Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa
File:                     323830343a356638383a3a2f33332d3333203d3e20323639313037.roa (raw, json)
Hash identifier:          poG8TpLSsDgpaVDx/S+BxlQgsA0PNdBW+yRVxJY+JUQ=
Subject key identifier:   0D:AC:F6:A9:B0:A6:9B:54:0F:15:A7:E1:34:AE:0C:DA:F3:93:DE:7E
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       31F10C615E1A4511972D4D596E127979214B2D68
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:10:23 +0000
ROA not before:           Mon 12 Aug 2024 20:05:23 +0000
ROA not after:            Mon 11 Aug 2025 20:10:23 +0000
asID:                     269107
IP address blocks:        2804:5f88::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f1:0c:61:5e:1a:45:11:97:2d:4d:59:6e:12:79:79:21:4b:2d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:05:23 2024 GMT
            Not After : Aug 11 20:10:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6c:7a:c2:78:7f:e3:41:9a:3c:9b:46:9e:49:
                    a5:f7:77:83:45:7d:0f:f4:e4:ca:f4:ea:7b:c5:66:
                    71:28:e8:c8:b1:f5:ee:5c:7d:b8:5f:13:6e:5d:fc:
                    71:99:a0:68:60:e7:32:91:c7:bb:45:92:53:e9:6e:
                    15:5b:1e:87:b5:e2:c1:5a:80:a5:34:15:35:01:bf:
                    16:15:76:bc:04:ce:87:1d:29:6c:c7:2e:f6:b1:3e:
                    bf:86:38:80:06:1a:b7:c2:96:77:8a:82:c1:b4:5b:
                    27:15:18:68:28:a9:1c:84:b0:97:e1:c1:69:00:e6:
                    6a:4f:f6:18:82:e6:95:22:e5:cf:57:eb:dd:3f:94:
                    dd:20:b4:4b:2f:d1:77:23:f3:a4:e7:a1:12:c8:bd:
                    3a:36:4f:9e:e1:30:d5:87:b3:1e:f3:c2:28:46:dc:
                    fa:eb:ad:eb:b1:7b:ff:b4:5f:43:03:c4:df:c7:01:
                    ae:73:bc:75:58:b9:3f:fe:81:fd:dc:c3:a0:f7:66:
                    78:67:88:11:85:d0:9f:df:53:8f:84:6b:d2:42:79:
                    b6:34:c3:5e:f8:b5:28:f3:91:cb:15:28:5c:d8:27:
                    17:72:e3:da:6a:0d:64:e9:62:10:6f:b7:da:19:6b:
                    c6:6f:7b:d9:ef:50:9c:12:6b:4e:5a:54:7c:3c:ca:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AC:F6:A9:B0:A6:9B:54:0F:15:A7:E1:34:AE:0C:DA:F3:93:DE:7E
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:a8:a0:4f:98:27:84:81:8d:9e:1e:a8:c1:43:f7:60:5d:
         9e:3d:7c:54:1f:db:f1:53:c8:82:23:2f:9b:b0:fb:37:57:c3:
         bb:0a:52:58:62:d0:03:1e:ef:b3:35:7b:37:e2:69:21:82:1e:
         ea:35:c9:83:0c:c9:2d:5e:e6:d5:89:80:95:c1:a6:45:c4:97:
         94:16:ac:ba:67:9c:84:32:01:8c:7d:cf:2c:65:02:0b:a6:39:
         a2:87:f9:06:67:ab:fa:cb:aa:42:72:28:35:5c:e5:7b:f7:cc:
         a7:3e:a3:e3:48:0c:d9:d9:09:ad:bf:bd:95:0d:65:12:ac:26:
         92:75:41:ab:0d:4e:4f:0f:d8:5d:ac:4b:ea:35:e8:b1:bf:b4:
         fa:2c:92:b4:de:bd:56:16:04:b2:7c:7b:68:b0:f1:4f:5b:9a:
         08:7d:09:3a:41:fc:8c:5f:db:04:fa:5a:87:24:fb:d9:5b:23:
         11:bc:fd:3e:33:18:5d:f6:99:dc:c5:a4:41:c2:fa:4c:d9:1f:
         b5:02:8a:e2:73:7c:1a:02:1d:99:ae:71:83:2e:01:e5:51:ed:
         b4:68:74:ca:d1:61:f9:4f:1f:5b:e0:7a:a1:4c:9f:f9:50:1b:
         06:74:13:fd:d5:96:46:23:81:53:80:f5:19:54:76:bc:ab:1a:
         c9:a1:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org