Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          9wVUBICtv/yBGMVDxsohEeQeWtSO00AmHjptW0/Mv/s=
Subject key identifier:   58:F8:0B:7D:CA:3E:4B:33:44:B3:90:D7:1F:E6:97:6D:80:1F:2D:2C
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       725EF2FFDE463660C48C466C830E650D6DCD8568
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:31 +0000
ROA not before:           Thu 04 Apr 2024 01:33:31 +0000
ROA not after:            Thu 03 Apr 2025 01:38:31 +0000
asID:                     263661
IP address blocks:        2804:1128::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5e:f2:ff:de:46:36:60:c4:8c:46:6c:83:0e:65:0d:6d:cd:85:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:31 2024 GMT
            Not After : Apr  3 01:38:31 2025 GMT
        Subject: CN=58F80B7DCA3E4B3344B390D71FE6976D801F2D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:ea:c2:0b:03:24:09:96:c6:ab:9d:4d:b8:
                    97:06:d3:75:0c:7b:b4:8c:c8:11:79:3c:ce:85:81:
                    c7:f9:c1:80:73:72:d5:39:8a:d9:86:42:37:69:4a:
                    05:42:38:0d:3a:1b:c6:22:f9:de:27:cc:76:a4:6d:
                    bb:2c:ad:3b:5e:d3:06:ca:b3:96:a1:8a:10:5b:94:
                    b8:99:0c:d3:fd:be:91:dd:00:7d:d3:ee:09:2b:f2:
                    84:dc:e4:a1:df:5c:e4:ec:81:bc:79:56:f6:14:79:
                    6f:7c:99:fe:b7:ef:28:5b:fb:04:e1:3a:c3:6b:b0:
                    cb:95:62:8d:5e:4a:60:f6:cd:c0:f6:2f:af:27:68:
                    71:79:6e:09:9c:f2:0f:13:7f:55:39:8b:44:e3:57:
                    51:96:dd:92:96:7e:d5:83:70:3c:23:b0:9d:ad:04:
                    36:92:36:d5:3b:2b:bd:bb:07:0f:5c:d7:86:a8:0c:
                    c2:1c:2c:97:4d:5c:d3:bb:68:af:ec:93:70:ea:80:
                    30:e3:d7:36:2c:f8:95:68:2d:f3:58:97:33:e6:eb:
                    2c:de:bc:c5:b0:43:fc:ba:a7:d4:4c:7c:13:25:8f:
                    2a:7e:5e:f9:87:c6:50:0a:fa:a4:20:15:38:de:4e:
                    5a:90:af:f1:e6:74:82:6d:aa:66:05:45:81:13:65:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:0B:7D:CA:3E:4B:33:44:B3:90:D7:1F:E6:97:6D:80:1F:2D:2C
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:42:9d:f3:5e:70:3b:3b:9c:35:d7:59:e8:90:37:df:fb:ed:
         a1:40:19:ea:68:8f:90:c9:ee:e5:26:a1:77:74:bc:5a:f0:ca:
         1f:dc:d0:d9:c2:7b:2c:76:c8:af:a0:11:1d:db:fc:ff:80:65:
         d5:f9:6a:c2:fb:48:cc:6a:8a:04:f4:69:b8:3d:d9:8f:04:87:
         ed:39:a1:2b:c9:2b:98:c9:14:50:58:87:5d:9f:e6:d3:52:8c:
         38:83:c5:84:b3:b2:0d:69:83:68:1c:3b:9f:0e:b7:7c:b2:ab:
         b6:70:2b:bc:97:0b:50:34:8d:32:e3:e0:5d:be:76:66:69:b8:
         5d:bc:03:8b:6c:80:30:02:6b:1f:0e:1b:61:a0:09:b9:b5:5b:
         24:20:1b:ee:de:86:bf:f4:b3:33:4d:dd:ef:72:35:ab:34:2c:
         e3:71:b5:25:e2:60:e8:ec:d3:bb:92:36:7c:25:75:25:e0:b7:
         eb:2f:8b:0a:b7:c5:5e:12:70:4f:df:cb:ea:91:84:04:9e:6f:
         a4:be:63:27:27:6b:cf:5c:31:e7:2c:64:8c:d5:58:5f:7c:9a:
         42:fb:3b:dc:c5:b7:14:a3:86:f4:d6:fc:d5:6d:90:b4:a9:10:
         b3:05:03:56:bc:d9:04:c3:64:db:ee:1e:4a:9a:7f:9f:5d:1e:
         e1:6a:11:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org