Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3332203d3e203238313238.roa
File:                     323830343a333435383a3a2f33322d3332203d3e203238313238.roa (raw, json)
Hash identifier:          n+PB56DCnsqq0abWzFX9UP5rfPJcPRywfZMjjziMGVM=
Subject key identifier:   F5:62:97:0A:EE:CF:54:1E:91:9E:4A:67:0A:67:36:4E:82:7C:8C:EF
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       72D3473382A6F189670F26B451669C44BA186367
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3332203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:06:48 +0000
ROA not before:           Tue 20 Aug 2024 18:01:48 +0000
ROA not after:            Tue 19 Aug 2025 18:06:48 +0000
asID:                     28128
IP address blocks:        2804:3458::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d3:47:33:82:a6:f1:89:67:0f:26:b4:51:66:9c:44:ba:18:63:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:01:48 2024 GMT
            Not After : Aug 19 18:06:48 2025 GMT
        Subject: CN=F562970AEECF541E919E4A670A67364E827C8CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:f8:64:e0:89:77:07:44:bd:fd:7f:a7:8d:
                    de:09:f7:b5:af:14:54:6c:3c:a0:84:ad:2f:2f:10:
                    87:8d:26:17:ef:c5:29:f5:38:b2:83:35:14:93:2a:
                    11:d3:a9:17:56:a0:17:4c:44:57:8e:05:5b:64:fb:
                    e2:d2:65:b9:ef:a2:c2:b6:ac:04:31:3a:e9:3a:ac:
                    03:d1:b2:26:1a:b2:8b:f3:89:d1:cf:6a:91:76:5f:
                    fd:32:24:a9:4b:ba:66:7d:91:73:e7:6a:e5:50:c9:
                    16:9c:b9:a2:33:7a:3d:3c:b0:a7:ea:3c:6e:1c:99:
                    ac:1c:d5:d0:ce:54:5b:89:0e:56:7d:b2:7a:6a:5b:
                    8a:64:4e:58:96:eb:22:9e:dd:44:ee:34:71:21:af:
                    e3:e6:38:00:37:8e:02:6d:27:f1:f1:4e:f9:14:97:
                    6e:0b:0b:ac:d1:69:4d:5c:30:0f:f1:76:4b:b2:ca:
                    14:3e:bc:d8:9f:77:61:5f:8c:db:5d:e5:80:c2:65:
                    64:39:d7:28:67:ce:94:70:3f:58:8e:f2:b2:fa:52:
                    f9:b0:b1:de:21:a0:13:9a:a4:4d:5b:c8:05:fe:1c:
                    da:ec:66:0c:20:3d:19:88:38:14:ba:14:bb:2e:24:
                    bb:e6:34:a1:75:8f:39:ab:07:bb:3c:f8:20:e7:e3:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:62:97:0A:EE:CF:54:1E:91:9E:4A:67:0A:67:36:4E:82:7C:8C:EF
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a3a2f33322d3332203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3458::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:95:2c:2f:66:f1:e1:73:98:f7:ab:d0:0d:1a:9b:36:73:
         66:8c:de:ee:67:c0:cc:8d:45:aa:f3:96:21:15:a6:17:64:23:
         18:24:6d:0b:bc:1c:bf:25:44:22:26:77:40:ec:c9:bf:34:fe:
         4e:01:82:d8:81:6d:2e:b4:c7:9c:98:e6:cc:89:7c:a0:8c:23:
         a1:03:8c:a9:3f:2e:cf:73:0c:6f:b6:f9:01:a9:1e:55:e3:1e:
         f4:cd:dc:4f:00:08:35:e9:80:34:3c:38:cf:36:de:ee:51:a0:
         12:d5:5a:79:ad:ee:9c:10:14:d6:97:a0:72:c4:b7:91:9f:10:
         0d:26:c3:8e:01:74:64:93:e7:70:77:63:34:69:57:3d:4d:02:
         9d:c1:96:f4:1d:bf:4d:c8:6f:55:82:f1:89:5c:a1:f4:8f:56:
         5d:b5:1e:f5:03:e3:72:89:05:69:b4:0c:42:9e:ae:61:fd:ec:
         af:6f:6a:6b:3e:3b:2b:48:1d:3f:9f:ad:c4:f2:f5:80:b3:81:
         9a:2f:d8:c5:a3:d5:0b:da:73:f2:24:8d:75:df:bf:93:07:50:
         34:47:ac:80:bd:f0:85:4b:93:9f:a7:db:11:cc:a0:e1:69:49:
         ee:20:2f:36:a6:e4:e2:da:b4:45:f8:a7:50:2f:e4:36:45:cb:
         5d:02:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:13 2024 by rpki-client on console-fra.rpki-client.org