Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33322d3332203d3e20323638303730.roa
File:                     323830343a353738383a3a2f33322d3332203d3e20323638303730.roa (raw, json)
Hash identifier:          tK0/9xOB6EtStN71rBDGsKN/sYg/WEQrTpIw0EU/XUE=
Subject key identifier:   1D:5E:96:CA:1A:0D:48:AF:60:B6:72:65:19:14:93:C6:34:25:49:80
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       6825DAC8B1E166109E6823D63AFDD4E860420E73
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33322d3332203d3e20323638303730.roa
Signing time:             Wed 03 Apr 2024 18:31:02 +0000
ROA not before:           Wed 03 Apr 2024 18:26:02 +0000
ROA not after:            Wed 02 Apr 2025 18:31:02 +0000
asID:                     268070
IP address blocks:        2804:5788::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:25:da:c8:b1:e1:66:10:9e:68:23:d6:3a:fd:d4:e8:60:42:0e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:7a:79:dd:ae:f6:3d:fc:33:80:61:5e:0d:
                    ae:f5:cf:71:41:1e:17:9c:5c:a5:80:85:8b:ed:15:
                    0c:29:f5:b4:62:0b:c7:e1:6d:36:de:85:bd:20:06:
                    54:f2:79:f1:06:12:b2:05:77:6a:09:20:44:f3:cb:
                    66:56:59:93:44:11:2b:64:d0:d9:3e:7e:92:a9:6c:
                    e8:dd:ec:ed:27:a1:78:d2:4d:4b:4a:73:4f:d4:e6:
                    09:46:4c:c2:ca:00:9e:a8:d0:f9:45:33:70:6a:74:
                    51:ec:76:4f:57:52:18:6c:05:69:84:07:92:e1:13:
                    ce:62:0b:38:b9:9e:da:cb:a7:e6:5e:81:f6:aa:14:
                    50:95:6f:55:98:08:5f:4c:d6:73:24:eb:7c:4a:63:
                    26:30:54:ff:af:8e:66:03:f9:cb:25:49:9e:f7:05:
                    ed:f3:e6:a1:bc:09:be:f2:f4:bf:ee:d0:d5:40:98:
                    d0:0c:99:7c:d1:e8:24:20:e2:4b:72:25:f8:d9:82:
                    d7:c5:69:7d:0e:56:86:22:ad:ad:44:22:1c:f6:86:
                    9e:41:af:78:84:79:42:9b:10:1f:f7:03:46:d3:ca:
                    c7:a4:80:09:fc:e7:7b:a9:50:cd:75:e1:be:0b:1c:
                    ec:88:76:97:c3:28:89:9e:ab:01:db:ee:e0:8d:9c:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5E:96:CA:1A:0D:48:AF:60:B6:72:65:19:14:93:C6:34:25:49:80
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33322d3332203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:2e:f9:12:72:4b:18:76:d2:52:f6:5b:61:3d:78:8b:45:
         80:9e:b7:28:93:54:e2:c4:13:8f:e7:44:bb:7a:91:df:ee:51:
         c2:67:5a:b9:af:0f:19:5e:8c:25:59:64:45:9f:11:17:36:b4:
         14:c7:b1:96:d2:bb:e1:2e:8e:93:c3:e5:fa:83:c4:b9:fd:91:
         f1:95:ad:24:e9:15:e6:88:03:e7:34:ae:df:95:75:db:47:07:
         1e:50:63:cd:98:31:48:c4:3d:57:a9:29:8d:af:9f:99:ff:3d:
         cf:69:52:bd:e3:e4:d0:51:ee:36:dd:74:b5:03:0b:95:38:4d:
         d1:ad:b7:d8:54:52:b5:f8:fa:e0:13:a7:5b:94:a6:fe:cb:4a:
         41:66:2b:20:15:d2:43:3d:84:78:8d:20:10:1e:1b:51:c6:6e:
         23:cb:d4:49:10:04:a5:30:99:fa:f5:08:19:14:10:b6:e6:a8:
         ba:32:18:ad:95:2b:b8:f0:64:72:26:03:2c:fc:fc:7f:3f:59:
         a0:67:61:27:c0:ff:76:b9:5a:46:8f:3f:9e:54:ea:14:e0:bf:
         57:bd:26:6e:8c:6b:c0:56:fc:59:41:a9:86:09:a2:d7:ee:d9:
         fa:26:14:54:55:8a:ef:59:12:95:f3:f3:c4:bb:4e:f9:96:f2:
         c4:e3:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:21 2024 by rpki-client on console-ams.rpki-client.org