ae:5f:01:71:b7:42:2e:b6:fc:4b:56:e3:8c:7b:3d:02:
         6e:e2:57:29:88:fe:99:29:83:b2:fb:5c:d3:3d:9f:ff:a7:3d:
         76:74:bb:8c:18:af:46:d4:7f:d5:ac:91:2f:5f:5a:10:eb:18:
         eb:27:cb:62:72:d9:2b:65:6c:de:45:96:92:c7:91:b9:f9:60:
         82:06:ec:69:b1:91:9f:14:30:15:97:74:5e:8d:f9:61:02:0a:
         c0:3a:8f:16:ca:d7:5f:b7:f5:4a:4d:a5:19:9a:d8:55:a2:4a:
         c5:1a:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org