Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a383030303a3a2f33332d3333203d3e20323639313037.roa
File:                     323830343a356638383a383030303a3a2f33332d3333203d3e20323639313037.roa (raw, json)
Hash identifier:          n+Iu0Ej2/pNzjAp8/7JMqWULqulz4vGwiCw4fG8LJ4M=
Subject key identifier:   41:DC:9C:18:11:DE:59:F9:29:58:67:81:57:C0:B5:C1:33:32:BC:B2
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       560C598A17D4E1547010956F07ED0D1B07A52BF3
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a383030303a3a2f33332d3333203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:09:46 +0000
ROA not before:           Mon 12 Aug 2024 20:04:46 +0000
ROA not after:            Mon 11 Aug 2025 20:09:46 +0000
asID:                     269107
IP address blocks:        2804:5f88:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0c:59:8a:17:d4:e1:54:70:10:95:6f:07:ed:0d:1b:07:a5:2b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:04:46 2024 GMT
            Not After : Aug 11 20:09:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:06:e8:3a:22:21:02:de:d0:62:c1:f9:17:
                    7d:c9:58:00:4c:c3:de:6f:11:bf:3b:6a:a4:de:be:
                    a7:eb:45:1b:9e:cc:09:49:f6:94:b7:0b:03:a7:dc:
                    20:99:12:01:59:8a:2c:6e:9a:b4:1b:33:81:da:19:
                    88:a6:a6:44:4f:f1:63:57:a0:7a:be:52:01:25:d0:
                    81:71:a1:38:06:1e:ff:ad:a2:8f:86:95:b4:42:15:
                    cc:e6:7a:fe:f2:d0:20:c8:3e:01:20:90:57:24:1d:
                    ac:2a:f8:bf:17:8f:46:e2:42:80:39:80:57:04:92:
                    7d:7b:9b:a9:2c:0e:1c:13:24:1c:e6:b6:97:92:40:
                    e4:c7:03:f8:f6:cc:d7:ac:99:d4:2b:b9:c9:44:b3:
                    2b:57:ea:50:77:3a:c4:92:75:34:1a:e4:1d:82:0e:
                    4a:d9:18:cd:ff:be:22:f5:43:22:12:07:da:4b:99:
                    31:38:9b:16:75:0e:33:92:99:86:65:f5:a2:7c:91:
                    f3:55:92:2a:a2:f1:2b:43:85:b6:b9:40:31:fc:48:
                    88:26:92:f1:9a:bd:10:73:1c:a9:1c:a2:da:c7:36:
                    7a:cd:05:09:20:f1:44:5a:31:5c:2b:54:65:55:33:
                    40:11:9c:c8:fb:db:b8:60:a5:3a:5a:19:94:d9:6d:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DC:9C:18:11:DE:59:F9:29:58:67:81:57:C0:B5:C1:33:32:BC:B2
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a383030303a3a2f33332d3333203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:4c:e3:0b:82:1d:2a:7a:d0:3d:1c:63:21:ca:fa:68:59:93:
         ce:37:bc:90:e8:49:7d:3b:0e:39:4e:0b:1f:1c:6b:98:1f:9b:
         e8:a5:b0:6d:08:24:48:12:34:bc:a2:2d:d2:de:c4:60:56:60:
         e1:30:c6:16:ff:fa:72:2b:6b:14:5c:7e:70:84:ab:d9:d8:37:
         fa:7c:33:4a:fc:9e:24:f3:72:7a:8e:22:b2:50:82:86:7d:83:
         5e:dc:bd:bb:64:92:ca:8d:ed:06:32:9e:cc:34:a3:07:71:23:
         63:08:f0:2d:18:8d:d6:29:a3:92:de:be:d9:ad:d5:1e:d2:cc:
         ca:7d:fe:d0:de:a7:49:39:a5:08:db:af:62:d8:69:74:b9:7c:
         a9:73:a5:cc:48:1d:e6:b7:2f:23:22:bd:f6:d9:1f:f3:c4:3a:
         87:9e:31:28:ad:8a:c8:0a:d7:2c:ea:7c:4a:2b:d9:75:ce:67:
         a6:82:f2:72:32:8c:be:46:74:60:5d:3f:ed:c3:ce:c6:a3:39:
         97:3c:ca:a1:cf:5e:77:38:dc:fd:d8:bb:c7:8b:48:4c:0a:ea:
         76:e3:d6:9f:fa:df:47:6d:b1:63:77:3f:a7:23:ad:f5:02:17:
         62:dc:93:05:2f:77:dc:eb:3f:cc:c7:3c:44:3a:47:4d:7f:12:
         e6:3c:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org