Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          P+0ECxA9zN9dM7gHJh+Ge2ppNR7IrilfAPeqQxg8ISU=
Subject key identifier:   FB:93:03:81:73:D9:A0:7F:CA:90:70:2D:6A:75:B8:FC:00:DA:31:03
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       231F49A504E170F8C87A98E3D6E5B93FFB593552
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Wed 03 Apr 2024 18:31:02 +0000
ROA not before:           Wed 03 Apr 2024 18:26:02 +0000
ROA not after:            Wed 02 Apr 2025 18:31:02 +0000
asID:                     268070
IP address blocks:        2804:5788:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1f:49:a5:04:e1:70:f8:c8:7a:98:e3:d6:e5:b9:3f:fb:59:35:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:3a:2f:e1:56:68:ef:46:88:f5:63:24:89:
                    f1:65:14:85:39:53:33:7b:53:92:55:6a:ee:57:12:
                    6c:58:38:88:e4:01:d8:77:84:08:25:cb:61:dc:ef:
                    3f:14:06:0a:99:ae:3f:ea:5f:15:b3:4e:ab:f0:7a:
                    8b:c3:c2:26:de:1f:a5:54:70:15:e2:8c:5a:d7:e0:
                    39:ae:06:31:74:c2:3d:79:ae:3d:90:4d:b0:9f:12:
                    12:33:72:8f:ab:a2:97:fe:78:7c:0d:6f:64:55:2b:
                    5a:79:67:d0:3d:01:9f:46:b2:8d:6b:be:8b:b0:9c:
                    98:8a:70:af:82:0a:bc:0e:45:7b:84:c0:fe:d1:4f:
                    b2:17:eb:2e:5c:64:65:d3:38:dc:20:b5:5c:c1:b6:
                    6c:f5:03:4f:bc:d1:b5:cf:43:49:da:30:e9:2e:ef:
                    f5:75:09:a4:df:f2:16:5f:8b:b1:b1:42:0a:af:bc:
                    f5:5a:54:59:67:b4:09:e9:69:9a:d4:8c:72:69:fe:
                    f1:b6:76:b8:b1:8e:4f:cd:66:0a:30:8e:20:a7:2a:
                    49:be:3e:0a:25:ab:4c:86:57:15:32:c1:80:c9:ea:
                    53:24:c2:a6:d4:d2:f5:b2:e6:cc:98:a9:7b:72:1e:
                    58:bd:c3:84:14:2d:dd:b7:64:ac:59:d5:c6:17:17:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:93:03:81:73:D9:A0:7F:CA:90:70:2D:6A:75:B8:FC:00:DA:31:03
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:89:b2:c0:6b:ff:e0:f2:88:cf:cd:5a:6f:b9:40:84:2e:17:
         40:ac:82:d5:8c:1c:ad:bc:6d:a3:76:d2:b8:97:38:dd:8f:ef:
         f9:c9:ad:65:dc:4a:9e:f5:06:a9:04:cd:04:b9:82:b7:a4:b6:
         f6:05:c1:46:3f:4f:b8:a2:ee:5b:fd:95:4e:2b:6f:54:d4:e8:
         d8:46:ab:dc:92:74:a7:af:02:f9:5f:08:1b:0e:56:69:a0:93:
         69:b1:8e:eb:f5:a5:ab:a5:8d:f6:ca:b0:b0:53:1a:97:d5:ea:
         ad:1b:b2:c5:49:ab:7a:13:1c:60:aa:a9:39:3c:bd:21:61:96:
         49:63:66:05:eb:54:0e:c9:34:ac:e5:d7:d3:d6:6a:50:39:c3:
         fb:14:84:6e:67:95:a3:07:a6:c5:fd:c3:54:56:c9:68:25:3e:
         90:cf:09:5b:93:b3:0b:0f:d3:89:49:c9:e7:18:45:b6:4e:ba:
         c7:70:8f:1b:01:f7:19:72:01:2a:39:49:5c:53:54:a8:6f:93:
         da:76:ae:2b:ec:8f:6d:d0:cb:cc:28:7d:5d:93:f4:3c:a0:21:
         25:c4:8d:8b:9b:50:79:75:31:d0:8c:92:e0:9c:94:23:b8:1d:
         c3:97:07:8d:9b:bb:b3:50:59:36:e5:04:02:8e:06:4c:1e:ea:
         79:05:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:08 2024 by rpki-client on console-fra.rpki-client.org