Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3438203d3e20323638353731.roa
File:                     323830343a353333633a3a2f33322d3438203d3e20323638353731.roa (raw, json)
Hash identifier:          g0vjTUFnBAxARxhk7sAmfZz91XXxi7Bgth3U6SI1bjY=
Subject key identifier:   74:49:A0:E3:B2:63:5B:01:81:2C:16:B7:0A:E8:71:11:90:AA:32:7D
Certificate issuer:       /CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
Certificate serial:       086E47DC0901816F9257BEC3B24869C7AF01F476
Authority key identifier: ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3438203d3e20323638353731.roa
Signing time:             Mon 05 Aug 2024 13:18:19 +0000
ROA not before:           Mon 05 Aug 2024 13:13:19 +0000
ROA not after:            Mon 04 Aug 2025 13:18:19 +0000
asID:                     268571
IP address blocks:        2804:533c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl
                          rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6e:47:dc:09:01:81:6f:92:57:be:c3:b2:48:69:c7:af:01:f4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
        Validity
            Not Before: Aug  5 13:13:19 2024 GMT
            Not After : Aug  4 13:18:19 2025 GMT
        Subject: CN=7449A0E3B2635B01812C16B70AE8711190AA327D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:0b:1b:0f:00:4f:c0:35:d5:e2:39:80:62:
                    3e:c6:d5:03:a6:c9:d9:55:fe:df:6f:c4:1c:d5:1e:
                    a8:14:46:5b:13:d8:8b:f9:06:44:57:d9:50:18:03:
                    87:eb:87:47:f5:a6:f2:be:aa:ee:3e:0a:e1:ac:83:
                    f0:13:c9:d4:c7:2b:c4:e1:1f:51:20:13:b9:c3:37:
                    a2:99:c0:e7:79:a7:c6:58:87:ed:67:65:8e:35:39:
                    2c:9e:e8:6b:37:a9:4f:c1:8c:43:80:eb:c2:0e:b1:
                    23:38:fc:e4:3f:e9:90:f7:d8:31:9e:e2:fa:1c:91:
                    c9:5a:30:7a:06:d9:45:b9:cd:12:8b:7e:d6:e8:25:
                    4c:b9:9d:47:ec:ea:a3:1a:a8:a9:5f:81:07:af:95:
                    bb:6a:bb:8f:e5:11:55:d3:d1:c1:5c:16:11:84:5a:
                    8b:14:04:56:02:a6:cd:08:5b:23:dc:ec:ed:d1:13:
                    4a:75:b7:ba:ea:0c:01:1f:77:23:f5:5c:10:2f:d9:
                    ab:b2:33:3e:45:e8:3e:96:fc:03:fe:ed:71:af:06:
                    b7:08:3e:f0:61:04:c7:de:af:f1:74:cc:1a:4e:67:
                    03:0d:a9:db:2b:07:22:b5:1b:73:d4:d2:05:44:68:
                    9d:30:5b:d0:ce:fa:e2:89:1a:0d:16:35:e4:0e:4e:
                    74:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:49:A0:E3:B2:63:5B:01:81:2C:16:B7:0A:E8:71:11:90:AA:32:7D
            X509v3 Authority Key Identifier:
                keyid:ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3438203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:533c::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:8c:59:44:bc:b2:0e:8c:7e:b4:5d:5a:35:b8:a5:2d:46:
         8c:49:02:0f:5f:78:1b:b1:9e:be:7d:a0:e6:92:c6:f1:e6:80:
         0a:87:91:90:e4:03:97:27:7c:37:ee:3f:51:da:0d:2d:3d:63:
         50:95:3c:d1:5c:bb:80:a7:e4:a7:86:6d:1d:cd:d3:20:37:c9:
         30:87:20:c2:84:0b:0b:ea:08:4f:d7:fb:28:ff:05:42:d6:3a:
         9c:21:db:17:ec:05:1e:cb:f9:08:3a:c8:32:28:50:4d:ac:7b:
         63:5c:92:33:18:c4:9a:77:42:01:19:83:31:40:61:c7:51:f5:
         42:e7:c0:d8:26:1f:1e:a2:61:27:e6:14:dc:a5:98:27:06:48:
         7d:eb:96:21:84:e3:23:55:fb:e1:2e:f0:a0:9d:73:d5:47:e9:
         40:52:2a:8f:9f:40:56:51:6f:a6:c5:7a:5b:f9:a0:32:7e:64:
         0d:2f:e8:d1:64:cd:0b:11:d1:dc:46:7a:f9:f4:10:eb:90:10:
         45:b8:71:8e:b3:69:bb:61:58:58:8c:bb:ae:c4:ec:26:e1:c9:
         dc:f7:64:5f:97:b8:8a:dd:db:a9:9e:6e:10:21:ed:32:64:df:
         3d:3b:5a:1c:51:b1:c5:8d:d6:78:fb:b7:40:85:b1:56:2e:da:
         2d:89:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:58 2024 by rpki-client on console-fra.rpki-client.org