Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
File:                     323830343a336539343a3a2f33332d3338203d3e20323636363037.roa (raw, json)
Hash identifier:          oAYDl2zgracAtH8dYvgG6gqeq5Q6/+KBz3Z1IIx61L0=
Subject key identifier:   9C:83:61:A7:33:BC:E8:42:64:A3:34:23:0B:BC:12:33:65:22:5F:33
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       0261851D9F65C270742D097BD57B9CE19B09D34C
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
Signing time:             Wed 03 Apr 2024 21:27:05 +0000
ROA not before:           Wed 03 Apr 2024 21:22:05 +0000
ROA not after:            Wed 02 Apr 2025 21:27:05 +0000
asID:                     266607
IP address blocks:        2804:3e94::/33 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl
                          rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:61:85:1d:9f:65:c2:70:74:2d:09:7b:d5:7b:9c:e1:9b:09:d3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Apr  3 21:22:05 2024 GMT
            Not After : Apr  2 21:27:05 2025 GMT
        Subject: CN=9C8361A733BCE84264A334230BBC123365225F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:32:9d:bc:19:11:cc:d5:eb:7c:a0:ec:29:
                    ba:a5:f5:14:21:34:73:59:cc:94:7e:82:e3:84:3f:
                    cf:fd:e3:cb:44:d8:b5:a3:8b:94:35:d0:c7:94:66:
                    b5:4b:0e:75:eb:a7:78:52:b0:bd:da:4b:58:3b:97:
                    8d:a5:0e:66:bc:32:bd:2f:75:a7:ab:b1:50:d6:58:
                    f3:4d:5d:bd:cf:93:75:41:44:a9:70:e7:10:29:63:
                    7e:b3:73:bd:d6:b6:2c:8d:cf:f2:33:a3:70:cc:a2:
                    cc:14:fc:a0:18:5c:3c:51:1c:9f:ce:80:1d:82:2e:
                    f4:ee:94:6d:22:9b:a0:e8:c3:29:cd:96:4a:1c:ca:
                    88:54:7b:34:38:db:2f:54:9a:5c:46:31:38:77:f0:
                    99:f4:4c:58:bd:2e:c3:bf:e3:cc:e3:df:dd:e3:63:
                    aa:1d:ae:62:7b:a7:5b:10:09:77:de:c4:22:7e:e3:
                    e0:f5:79:6d:72:45:ba:95:8a:06:69:44:08:bd:8a:
                    ea:11:c5:35:07:32:77:af:cd:86:9b:97:60:df:7d:
                    0c:bd:82:1c:26:b7:ad:1b:cc:6c:9b:95:a5:43:1e:
                    bd:6e:78:ac:16:50:d4:86:d5:c1:a0:cc:5f:98:a9:
                    7e:13:65:52:63:db:01:4c:26:1d:99:da:8b:b5:ec:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:83:61:A7:33:BC:E8:42:64:A3:34:23:0B:BC:12:33:65:22:5F:33
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e94::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:1c:ae:01:f1:32:be:b8:43:1f:94:72:59:e3:cb:89:a1:
         ff:a8:38:72:ff:27:02:a8:ee:1b:e7:8c:28:f9:f2:a0:18:88:
         a6:87:d7:6f:41:f8:4b:45:71:d0:72:26:a1:89:27:25:65:86:
         93:ef:da:bd:37:f7:66:db:9b:b3:5f:a2:e8:a0:f6:32:3c:6b:
         1c:1c:40:29:3c:a6:cf:86:59:68:75:2b:84:72:ba:a7:5b:0a:
         6b:7c:38:9a:28:e7:66:9b:1c:8a:c2:a9:8d:a6:9e:14:39:ac:
         3b:b3:d3:7f:27:aa:a5:11:c2:bd:72:21:e3:33:68:0a:ed:f8:
         8c:54:2c:a7:72:58:86:43:fb:88:1e:31:80:d5:ee:7f:6b:3e:
         e9:6f:14:00:4a:25:76:8b:59:24:47:d9:a8:ba:20:d1:fa:07:
         fa:2d:e0:7c:d3:92:3e:9b:c0:db:47:9c:36:8f:4f:75:01:0d:
         7a:13:8d:22:f7:e9:ac:d9:f9:1f:a0:b2:bd:99:33:aa:78:68:
         58:c0:f7:f6:a3:49:ea:4b:f7:33:7b:c7:9f:d7:55:e3:de:dd:
         1a:2a:f5:da:b9:c4:14:18:b5:96:41:3c:f7:7c:0e:9e:87:67:
         f0:c9:92:6b:0d:35:44:cb:99:f2:88:87:69:62:d2:80:3d:df:
         11:bc:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org