Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
File:                     323830343a333536633a3a2f33322d3332203d3e20323636323835.roa (raw, json)
Hash identifier:          kHN1Dtn3nLrx6yF6vSyPQGZTvZ4c6iPiWiKJgAFYh2k=
Subject key identifier:   E8:6D:40:2B:BA:64:38:68:88:89:0C:42:7C:89:69:BF:72:92:E1:DD
Certificate issuer:       /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial:       6405E080B23872353D475D91F88AC84180D0834D
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
Signing time:             Wed 08 May 2024 14:59:56 +0000
ROA not before:           Wed 08 May 2024 14:54:56 +0000
ROA not after:            Wed 07 May 2025 14:59:56 +0000
asID:                     266285
IP address blocks:        2804:356c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
                          rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:05:e0:80:b2:38:72:35:3d:47:5d:91:f8:8a:c8:41:80:d0:83:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
        Validity
            Not Before: May  8 14:54:56 2024 GMT
            Not After : May  7 14:59:56 2025 GMT
        Subject: CN=E86D402BBA64386888890C427C8969BF7292E1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:da:4b:64:31:95:a6:5e:eb:08:06:a1:42:
                    af:b3:d6:85:31:45:2e:f9:58:65:ed:a1:28:b4:19:
                    87:62:6f:3f:06:c1:8f:13:25:5b:e4:96:12:fb:ea:
                    6d:2b:3e:71:dd:d7:d9:89:fb:1f:15:ae:1b:5b:b2:
                    a6:1f:0b:53:8e:f1:21:2e:37:6f:47:ee:45:66:59:
                    cb:06:54:7a:6c:67:f4:0b:84:17:b5:56:ee:d6:6a:
                    c4:de:b9:64:5f:e0:3d:6b:dd:c3:88:2e:b6:cf:57:
                    24:18:bd:79:44:1c:99:6d:fa:a8:c1:66:6a:e3:05:
                    2f:42:46:b7:10:93:67:29:60:75:08:f6:01:60:4e:
                    2a:74:10:df:db:31:29:1f:f8:8e:a1:1e:b8:a4:12:
                    b7:72:3f:eb:74:6c:9d:21:e5:66:ca:01:2e:0f:df:
                    74:10:26:24:b8:fd:d0:c6:a7:8c:c6:41:aa:ae:b7:
                    4d:62:86:c3:db:ae:05:98:45:4b:43:a5:ab:9c:4d:
                    82:ff:f6:84:ff:74:5f:a3:5a:69:2b:b5:c5:d3:d5:
                    db:5e:bf:b3:bf:bb:61:ea:de:ab:ad:b1:82:0f:66:
                    4b:ac:fc:b9:78:47:73:7a:8c:11:b8:e8:03:6d:c0:
                    a5:42:5a:4a:af:f7:e6:47:4a:18:91:15:c1:67:3a:
                    d8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6D:40:2B:BA:64:38:68:88:89:0C:42:7C:89:69:BF:72:92:E1:DD
            X509v3 Authority Key Identifier:
                keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:356c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:43:cc:0f:92:9c:67:c7:fa:26:d1:13:26:02:4c:c1:ef:4a:
         ed:ab:72:ab:59:6d:25:e5:e9:db:10:5c:c2:cb:99:47:bd:3d:
         bf:4d:60:06:80:f0:8c:b8:79:29:28:fe:f3:e7:25:92:d9:9a:
         28:cc:4b:75:e8:55:ab:d0:28:a2:ff:9c:58:bd:e1:d4:19:9b:
         39:87:e7:c7:a9:11:c9:49:74:06:f8:b6:89:d1:9b:46:b2:f4:
         32:61:83:e1:84:a3:99:01:b3:6f:7d:20:f8:e8:5f:58:27:98:
         85:21:f0:de:51:d2:36:46:38:c3:d7:86:2f:07:73:09:ca:5a:
         4c:8b:89:51:12:c5:6d:48:c3:39:7e:42:ba:e5:6c:eb:39:0d:
         cb:a4:25:39:4f:36:e3:12:12:fb:ad:73:23:69:7d:a9:74:84:
         5b:e8:63:3a:6f:cc:e5:e2:3e:a5:58:e8:3e:b0:45:5b:07:80:
         31:5a:3d:68:01:1f:7f:33:90:f9:38:a9:53:e2:74:f7:53:78:
         bf:a5:6e:4c:9f:f4:8e:09:8a:fe:07:a4:6b:26:9a:f2:aa:55:
         93:f6:75:d9:55:97:a7:e4:0b:fa:1f:f1:9b:b4:fe:da:d7:ae:
         4c:5e:64:d8:a6:67:cf:e0:e0:95:70:bb:bc:69:cd:c2:7d:fe:
         f9:a7:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:02:09 2024 by rpki-client on console-ams.rpki-client.org