Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa (raw, json)
Hash identifier:          rPtI7t91OgBLJBnGMJzhKQvkvfauDJTFBtWVJq803Tw=
Subject key identifier:   24:8D:97:82:35:73:5B:4E:BC:26:1E:DD:CF:F0:2C:CD:40:FB:8C:10
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       785D5CEDE74A7A9A640CB2D2A78E01FD0C68F9AA
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:31 +0000
ROA not before:           Thu 04 Apr 2024 01:33:31 +0000
ROA not after:            Thu 03 Apr 2025 01:38:31 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5d:5c:ed:e7:4a:7a:9a:64:0c:b2:d2:a7:8e:01:fd:0c:68:f9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:31 2024 GMT
            Not After : Apr  3 01:38:31 2025 GMT
        Subject: CN=248D978235735B4EBC261EDDCFF02CCD40FB8C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:a0:f1:9e:d5:93:a4:c8:9b:71:a0:0e:da:
                    04:6e:ff:8c:44:9e:d1:90:de:07:ec:78:b6:d8:ef:
                    31:2c:71:79:c7:d0:bb:8c:95:99:f1:5c:2d:e1:bb:
                    d0:73:bb:47:17:ac:f0:06:b7:ef:4a:2b:48:72:66:
                    63:4b:e4:e4:5a:f8:99:c4:66:1c:f3:f8:24:a4:68:
                    85:49:3e:df:75:06:b0:c5:96:dd:95:1e:f3:ab:37:
                    4d:58:de:c9:20:00:a7:bd:19:76:54:bd:7d:a7:7a:
                    79:59:d8:2b:bc:cd:c4:8c:09:65:df:08:a8:98:03:
                    2f:d2:28:21:36:6a:ec:7b:8e:50:c6:85:f8:c3:e3:
                    b4:98:e9:4c:f9:0c:a0:7e:0f:1f:0f:ce:b5:b1:c3:
                    30:d1:b9:40:32:66:7b:94:42:fa:1a:bc:8f:59:b2:
                    ab:51:2a:29:4d:f9:cc:3c:48:ff:d5:bd:a4:72:ed:
                    bc:08:7e:78:cb:c1:46:b9:82:f5:5a:49:15:d3:d7:
                    1f:c3:20:d1:f0:f2:6c:22:54:49:a3:6d:b1:e7:81:
                    7e:ff:20:36:dc:6a:a5:ec:b7:2f:3f:f1:df:3f:86:
                    4a:cc:5b:8d:ca:0b:cb:0a:dd:b3:b5:2f:ec:65:2a:
                    89:f1:0b:d1:64:70:d5:5b:d1:e5:01:b9:54:7a:27:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8D:97:82:35:73:5B:4E:BC:26:1E:DD:CF:F0:2C:CD:40:FB:8C:10
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:98:05:62:e1:7e:37:e2:da:76:05:ed:0a:bc:de:dd:a1:b5:
         a5:c7:b0:f5:8a:d6:b8:0b:52:18:60:eb:6a:1c:23:43:e8:d9:
         ce:69:df:85:94:63:8b:63:ca:a2:b9:52:1f:67:e7:97:e3:78:
         04:27:12:5c:39:8c:37:a8:53:ca:51:17:5d:4a:68:84:42:ed:
         a1:1a:eb:16:b4:ec:6c:fa:f4:80:b1:2b:cb:9d:f7:1f:59:68:
         f2:15:32:53:a6:40:1b:a9:2b:82:ad:c2:74:65:53:b8:df:64:
         41:0c:58:a6:4a:5f:47:b4:01:99:e3:21:03:52:f5:1c:26:54:
         51:73:53:78:9f:df:94:4c:19:0a:a8:10:67:28:cb:34:4c:e4:
         dd:52:8e:13:66:b2:c9:2c:b0:0b:95:0a:a5:a9:6c:16:c2:64:
         d5:bd:f2:ce:7e:ad:44:87:10:ae:d2:ba:63:bf:c1:2a:f9:f5:
         33:8b:0c:d1:63:71:4a:6e:2d:8e:64:4c:1a:1c:6b:1f:c9:01:
         5a:b5:5e:71:93:98:33:eb:10:09:1e:04:45:bd:4f:63:ab:ab:
         4e:df:96:b1:26:40:ab:31:77:bd:04:3a:fa:16:af:ee:f7:de:
         aa:22:4e:0b:5c:56:60:40:4c:ad:90:11:67:69:c4:28:d7:6b:
         14:6e:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org