Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/323830343a323965343a3a2f33322d313238203d3e20323634303432.roa
File:                     323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (raw, json)
Hash identifier:          MnDdMNbXd4GOa21t67fnct7IMtAOzx8bVsj8LWSOufY=
Subject key identifier:   87:11:58:A3:E7:0E:26:F2:38:7A:E6:2A:DF:38:16:67:E4:44:3D:4D
Certificate issuer:       /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
Certificate serial:       62CA6F4254A80EAFD1DD6FFEBFFD681885246AAB
Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/323830343a323965343a3a2f33322d313238203d3e20323634303432.roa
Signing time:             Thu 04 Apr 2024 14:58:27 +0000
ROA not before:           Thu 04 Apr 2024 14:53:27 +0000
ROA not after:            Thu 03 Apr 2025 14:58:27 +0000
asID:                     264042
IP address blocks:        2804:29e4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ca:6f:42:54:a8:0e:af:d1:dd:6f:fe:bf:fd:68:18:85:24:6a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
        Validity
            Not Before: Apr  4 14:53:27 2024 GMT
            Not After : Apr  3 14:58:27 2025 GMT
        Subject: CN=871158A3E70E26F2387AE62ADF381667E4443D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:85:7d:ca:3e:24:dd:12:8b:8e:e7:2a:80:d5:
                    f5:26:4a:3a:7b:44:44:15:9e:cd:f7:18:2d:71:c9:
                    f6:f6:e9:82:10:43:1c:ed:46:e1:4f:3d:6e:cc:76:
                    26:72:1f:4b:3f:64:c0:e6:8a:75:3c:8a:b4:31:8c:
                    d0:14:38:8b:db:54:9d:7b:26:9e:0c:a0:57:30:02:
                    79:05:c4:34:06:a5:13:ed:61:c8:2b:29:c2:d6:6b:
                    45:13:44:25:13:cc:a5:ac:98:4d:5c:be:b1:59:16:
                    1b:bc:9e:31:0d:e9:5f:82:26:ea:18:ee:5c:41:58:
                    3f:33:01:66:a7:fc:ff:8c:ce:20:f8:73:18:b6:9f:
                    82:32:06:02:5e:c5:f2:16:74:e2:4e:42:c3:35:a8:
                    8b:12:48:ed:b2:17:15:d4:58:cd:ed:ec:5a:fd:7b:
                    f5:dd:8e:d6:74:34:b3:21:14:e1:ee:b8:0b:ab:73:
                    19:c7:81:53:b1:22:42:ef:58:68:69:46:4d:14:8d:
                    a7:33:f3:a3:5a:fc:f8:ac:04:bd:83:6f:73:e8:54:
                    9c:91:82:5f:57:76:ba:97:0f:8c:fa:f1:c2:02:a2:
                    5e:56:e1:b0:66:93:5e:c9:20:f6:51:07:62:cc:1f:
                    9c:47:21:4d:44:ea:c5:8c:ff:c7:00:24:d8:a8:7d:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:11:58:A3:E7:0E:26:F2:38:7A:E6:2A:DF:38:16:67:E4:44:3D:4D
            X509v3 Authority Key Identifier:
                keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/323830343a323965343a3a2f33322d313238203d3e20323634303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:ec:35:50:ea:e6:9d:53:2b:95:43:af:6c:8a:0e:fc:20:
         a1:9f:08:0f:bd:24:60:cc:2b:d7:8d:68:ed:19:9f:7b:74:15:
         e5:88:ae:69:42:b0:b9:3f:1d:9d:f2:1d:4e:9b:a7:f0:c2:27:
         48:9b:03:5e:a9:95:a0:6a:dd:fc:5b:3b:df:94:01:7f:22:25:
         32:1b:c4:18:34:73:8a:4d:99:98:ea:b9:ba:b4:29:4b:38:63:
         2c:04:4e:f8:e7:70:0e:c4:97:04:96:66:f7:38:7c:95:4e:b7:
         9c:76:fc:cf:51:c2:1d:1b:e5:1a:66:bb:a2:b8:b7:c5:33:a3:
         fc:49:9c:79:ed:be:fd:cf:8f:58:a1:34:80:01:61:25:36:d4:
         ce:71:2e:80:a5:2d:0b:0f:d6:18:99:ec:82:5c:94:0b:8f:de:
         27:23:3d:51:7e:2a:c4:bb:ab:cc:9f:a0:55:eb:44:76:6a:8d:
         3c:9e:ab:cb:a0:5b:86:e9:5e:c9:c2:6e:f4:62:bd:1b:a9:b2:
         35:11:93:28:f3:fc:a0:42:9c:c7:7d:81:49:eb:aa:fa:bb:d3:
         cf:2d:2d:ab:22:2c:e0:1e:15:b7:55:24:8d:10:e8:f7:f7:6c:
         dd:45:e1:74:2c:cf:bb:34:08:7d:c4:e4:44:3a:7a:4f:ba:4c:
         1d:df:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org