Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33332d3333203d3e20323635343834.roa
File:                     323830343a333464383a3a2f33332d3333203d3e20323635343834.roa (raw, json)
Hash identifier:          49i+d1dv5xCD2UbFSRdI9EIqEsVnviIwJJaUooqg6wc=
Subject key identifier:   24:E5:BA:61:21:E8:D7:00:26:76:AA:E9:80:0B:7B:28:E0:B7:F7:79
Certificate issuer:       /CN=282867FDA1906735DA18D9838B50748AC97E1655
Certificate serial:       782944E9C55EA4703FA6D74A744F5D68AE06B5DA
Authority key identifier: 28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33332d3333203d3e20323635343834.roa
Signing time:             Tue 16 Apr 2024 18:44:58 +0000
ROA not before:           Tue 16 Apr 2024 18:39:58 +0000
ROA not after:            Tue 15 Apr 2025 18:44:58 +0000
asID:                     265484
IP address blocks:        2804:34d8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:29:44:e9:c5:5e:a4:70:3f:a6:d7:4a:74:4f:5d:68:ae:06:b5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282867FDA1906735DA18D9838B50748AC97E1655
        Validity
            Not Before: Apr 16 18:39:58 2024 GMT
            Not After : Apr 15 18:44:58 2025 GMT
        Subject: CN=24E5BA6121E8D7002676AAE9800B7B28E0B7F779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:0b:96:f2:de:85:b8:c8:f2:c3:b3:aa:8e:
                    3f:0d:5f:67:59:00:0a:09:20:7b:d2:5b:11:f8:f7:
                    a3:34:80:c5:a8:50:f7:a8:ee:d5:ab:5f:04:37:e2:
                    6f:2a:02:4d:7d:1d:82:f1:9a:7c:c6:91:e2:31:1b:
                    12:81:6a:cb:08:38:c3:f9:b7:1c:a2:00:77:06:f6:
                    41:44:26:92:54:b9:71:14:ef:dd:8c:eb:e7:ec:8a:
                    c2:6d:30:d0:f3:09:6d:9f:14:b8:c6:bd:1e:f5:a8:
                    35:a7:da:89:21:3d:03:8d:f6:fc:a7:31:5f:9a:97:
                    c2:07:bd:06:6e:2f:50:f7:e9:01:4a:25:c0:58:eb:
                    46:47:ec:99:8f:98:20:68:30:66:2d:f3:51:ca:c2:
                    c2:8e:15:78:bf:89:12:1a:48:03:76:3e:09:8d:27:
                    a1:68:1b:d7:d5:2f:1c:e3:58:fe:87:cf:11:7d:f9:
                    65:2c:65:08:d2:e9:d9:b3:22:d1:be:06:be:b0:99:
                    f4:aa:21:36:93:58:e1:e6:4c:56:c8:cf:96:c3:9e:
                    56:6f:3e:a8:cc:c9:c6:56:85:eb:65:36:51:42:20:
                    7f:c3:1e:54:a5:60:6f:e4:cf:9f:e6:8e:f9:7f:65:
                    c2:4b:15:21:d3:da:ed:f2:2c:cd:9a:72:4d:38:c5:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E5:BA:61:21:E8:D7:00:26:76:AA:E9:80:0B:7B:28:E0:B7:F7:79
            X509v3 Authority Key Identifier:
                keyid:28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33332d3333203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:6f:5c:f5:6f:5d:b7:5a:0f:85:97:0f:23:54:5d:f3:68:e8:
         2b:30:bb:82:78:19:5c:30:f1:ff:c5:21:72:2f:d7:f5:1a:04:
         96:5a:fa:a8:5d:be:83:eb:5f:91:d8:45:a4:62:9b:74:25:92:
         20:5a:eb:29:43:3b:3d:cb:39:b1:f2:7e:98:ea:bc:75:01:b3:
         9b:8e:e3:ce:0c:51:94:01:b6:5f:99:75:04:4f:cb:53:44:83:
         aa:73:dc:b6:a9:a5:a2:59:1c:a7:17:26:9b:2d:78:f9:13:a0:
         6c:ec:fe:f5:60:d2:a4:0c:c6:8f:48:f6:86:14:5e:ef:f9:b6:
         29:38:b7:c6:58:8e:34:d2:88:10:0f:7c:0f:ad:ef:83:56:8e:
         65:79:6f:dc:bf:04:12:74:24:c4:a6:75:55:d0:00:24:9e:e1:
         eb:92:7d:ca:90:19:5a:e3:46:08:38:25:aa:17:78:85:25:0e:
         d0:9f:81:45:e3:e5:5e:3a:65:0e:84:8f:c1:14:4b:50:4f:60:
         3e:ab:4f:e5:0f:a3:52:bc:31:cc:ec:c6:d6:d1:fb:b9:57:c2:
         fe:71:db:a5:a8:de:7f:0a:c7:d5:82:cf:c9:f2:24:56:10:c0:
         63:1e:22:29:d5:aa:d9:b4:09:b8:59:d5:f4:84:d0:ff:0f:90:
         44:6f:d5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:35 2024 by rpki-client on console-fra.rpki-client.org