Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33332d3333203d3e20323638373837.roa
File:                     323830343a356161383a3a2f33332d3333203d3e20323638373837.roa (raw, json)
Hash identifier:          IsbIVg02k3zbXVXhXwx8DjS0OryH7kP0lsiTntnrP/o=
Subject key identifier:   AD:33:05:D7:7B:FD:C2:15:68:B2:38:15:BC:D3:E0:88:C2:3A:C2:C0
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       79B4520E69A9E7D4EBE2DB482532481BD1E679A2
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33332d3333203d3e20323638373837.roa
Signing time:             Tue 20 Aug 2024 17:29:14 +0000
ROA not before:           Tue 20 Aug 2024 17:24:14 +0000
ROA not after:            Tue 19 Aug 2025 17:29:14 +0000
asID:                     268787
IP address blocks:        2804:5aa8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b4:52:0e:69:a9:e7:d4:eb:e2:db:48:25:32:48:1b:d1:e6:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Aug 20 17:24:14 2024 GMT
            Not After : Aug 19 17:29:14 2025 GMT
        Subject: CN=AD3305D77BFDC21568B23815BCD3E088C23AC2C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:39:00:52:3c:82:ea:22:59:5c:f5:bf:ec:
                    6d:65:f9:49:46:e9:86:49:78:81:13:17:50:c1:30:
                    bf:b8:8e:9b:da:c7:61:36:09:f4:2c:1a:26:1e:ed:
                    c6:b1:3e:06:29:ea:e3:63:3a:aa:7a:8e:38:61:95:
                    56:d5:1f:39:44:26:81:89:63:90:c8:a3:c9:33:0e:
                    4c:a3:23:3d:07:56:b4:b4:c3:16:8e:0a:f0:52:4b:
                    3f:6a:06:23:6a:f6:37:9c:9d:24:f9:62:4c:fa:2b:
                    f5:4f:4d:d3:f0:dd:c5:97:82:0a:2d:61:97:b2:a6:
                    39:27:0b:46:1a:77:0e:88:fe:6a:67:11:8b:c9:98:
                    6c:c8:8c:db:8f:ee:88:d9:ec:ee:dd:d5:b9:43:3d:
                    d8:ec:56:f9:65:dc:47:e6:1a:0f:5a:29:eb:a1:13:
                    ee:3d:77:a3:a7:31:47:6d:01:5e:93:c3:3b:ac:a0:
                    20:fe:c9:96:e7:93:30:f5:0a:5c:13:f8:43:a8:60:
                    e9:07:3a:f2:20:98:5b:f7:eb:e1:64:f3:0e:62:f1:
                    41:66:6c:5f:4d:64:46:c9:5a:19:1f:20:5f:ec:e8:
                    bd:f1:60:ca:36:c0:e7:31:0a:6a:f2:f7:10:d0:d6:
                    44:65:7b:7c:57:9b:65:a8:cb:94:3f:0f:90:cf:fe:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:33:05:D7:7B:FD:C2:15:68:B2:38:15:BC:D3:E0:88:C2:3A:C2:C0
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33332d3333203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa8::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:d4:2d:34:29:73:e2:b0:52:9d:e8:83:73:b5:62:7d:5a:
         a9:7b:d7:80:8f:21:41:b4:59:e1:44:b1:48:aa:cf:8e:50:94:
         e0:9b:c9:ea:55:7f:59:d2:a7:ab:d5:e5:d0:38:d0:6d:b3:32:
         f8:f9:90:eb:0c:04:80:6c:55:34:27:ad:22:99:82:5d:dd:bf:
         b9:0c:ea:8a:2d:69:15:94:00:cf:7b:a0:ae:7a:0c:5f:81:2c:
         89:6b:bd:ea:81:ad:60:73:c9:7f:bc:df:e2:25:67:d4:9d:20:
         bc:fd:f8:61:1d:ad:d3:2f:1c:52:18:11:21:51:e1:73:41:78:
         1d:3b:7f:bc:29:78:69:f6:14:71:d1:a4:15:35:2b:37:70:6e:
         02:3b:11:48:71:c6:02:5b:06:97:29:10:9f:1b:49:ac:e7:f4:
         20:57:7c:47:22:69:76:2f:2b:71:a0:b3:7e:cc:4b:3e:6d:9a:
         a5:10:ef:2f:9c:05:04:c1:a8:1d:da:9b:14:bc:f9:f9:92:a8:
         01:23:4d:99:c0:00:cf:8e:c7:d8:b9:1e:6d:e5:d0:8d:b4:3d:
         59:2c:0d:bd:0d:bb:2d:56:d4:99:c6:1f:8b:5b:42:84:04:4d:
         b6:a6:80:fd:5b:81:6c:b2:84:fb:4b:f0:8a:f9:7d:ab:f7:04:
         0d:2c:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org