Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/323830343a326362303a38303a3a2f34322d3432203d3e20323635323337.roa
File:                     323830343a326362303a38303a3a2f34322d3432203d3e20323635323337.roa (raw, json)
Hash identifier:          /5/ZKqT2tJZaNx6cbCHXf/0enq3PLFOQAP3tUXL5WGc=
Subject key identifier:   F0:7D:FE:0C:C5:ED:4A:EE:AB:DC:0D:7A:CE:C2:E7:F8:F1:E0:38:03
Certificate issuer:       /CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
Certificate serial:       5FBAEE2839CDB49AC38F087C148B462452B70F48
Authority key identifier: 9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/323830343a326362303a38303a3a2f34322d3432203d3e20323635323337.roa
Signing time:             Fri 17 May 2024 14:57:39 +0000
ROA not before:           Fri 17 May 2024 14:52:39 +0000
ROA not after:            Fri 16 May 2025 14:57:39 +0000
asID:                     265237
IP address blocks:        2804:2cb0:80::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:ee:28:39:cd:b4:9a:c3:8f:08:7c:14:8b:46:24:52:b7:0f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
        Validity
            Not Before: May 17 14:52:39 2024 GMT
            Not After : May 16 14:57:39 2025 GMT
        Subject: CN=F07DFE0CC5ED4AEEABDC0D7ACEC2E7F8F1E03803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:16:3f:6c:17:7a:1d:db:10:39:5e:ae:00:
                    82:e2:2e:c0:0a:b3:33:60:a6:3d:4e:ff:0f:4c:d6:
                    89:b5:a1:ec:69:33:3a:68:2b:53:9c:6a:ec:64:55:
                    64:c1:6e:87:04:fa:b0:7e:10:62:86:63:8e:93:8e:
                    12:49:89:a9:d4:7d:97:a2:63:d0:b5:8f:69:31:19:
                    41:a3:24:e8:70:3e:8e:a0:03:16:3c:af:5e:7e:f4:
                    df:d4:ff:43:92:b2:61:0a:cf:aa:88:3e:16:0c:f0:
                    2d:73:31:59:a2:5a:0f:23:b9:b1:e1:41:2f:ef:33:
                    1d:37:be:de:81:b9:ee:f1:e6:74:95:df:ec:0e:f9:
                    29:85:c9:9a:05:1f:66:c3:4e:0e:31:95:07:d9:21:
                    7b:67:b4:9c:76:5e:a9:a4:c0:be:9e:45:7f:99:c7:
                    6f:fc:10:ab:ba:cb:5e:06:72:db:2e:55:b9:35:c6:
                    d4:75:b6:4d:a4:d0:aa:d7:1e:37:c6:4c:43:96:02:
                    c1:b2:43:1c:0e:fa:3d:fb:9e:49:68:2c:d4:4b:58:
                    ab:f9:f7:89:91:ef:8a:6b:c2:e9:7d:11:b0:c5:4c:
                    eb:bc:dc:36:12:11:b0:aa:54:b2:73:6a:6a:19:69:
                    81:50:b0:5e:3c:43:43:f8:bb:d0:6d:22:9e:84:79:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7D:FE:0C:C5:ED:4A:EE:AB:DC:0D:7A:CE:C2:E7:F8:F1:E0:38:03
            X509v3 Authority Key Identifier:
                keyid:9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/323830343a326362303a38303a3a2f34322d3432203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb0:80::/42

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:38:71:2c:5e:2f:ff:aa:73:f9:63:54:31:c1:32:f7:2c:
         d9:9a:b5:6d:7e:fb:58:0e:b7:0b:3a:4d:09:fc:c3:59:84:df:
         c1:7f:4e:a9:8d:67:f2:ab:04:64:0c:23:cc:52:8a:67:ec:8b:
         6e:96:ae:a3:f6:1a:ee:1f:bd:37:b2:74:a6:32:8c:4a:f2:f9:
         17:b0:cf:1b:3b:1f:be:9a:40:14:b0:c1:f0:b8:3d:8f:90:f1:
         23:43:4b:60:4b:dc:48:94:82:14:f6:51:45:bc:61:60:d7:3d:
         a7:81:83:df:23:09:18:d6:c6:9f:af:a9:b1:15:8f:ae:09:cf:
         ce:fe:be:45:54:e3:6a:01:73:52:85:5c:99:e6:40:f3:14:07:
         7f:1d:6c:f2:5f:a2:2a:c0:16:de:a2:64:ad:66:b9:40:e8:c9:
         54:2f:a2:4c:50:02:d9:32:3e:1e:b3:12:f8:11:4f:ea:7d:ad:
         e0:b7:be:76:96:4a:c0:b7:9b:44:d3:fc:f8:60:a0:57:a7:04:
         da:67:4d:b0:3b:41:06:74:75:56:d0:b9:c0:32:c1:ba:b7:d7:
         cc:e0:b2:e8:89:63:e5:42:61:b7:fe:b9:a4:b8:c2:bb:90:6d:
         7c:ba:b9:fa:3a:58:2f:c9:95:c9:7d:a2:50:b9:aa:95:f8:5a:
         fa:60:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org