Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          PlbrpyooyIUD3OPDoa96S2bSbDL6v99hGb4iQdb6mhA=
Subject key identifier:   93:97:84:3F:47:63:69:39:2F:C9:C8:02:75:2D:15:64:AE:EE:27:52
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       7D98AD45D2F324515EB2ECB1789837A6360A3CC8
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Wed 03 Apr 2024 18:31:02 +0000
ROA not before:           Wed 03 Apr 2024 18:26:02 +0000
ROA not after:            Wed 02 Apr 2025 18:31:02 +0000
asID:                     268070
IP address blocks:        2804:5788:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:98:ad:45:d2:f3:24:51:5e:b2:ec:b1:78:98:37:a6:36:0a:3c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:98:82:6f:26:c6:e4:7f:4c:e9:69:fc:ef:1d:
                    ff:28:b6:a7:ff:50:a6:90:94:a5:a0:c2:6e:08:4f:
                    d8:ec:9c:93:bb:ae:58:1e:9f:75:76:36:10:d5:47:
                    bc:4a:4b:03:86:22:bf:f6:ee:cb:5f:cc:4e:a1:b4:
                    5b:b5:bd:e6:b3:ab:6a:b4:4c:d7:90:c9:13:35:f0:
                    f9:e1:3c:10:f5:e1:a4:6f:18:f4:ac:69:c4:f9:c4:
                    7e:5a:23:4f:83:25:e8:18:31:6a:fd:32:2e:ba:8b:
                    31:10:03:f1:7e:ef:51:bf:db:63:6a:08:6b:56:b7:
                    66:15:b8:26:da:9c:38:a0:52:b1:c2:5d:21:5c:46:
                    f7:77:de:1a:d0:6a:b7:66:56:9b:67:f8:18:64:8f:
                    81:3a:1c:52:76:04:fe:af:a6:7c:ae:e9:a0:77:c8:
                    d6:12:67:5c:8f:b2:4c:dd:23:45:f8:99:d1:fc:a4:
                    96:fb:7c:59:b9:0f:73:e3:05:b6:f1:bb:af:b7:70:
                    48:16:d8:e7:c3:39:92:30:dc:82:b7:34:70:41:65:
                    36:0f:e3:6d:18:ba:65:35:07:f8:7b:6d:1a:32:f8:
                    af:eb:7c:3f:e5:03:4c:9d:1c:f3:98:94:18:7d:1b:
                    db:37:17:cd:f6:27:06:7e:41:50:c0:9e:f1:84:7b:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:84:3F:47:63:69:39:2F:C9:C8:02:75:2D:15:64:AE:EE:27:52
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:e9:b5:42:de:15:76:0d:95:ca:18:e1:fe:fe:50:f2:90:
         93:5c:03:8e:79:70:c5:76:df:4c:b4:65:91:d3:c4:28:46:64:
         42:2b:3d:28:e9:eb:6d:75:85:31:29:50:38:b8:d0:43:e2:83:
         36:9a:52:6e:43:27:34:64:38:a3:6d:06:31:6d:11:bd:60:bd:
         d7:3d:1a:71:60:93:96:45:b5:89:3d:87:19:06:2a:ea:55:a7:
         94:28:7a:07:94:08:35:82:52:8a:98:51:25:5b:84:1e:f8:ad:
         a0:0d:41:a7:94:2b:56:9d:72:48:86:60:72:dd:c4:83:7d:a9:
         6a:cd:4d:6f:ac:ff:43:46:12:8d:46:29:7f:93:36:71:a1:6e:
         24:5f:92:8b:c3:f9:ec:f8:28:c2:20:45:91:c8:b6:74:e9:1e:
         b4:c7:ac:f3:e9:fa:f7:4f:bd:de:c2:f2:2d:b7:36:02:63:d1:
         ca:e5:da:30:6d:9c:1a:11:ba:b9:35:a5:fe:60:aa:e9:a7:ee:
         57:ad:4c:83:4a:be:59:de:fa:bc:46:02:83:b4:f6:bc:05:33:
         ce:7d:6e:24:3b:00:a0:42:e0:47:53:b0:e5:9f:04:2c:ad:db:
         91:eb:8e:2c:2b:92:ae:89:8b:98:43:b3:e2:c3:93:63:44:4f:
         7f:32:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org