Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          lEtTyfTDUiloOQH6pBz+CRZEX6m+cgDSbD+fexlrQpA=
Subject key identifier:   FF:F7:07:BA:53:AD:62:E5:60:87:65:97:2E:2F:DD:3B:2C:DC:4D:5E
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       3B9E053CB880DA02380EF280EFAE8D84C121E103
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Wed 03 Apr 2024 18:31:03 +0000
ROA not before:           Wed 03 Apr 2024 18:26:03 +0000
ROA not after:            Wed 02 Apr 2025 18:31:03 +0000
asID:                     268070
IP address blocks:        2804:5788:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9e:05:3c:b8:80:da:02:38:0e:f2:80:ef:ae:8d:84:c1:21:e1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Apr  3 18:26:03 2024 GMT
            Not After : Apr  2 18:31:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:94:d9:18:72:7f:ab:b7:cb:99:09:da:d1:
                    d6:f8:52:8b:2b:db:b7:29:a3:da:3c:13:85:f5:c6:
                    49:c8:be:72:3d:17:91:6e:58:f3:b6:8f:46:e5:80:
                    3c:4f:6b:03:43:00:5e:5e:04:b7:59:0e:0c:d4:cf:
                    b2:40:00:2a:80:05:40:f8:36:48:e7:7a:07:d8:8a:
                    94:21:bd:26:c0:b7:67:45:9c:d9:4a:94:7c:d2:d2:
                    aa:49:15:24:bf:e8:26:80:f9:50:a9:a7:e4:5f:4b:
                    16:22:d3:21:2e:aa:98:12:d3:8c:4e:43:5c:3e:f6:
                    2d:7b:da:16:49:cb:a3:ab:06:7c:2a:09:46:63:2c:
                    d8:5b:ae:01:aa:2b:f5:2f:60:87:8b:03:83:ef:bf:
                    dd:38:57:01:b0:6f:62:1e:35:0c:59:fd:cb:9e:63:
                    2e:bf:95:f3:cc:00:fb:bb:9c:35:db:30:a3:48:ab:
                    cc:cc:a3:48:65:20:30:c7:b6:c0:9c:fe:d6:c5:fd:
                    8d:16:6b:89:94:37:3d:16:3d:87:47:f5:87:ec:b3:
                    04:c2:44:2a:c1:a0:a9:8a:ad:2d:5c:d3:10:9a:97:
                    8b:85:cc:c2:9a:56:5a:88:60:b5:68:9e:32:5d:41:
                    18:08:41:c8:a2:6a:d0:23:fd:95:7b:1a:5d:c6:0a:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F7:07:BA:53:AD:62:E5:60:87:65:97:2E:2F:DD:3B:2C:DC:4D:5E
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:83:2e:98:7a:f1:7f:86:c7:80:d2:a2:72:c2:38:4b:18:
         3c:c5:47:44:59:2d:29:2c:06:d7:05:2c:28:73:22:77:48:b0:
         14:08:71:51:be:b2:04:da:47:21:54:96:ab:ac:47:12:90:31:
         9d:4c:14:45:a3:c5:91:bd:ff:3b:d5:4b:a7:9f:98:e0:b4:de:
         4b:6c:73:9a:53:09:19:2c:47:95:7b:50:3e:4b:d3:e8:76:ba:
         ea:04:6e:b3:64:22:0d:be:da:57:57:81:af:2f:77:d9:53:e2:
         c6:f1:49:30:9c:61:df:8d:f0:8d:16:8e:f9:b5:4a:16:56:5b:
         c1:a5:76:f5:57:ff:9c:e1:b8:91:d4:70:ec:57:53:a5:9b:f9:
         83:ad:32:1d:e2:d0:7c:af:4a:42:10:01:9f:fc:b7:40:5d:ab:
         a7:b9:99:d4:b8:cc:46:63:a8:20:ba:2e:b5:48:a9:ca:53:ad:
         ab:8e:74:1a:0f:ee:5c:d2:a1:13:c0:e7:69:2e:5a:00:9b:23:
         d3:1a:ec:4c:2a:15:e1:c9:fb:3e:1e:9c:49:d5:e5:b1:43:03:
         09:9a:65:27:e9:1a:c9:89:89:8a:ac:ff:4c:b8:31:1e:2b:3b:
         a8:24:10:41:f3:e0:a4:ca:05:13:27:e7:d8:cc:2d:dd:50:22:
         1c:61:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:18 2024 by rpki-client on console-ams.rpki-client.org