Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa
File:                     323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa (raw, json)
Hash identifier:          vtLeeTNGroCuRY3nP5M7Q7U84rbEoTfB7kUbgoz+wfE=
Subject key identifier:   A7:29:A3:43:38:08:10:6E:C2:50:2A:7B:7A:22:F7:0E:AA:FC:26:5F
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       6BDA20C39DFA1C22E4742015A1760DE8437717A5
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa
Signing time:             Tue 20 Aug 2024 17:29:14 +0000
ROA not before:           Tue 20 Aug 2024 17:24:14 +0000
ROA not after:            Tue 19 Aug 2025 17:29:14 +0000
asID:                     268787
IP address blocks:        2804:5aa8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:da:20:c3:9d:fa:1c:22:e4:74:20:15:a1:76:0d:e8:43:77:17:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Aug 20 17:24:14 2024 GMT
            Not After : Aug 19 17:29:14 2025 GMT
        Subject: CN=A729A3433808106EC2502A7B7A22F70EAAFC265F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:23:e0:93:57:91:82:37:cb:6a:d3:19:67:
                    fa:35:be:d2:27:fd:9d:2b:63:2c:9a:2c:13:24:be:
                    70:2a:f2:b4:f9:89:74:7c:80:14:53:8a:15:36:80:
                    83:74:3e:1a:53:7b:19:8a:98:bd:69:15:66:28:11:
                    64:0a:4e:e0:09:09:fe:ab:70:e6:62:ea:60:9a:f3:
                    bd:c3:b4:bb:e2:4b:dd:e0:4a:b7:5f:3d:d0:29:58:
                    f2:56:0f:a0:70:a8:ad:e2:e1:0a:05:d8:22:bf:d1:
                    0c:fe:61:02:c7:d9:ae:bd:0b:9e:53:24:53:28:61:
                    13:57:7a:bd:f4:91:02:e3:bc:39:f9:84:8e:65:2a:
                    e8:4b:70:ce:2b:11:dd:9e:cf:e8:a7:00:c8:bf:a3:
                    31:0d:1b:d9:c8:3f:06:5f:63:64:16:22:90:b1:d2:
                    ee:f0:2d:2f:ac:d2:9e:85:04:3e:b5:9d:fe:c8:df:
                    39:60:6c:a4:10:70:02:a0:09:dc:bc:b8:c3:76:c6:
                    9b:7c:b3:d3:10:47:e7:ae:e4:42:99:f5:77:00:4e:
                    82:e6:87:4a:d4:86:41:c1:2a:74:4c:fb:9f:52:7c:
                    3b:de:c6:92:20:5a:a2:c4:05:e3:8e:40:21:19:02:
                    05:e2:f6:96:ab:39:b7:eb:57:f7:ca:95:f7:f5:85:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:29:A3:43:38:08:10:6E:C2:50:2A:7B:7A:22:F7:0E:AA:FC:26:5F
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d3:ec:ed:14:c8:db:47:8e:65:32:17:b8:92:44:a1:6d:ca:ef:
         34:03:31:e9:96:0e:dd:5e:01:09:18:60:8e:d3:4b:50:43:67:
         45:83:7f:68:df:90:96:91:9b:78:c3:d6:69:02:b7:40:3d:30:
         3e:f2:02:73:d3:b2:98:d2:24:50:46:96:d4:7c:e7:1d:93:61:
         48:f2:ce:40:06:c2:de:5b:80:0b:3a:b1:47:76:88:d5:fd:50:
         34:d3:51:eb:68:72:51:9f:cd:72:11:94:37:ae:de:23:59:11:
         e5:f2:37:1f:25:eb:cc:49:57:6d:55:5b:d4:97:f3:6f:9c:ea:
         8c:bf:da:de:27:e0:48:61:9b:12:4a:cd:e4:2c:14:0d:fe:1c:
         eb:1e:9e:f6:44:b2:b8:ec:0d:d6:a5:a1:28:15:46:b6:eb:e1:
         c1:91:2c:f1:e7:12:e0:d4:90:21:95:9c:f2:a5:b1:7e:1f:aa:
         30:46:41:39:af:36:2c:8d:7b:55:39:06:a9:37:4c:de:ec:f6:
         e3:d8:02:58:a2:85:76:86:ad:65:57:17:f2:ee:8d:c7:2d:69:
         57:01:df:e7:4a:35:f8:2c:26:c0:6f:e2:2e:72:fe:84:9d:30:
         17:49:c7:f6:d8:4c:7c:23:40:36:4f:42:58:a0:90:f0:6c:66:
         0a:a3:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org