Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a343030303a3a2f33342d3334203d3e20323730333635.roa
File:                     323830343a366165383a343030303a3a2f33342d3334203d3e20323730333635.roa (raw, json)
Hash identifier:          lFaIc2O8m+leFrNpToMWKlbkHtP9JmYgV1JWnwJlAU4=
Subject key identifier:   CB:2A:7A:99:5F:74:FF:36:E5:D3:C2:EA:C8:E3:56:6C:93:81:47:80
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       29121C6EABFD111C14CFB2DC0BE8A387189747FA
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a343030303a3a2f33342d3334203d3e20323730333635.roa
Signing time:             Thu 04 Apr 2024 06:42:24 +0000
ROA not before:           Thu 04 Apr 2024 06:37:24 +0000
ROA not after:            Thu 03 Apr 2025 06:42:24 +0000
asID:                     270365
IP address blocks:        2804:6ae8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:12:1c:6e:ab:fd:11:1c:14:cf:b2:dc:0b:e8:a3:87:18:97:47:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Apr  4 06:37:24 2024 GMT
            Not After : Apr  3 06:42:24 2025 GMT
        Subject: CN=CB2A7A995F74FF36E5D3C2EAC8E3566C93814780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:49:8d:b4:11:a9:84:6f:5b:34:f0:09:50:
                    a8:c8:a6:74:d6:e1:49:a1:4b:94:30:04:48:91:43:
                    2c:63:bb:81:1b:1a:d8:d0:9a:40:7e:66:c3:eb:92:
                    64:bc:f2:c6:a6:c6:94:7a:4c:5f:14:f9:b3:58:db:
                    62:db:d4:24:94:2d:28:d3:df:6e:f4:6c:c2:72:44:
                    9b:40:ff:ea:e4:6b:4e:a4:0a:ca:07:ec:42:a1:36:
                    17:58:56:1f:77:d0:3d:a6:8a:70:e0:c3:1e:18:99:
                    81:63:9d:cd:47:c0:2c:8f:49:42:80:1a:67:1b:bb:
                    d0:44:a0:29:a1:ed:8d:c2:a7:7c:3a:01:3c:9a:cc:
                    56:89:c1:ed:37:da:41:0a:b7:5b:a7:4b:58:3f:39:
                    8a:38:ee:7c:ef:d7:53:39:04:d3:38:6b:a2:80:13:
                    a5:61:ca:4c:c6:8b:eb:f3:5d:6f:ab:3f:49:70:f5:
                    e1:04:a7:13:20:02:91:1c:f9:9f:c1:a6:8b:8f:45:
                    73:1b:73:ea:a8:c8:d7:bc:c5:fb:9b:ad:9d:a9:e6:
                    d9:78:38:e1:05:a7:cb:cf:f8:1e:85:1c:b5:55:0a:
                    6e:27:57:fb:75:50:38:51:68:e4:4f:f1:0f:ec:02:
                    df:c0:76:4a:24:e7:b2:c9:0f:a1:70:bb:6d:1a:13:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2A:7A:99:5F:74:FF:36:E5:D3:C2:EA:C8:E3:56:6C:93:81:47:80
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a343030303a3a2f33342d3334203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:a0:5f:1c:64:99:61:5b:0c:fc:4e:6b:17:c2:21:cc:3f:57:
         5e:f3:fb:05:8b:9a:9b:4a:86:d3:1b:cc:26:4b:1c:60:d2:05:
         d3:4c:2e:0a:6c:93:56:50:a8:d6:77:f7:48:9f:ca:15:cd:75:
         ca:91:d1:da:1f:40:f7:a5:85:85:b5:35:c8:a2:67:ac:1e:4b:
         ab:19:86:33:94:1e:8d:13:9f:5c:aa:c2:13:e9:7f:37:41:51:
         98:f9:cf:e1:71:19:39:2f:65:ff:5f:52:76:99:1f:7b:e1:37:
         6b:6e:b2:6b:8c:5e:03:a0:85:fd:24:f4:08:f5:64:d0:96:aa:
         76:0f:d7:26:8c:2a:56:a3:88:f3:11:6d:7f:e3:bc:49:13:78:
         2a:c2:f2:a3:be:ab:a0:67:47:67:fe:39:03:ef:5a:a8:61:d9:
         16:7f:1f:97:34:d6:8c:15:63:3a:24:fb:ed:fa:c6:14:cd:51:
         0b:51:b7:4f:b9:28:9b:82:7b:88:af:0d:20:3b:4d:bd:22:cc:
         fc:b3:25:38:14:69:32:cc:b7:43:4d:db:a4:ea:70:d8:60:fd:
         e5:54:9c:72:40:d7:43:51:a5:b4:1e:7d:9a:55:3c:9b:ea:0b:
         df:ad:c7:24:36:db:05:e7:9d:e9:a3:95:3f:c3:d0:b6:b0:9a:
         ce:f1:7e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:13 2024 by rpki-client on console-fra.rpki-client.org