Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
File:                     323830343a353734633a3a2f33322d3332203d3e20323638303537.roa (raw, json)
Hash identifier:          J6WYtTfB3gh14477jIKUAbUTifngqlRdD7VbdHtfcuk=
Subject key identifier:   E4:25:68:92:0F:9F:E8:BB:7F:FF:A5:55:D8:6D:D7:B7:58:AD:22:B4
Certificate issuer:       /CN=A22397E95F2C96E43716EC7A998DB69418401B55
Certificate serial:       5C0D3BF9580522C5AB89A2C79D22CA44459EEB9D
Authority key identifier: A2:23:97:E9:5F:2C:96:E4:37:16:EC:7A:99:8D:B6:94:18:40:1B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22397E95F2C96E43716EC7A998DB69418401B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
Signing time:             Thu 27 Jun 2024 18:35:14 +0000
ROA not before:           Thu 27 Jun 2024 18:30:14 +0000
ROA not after:            Thu 26 Jun 2025 18:35:14 +0000
asID:                     268057
IP address blocks:        2804:574c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/A22397E95F2C96E43716EC7A998DB69418401B55.crl
                          rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/A22397E95F2C96E43716EC7A998DB69418401B55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22397E95F2C96E43716EC7A998DB69418401B55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0d:3b:f9:58:05:22:c5:ab:89:a2:c7:9d:22:ca:44:45:9e:eb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A22397E95F2C96E43716EC7A998DB69418401B55
        Validity
            Not Before: Jun 27 18:30:14 2024 GMT
            Not After : Jun 26 18:35:14 2025 GMT
        Subject: CN=E42568920F9FE8BB7FFFA555D86DD7B758AD22B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:93:04:c5:e3:10:a9:37:db:e2:90:33:f1:
                    a2:a6:da:c7:fc:07:e4:b1:b8:ad:a2:90:d4:94:13:
                    07:e2:f8:06:f2:ef:8f:1e:2e:1a:d9:41:b5:b4:d8:
                    b6:da:fb:70:d5:eb:18:ea:51:9a:d4:85:e6:84:78:
                    9b:2a:6b:c7:c2:09:67:73:60:99:6a:86:b6:97:26:
                    a4:85:51:0a:43:07:ff:42:22:44:e5:f0:71:69:1c:
                    c7:3e:e2:e7:29:dd:d0:ac:7f:7d:7b:73:4c:88:1a:
                    5b:1b:c5:cd:c6:4b:41:76:00:fb:a6:bc:84:14:94:
                    07:74:43:38:04:6e:26:b6:87:56:5a:0f:fe:0f:f0:
                    3a:65:a6:c0:81:b7:b2:0c:e4:3f:a6:f1:cd:9d:f7:
                    f4:c7:e6:c1:0a:98:04:75:cf:2e:72:9a:db:b3:28:
                    9b:52:23:21:ff:f0:fe:70:66:6f:5a:3f:1b:f6:86:
                    e5:93:56:95:3a:46:38:23:2f:6d:06:da:11:f9:0b:
                    fb:fc:1a:6a:07:14:45:e9:5d:51:14:6e:52:87:fc:
                    66:a8:67:cf:f4:08:f1:65:0f:b6:d5:7d:3e:51:79:
                    dd:68:e4:90:7b:64:20:fd:c0:b4:fc:49:33:ae:f9:
                    0e:66:55:1e:dd:30:87:24:c1:3c:86:ab:63:29:84:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:25:68:92:0F:9F:E8:BB:7F:FF:A5:55:D8:6D:D7:B7:58:AD:22:B4
            X509v3 Authority Key Identifier:
                keyid:A2:23:97:E9:5F:2C:96:E4:37:16:EC:7A:99:8D:B6:94:18:40:1B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/A22397E95F2C96E43716EC7A998DB69418401B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22397E95F2C96E43716EC7A998DB69418401B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574c::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:bd:fd:1b:32:8b:b8:e2:84:6e:38:a4:42:d3:f1:72:04:
         5d:bb:ab:cf:be:f5:ca:32:1e:3f:9a:c8:4f:fe:80:e4:14:aa:
         26:0d:06:a1:de:98:6f:e1:c5:2d:0d:94:82:77:55:c6:12:1a:
         a0:bd:e8:85:6f:8c:89:22:31:cb:b8:42:e3:78:ad:3b:20:17:
         44:bb:b6:b4:14:db:95:2b:20:e7:f4:e3:8e:25:6b:e5:ed:88:
         2c:44:cd:00:e9:a1:07:6f:c9:c3:91:44:84:48:6d:4a:e0:9d:
         67:ae:32:8b:2a:58:c9:b0:b3:58:38:f0:6f:f2:1c:c5:aa:14:
         e1:68:fa:b2:cd:05:30:0f:a8:45:8c:89:8f:45:fb:86:79:be:
         a2:6b:b4:87:8d:80:f7:96:d1:73:88:9d:86:ba:52:dd:03:96:
         82:96:b6:81:86:a0:a8:ee:2f:0c:0e:52:5c:b9:40:07:e3:1c:
         f9:65:de:5b:8f:0f:0a:61:3b:1b:4d:17:80:94:b6:54:59:f4:
         26:d6:da:d3:54:37:fe:e4:c4:11:d2:d0:5b:ca:13:3d:ff:b9:
         87:f5:f5:66:c5:bc:47:30:73:56:49:25:fa:c9:4a:59:d2:01:
         7d:46:d3:18:56:8a:b4:0b:8c:bc:84:e5:b6:e6:40:bc:80:c8:
         f3:27:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:45 2024 by rpki-client on console-fra.rpki-client.org