Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33322d3332203d3e20323639313037.roa
File:                     323830343a356638383a3a2f33322d3332203d3e20323639313037.roa (raw, json)
Hash identifier:          /U4Nz4aLA1HsBDBVCE305M5JpuNvHHkhHjrK2UkUTjo=
Subject key identifier:   62:C4:B7:88:44:02:6B:A6:6B:33:72:17:A0:72:9E:C4:C4:1A:EB:D8
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       4EF87EBB90BC0C94D7277944C7C53F24214212C9
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33322d3332203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:10:37 +0000
ROA not before:           Mon 12 Aug 2024 20:05:37 +0000
ROA not after:            Mon 11 Aug 2025 20:10:37 +0000
asID:                     269107
IP address blocks:        2804:5f88::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f8:7e:bb:90:bc:0c:94:d7:27:79:44:c7:c5:3f:24:21:42:12:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:05:37 2024 GMT
            Not After : Aug 11 20:10:37 2025 GMT
        Subject: CN=3082010A0282010100CD560CDF9D81891B39877FF4A7A5FF197C0E30CFDFB7F00D23FFC5DE6519594FCD704806D1C76766649148705400DB2FA8D4F9F4CAA3B081FCBD4469469C104009899E6F5C2D1971E9B9978F51B18FA91D2DD5D286B97FE24A6EB860DCB93E73DD67D0E393AAEBCB679D1B8CD4046266219D88D2879222AAF6CF079A9ACBE345D75AAE996674F4547D368409410385CBC5E277FFDD797817CFC6690DD9246EC7C2947F56802989800DF00B0E82A5E6579C1813C83AC5177AD0FED4F966443C8AA39BC6624CA08AD5C2C8D3619B6D3D40921E74F40B7EA89C6056F6B6C1F24AD97DFF138C449ABECC3F821AE64782054FCB3122560018668C93E912FFBD675E9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:0c:df:9d:81:89:1b:39:87:7f:f4:a7:a5:
                    ff:19:7c:0e:30:cf:df:b7:f0:0d:23:ff:c5:de:65:
                    19:59:4f:cd:70:48:06:d1:c7:67:66:64:91:48:70:
                    54:00:db:2f:a8:d4:f9:f4:ca:a3:b0:81:fc:bd:44:
                    69:46:9c:10:40:09:89:9e:6f:5c:2d:19:71:e9:b9:
                    97:8f:51:b1:8f:a9:1d:2d:d5:d2:86:b9:7f:e2:4a:
                    6e:b8:60:dc:b9:3e:73:dd:67:d0:e3:93:aa:eb:cb:
                    67:9d:1b:8c:d4:04:62:66:21:9d:88:d2:87:92:22:
                    aa:f6:cf:07:9a:9a:cb:e3:45:d7:5a:ae:99:66:74:
                    f4:54:7d:36:84:09:41:03:85:cb:c5:e2:77:ff:dd:
                    79:78:17:cf:c6:69:0d:d9:24:6e:c7:c2:94:7f:56:
                    80:29:89:80:0d:f0:0b:0e:82:a5:e6:57:9c:18:13:
                    c8:3a:c5:17:7a:d0:fe:d4:f9:66:44:3c:8a:a3:9b:
                    c6:62:4c:a0:8a:d5:c2:c8:d3:61:9b:6d:3d:40:92:
                    1e:74:f4:0b:7e:a8:9c:60:56:f6:b6:c1:f2:4a:d9:
                    7d:ff:13:8c:44:9a:be:cc:3f:82:1a:e6:47:82:05:
                    4f:cb:31:22:56:00:18:66:8c:93:e9:12:ff:bd:67:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:B7:88:44:02:6B:A6:6B:33:72:17:A0:72:9E:C4:C4:1A:EB:D8
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33322d3332203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:78:2e:c2:27:23:80:ea:5f:44:53:70:35:78:3a:6a:72:
         e7:6e:19:1d:aa:d3:d0:2f:ad:2d:61:66:59:7e:1a:f8:f1:8e:
         7c:86:8d:01:5c:19:99:1d:06:86:83:22:fb:bb:5a:6e:8a:4f:
         6a:5d:ac:de:49:28:21:4a:80:f2:cc:36:5e:e6:6c:f9:e8:9d:
         25:1b:d7:82:e3:32:ee:be:a9:f3:2c:38:91:1e:bd:4d:f0:5c:
         f8:99:98:cd:7c:04:d7:99:8c:8b:14:07:18:17:89:4c:50:e3:
         2d:96:bc:f5:8f:4c:49:3f:df:fc:33:a3:e1:c8:6d:65:0f:bb:
         b5:84:b8:28:25:1e:68:7f:b4:73:eb:47:fe:f4:db:dc:d6:9e:
         b2:be:79:2b:3f:7d:d7:31:74:9d:09:4a:2e:e0:ab:d2:db:ff:
         31:2a:bf:3b:3c:c1:27:7d:f0:49:e0:d8:ab:14:75:68:a4:56:
         18:d0:4c:ee:68:7e:4e:b5:7c:92:1c:95:70:3f:83:f0:84:63:
         0f:d5:66:50:a5:cf:65:fa:68:a6:e6:db:0c:cc:ad:fe:41:9f:
         dd:7f:c4:f7:26:a2:41:47:4a:1b:41:48:3f:6e:bb:27:89:e5:
         d3:05:81:0d:8c:69:15:a4:36:1c:f3:75:15:7d:8f:cd:f9:66:
         79:1c:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:22 2024 by rpki-client on console-fra.rpki-client.org