Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa
File:                     323830343a346336343a3a2f33322d313238203d3e20323637333638.roa (raw, json)
Hash identifier:          KaEr4/fBrvmAe2gKfDQTxMX+IntpAfgynWA7SdzxX1E=
Subject key identifier:   B5:C6:AF:58:73:12:AA:F6:17:AD:51:B6:FD:85:F5:77:B3:F8:D2:59
Certificate issuer:       /CN=EB2D46D00CD40AC7FF86006BE9B6602228B5A07A
Certificate serial:       3DDAD9F7DC969C0B1B5F4B1DB064D20935318FC0
Authority key identifier: EB:2D:46:D0:0C:D4:0A:C7:FF:86:00:6B:E9:B6:60:22:28:B5:A0:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa
Signing time:             Thu 04 Apr 2024 10:46:20 +0000
ROA not before:           Thu 04 Apr 2024 10:41:20 +0000
ROA not after:            Thu 03 Apr 2025 10:46:20 +0000
asID:                     267368
IP address blocks:        2804:4c64::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.crl
                          rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:da:d9:f7:dc:96:9c:0b:1b:5f:4b:1d:b0:64:d2:09:35:31:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2D46D00CD40AC7FF86006BE9B6602228B5A07A
        Validity
            Not Before: Apr  4 10:41:20 2024 GMT
            Not After : Apr  3 10:46:20 2025 GMT
        Subject: CN=B5C6AF587312AAF617AD51B6FD85F577B3F8D259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:1c:d8:78:82:35:de:d9:6d:1b:38:4b:27:
                    16:b6:b4:4b:3c:9b:88:bc:93:52:cf:40:a8:2c:10:
                    c5:14:ba:d1:7c:e4:a8:de:8e:b6:0e:06:1f:50:d8:
                    cc:15:1f:eb:b1:09:09:00:1d:ee:54:de:fc:10:96:
                    1d:fb:6f:38:8d:10:49:a0:97:7e:3d:60:9b:9a:cf:
                    bf:5f:4a:75:3f:2e:f6:78:ce:63:d9:e1:4f:ef:57:
                    46:5a:da:6a:57:8d:a2:31:84:73:7f:0f:58:2a:f9:
                    b0:b9:db:e4:96:10:17:75:dc:10:96:83:c7:f1:ee:
                    73:8e:8e:46:03:d1:56:a0:01:5f:a4:4d:33:a6:94:
                    54:ee:8c:be:b8:89:57:e2:2a:b6:53:9b:b2:17:17:
                    12:75:67:bc:1e:d1:fa:f2:77:54:06:07:31:03:52:
                    c5:4c:b7:1a:7e:db:f3:ba:06:1b:1c:53:f3:15:38:
                    44:a6:ec:a7:d4:cf:d4:f4:6e:7f:15:d1:8b:31:2b:
                    82:e5:b6:13:ba:a6:6f:96:c8:92:51:5a:63:13:0c:
                    dc:d5:ec:d6:5c:24:b4:4f:e7:b7:d5:39:79:f0:a9:
                    cd:aa:4e:5d:fe:b7:85:f2:40:86:00:97:4c:e1:26:
                    be:12:65:6a:2b:59:34:79:42:24:de:22:0d:4f:c8:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C6:AF:58:73:12:AA:F6:17:AD:51:B6:FD:85:F5:77:B3:F8:D2:59
            X509v3 Authority Key Identifier:
                keyid:EB:2D:46:D0:0C:D4:0A:C7:FF:86:00:6B:E9:B6:60:22:28:B5:A0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:e3:e1:f3:e8:2d:29:3f:1d:19:00:67:fc:cb:1d:ca:54:
         eb:4c:2a:68:95:63:4e:d6:3e:36:a0:3b:68:40:6b:5e:b1:be:
         c4:4f:2b:ed:59:a4:7b:2d:3e:cf:5b:61:a8:f6:4b:51:a5:d6:
         be:8a:71:8c:a0:d7:78:eb:b9:b6:49:5e:b0:72:ee:9d:7a:29:
         15:62:64:d6:d9:da:33:a5:27:1a:06:13:49:83:ad:1f:56:07:
         0f:b7:f5:06:3e:b0:18:52:30:2a:28:59:99:07:d2:b6:44:14:
         48:6e:92:75:5a:1c:f3:b9:10:61:21:d4:9d:68:3e:06:24:90:
         ee:9a:7a:b1:3f:04:f4:36:d8:ae:58:28:3d:9a:06:d0:f4:22:
         fe:82:7c:dd:f7:26:5c:1a:36:d2:3a:02:4b:b1:fd:77:e0:2d:
         ce:f3:9e:03:6e:c4:c8:c7:23:32:66:49:01:fb:95:f2:1b:38:
         8e:53:47:ed:e1:fe:6f:01:1b:82:d0:66:62:f9:24:fd:b0:ee:
         be:55:95:00:19:6d:55:c6:42:2f:37:e7:44:45:b1:7b:ab:45:
         38:78:f7:fd:6b:b4:87:86:52:b8:cd:65:08:78:00:e2:c2:16:
         20:93:32:70:01:b5:d2:98:b7:ec:da:e3:d0:9d:cc:bc:7d:27:
         5a:88:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:01 2024 by rpki-client on console-ams.rpki-client.org