Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a633030303a3a2f33352d3335203d3e20323637363638.roa
File:                     323830343a343530383a633030303a3a2f33352d3335203d3e20323637363638.roa (raw, json)
Hash identifier:          npg5HIvnipejcx1khAI/sa2j8sXjhIfBLs74tTlssv8=
Subject key identifier:   0C:81:FE:4E:15:53:B7:67:B0:21:4F:B7:0A:A3:CA:E1:84:17:89:0C
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       6CCF8B88B237BB696B5248F4957F97DB31B99F9B
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a633030303a3a2f33352d3335203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:11:59 +0000
ROA not before:           Thu 15 Aug 2024 20:06:59 +0000
ROA not after:            Thu 14 Aug 2025 20:11:59 +0000
asID:                     267668
IP address blocks:        2804:4508:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cf:8b:88:b2:37:bb:69:6b:52:48:f4:95:7f:97:db:31:b9:9f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:06:59 2024 GMT
            Not After : Aug 14 20:11:59 2025 GMT
        Subject: CN=0C81FE4E1553B767B0214FB70AA3CAE18417890C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:d4:92:f4:65:83:de:65:6d:33:74:53:77:
                    94:65:bc:2d:fa:9f:ca:39:8b:ab:98:df:58:10:59:
                    ce:1d:ed:6f:c4:b7:7c:bb:dd:0f:55:93:6b:a6:b4:
                    a6:59:57:79:ad:c6:45:e3:c4:0a:46:2f:05:12:69:
                    ae:4a:7d:fe:81:72:20:d2:e5:44:9d:58:a9:95:0c:
                    51:d7:50:4a:f9:aa:8e:43:69:3b:8c:ad:4b:51:77:
                    4c:55:35:2c:48:16:49:20:de:a8:a5:da:1f:e0:c2:
                    a8:cc:6d:65:4e:2b:d7:59:c6:ea:51:75:d5:78:ce:
                    d3:6f:b1:aa:d9:9f:ab:3a:c5:e0:11:3f:0b:b7:0d:
                    fa:c3:b2:12:75:1d:ac:2c:32:7e:bf:46:b2:f8:42:
                    ca:7c:4a:34:3d:f5:03:c8:c4:18:22:7f:9e:f8:9f:
                    ac:5d:50:32:c8:5c:9b:26:ed:8d:34:78:5e:80:6b:
                    bd:e0:4d:84:1f:47:3b:1c:f7:b3:78:46:ae:e4:03:
                    be:91:5d:98:4c:67:48:5a:61:2c:66:ae:a3:8b:57:
                    2d:73:8b:b7:b8:e7:a4:99:b0:51:bd:cb:7b:27:6b:
                    a6:3e:2a:e2:14:e7:6b:f6:71:74:d6:c9:45:38:9e:
                    6d:dc:8a:3c:d5:93:46:8b:6f:ae:65:a5:fe:b4:a6:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:81:FE:4E:15:53:B7:67:B0:21:4F:B7:0A:A3:CA:E1:84:17:89:0C
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a633030303a3a2f33352d3335203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:11:af:e5:79:4e:de:f3:75:b5:4b:f2:2a:cb:f8:65:55:
         2c:41:86:11:a2:27:ed:ac:dc:da:04:d4:4c:fc:3f:d7:15:63:
         50:20:80:bf:be:7b:d5:91:b9:55:4c:ef:a2:c7:74:8b:f2:0e:
         76:2b:44:48:f6:56:52:b2:9a:66:2b:68:20:f6:c4:10:d8:3b:
         46:b4:1a:14:7d:0d:e2:b1:e3:60:10:f4:f2:14:03:c6:3f:22:
         9e:f6:79:20:1e:87:ca:44:bd:10:f1:6f:26:14:07:e8:89:4b:
         38:b6:57:56:e7:21:ea:9a:5e:65:6e:bc:ac:54:55:cb:aa:f4:
         b3:38:53:0d:23:41:54:26:64:87:d2:fe:e7:b5:15:cd:4b:67:
         16:b1:4e:93:d9:77:36:0d:7e:99:8a:80:66:4a:58:4b:5d:b7:
         b1:82:10:65:97:5e:9b:a1:8d:48:a8:60:0d:e6:d5:ba:4f:7f:
         b4:2d:45:1d:96:70:f7:53:04:9d:0f:03:eb:0a:a6:79:58:32:
         05:7e:eb:24:53:23:f0:b4:f3:df:7c:3f:22:40:bc:13:aa:40:
         d4:b0:81:a3:f1:b0:f9:ac:2b:aa:86:b8:a9:74:75:cc:0d:ce:
         82:b1:97:2e:a6:9e:a4:df:80:00:f1:1c:4d:73:99:a9:29:85:
         14:73:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:05 2024 by rpki-client on console-ams.rpki-client.org