Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343030303a3a2f33342d3334203d3e20323638383538.roa
File:                     323830343a356239633a343030303a3a2f33342d3334203d3e20323638383538.roa (raw, json)
Hash identifier:          7eyKBwH2SR2OignjJVcPTJZ7o7prD5u7SnPzMwEeR00=
Subject key identifier:   5D:B3:4B:D3:AF:E7:4C:9C:FB:D2:8A:94:7A:B8:F9:2B:00:BC:6A:EE
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       665E1F771AAE190E16944B169583D6AAEC953BE0
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343030303a3a2f33342d3334203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:02 +0000
ROA not before:           Tue 03 Sep 2024 12:28:02 +0000
ROA not after:            Tue 02 Sep 2025 12:33:02 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:1f:77:1a:ae:19:0e:16:94:4b:16:95:83:d6:aa:ec:95:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:02 2024 GMT
            Not After : Sep  2 12:33:02 2025 GMT
        Subject: CN=5DB34BD3AFE74C9CFBD28A947AB8F92B00BC6AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:d5:29:50:89:33:22:d2:ad:ba:a6:54:64:
                    48:98:06:b9:d8:98:6f:13:ab:91:55:69:23:e6:31:
                    d9:29:45:1b:bd:07:1d:fa:7a:a6:20:8c:6c:6b:32:
                    50:3f:4a:9f:62:4b:05:1f:ec:02:20:ed:8b:65:36:
                    f5:a6:21:72:85:47:f9:62:b9:26:eb:ea:02:52:18:
                    14:6a:14:90:ad:f2:fd:34:e5:01:5b:89:e2:6f:ae:
                    ed:22:2e:fa:0c:71:a0:7e:62:0c:00:13:21:6e:e9:
                    2b:fe:ce:56:6e:7c:1b:d9:fa:35:90:06:8d:16:dd:
                    25:d3:68:05:47:a8:1c:a8:b1:3c:01:7e:5a:46:d4:
                    b4:ed:da:2f:f8:24:02:ac:a1:85:0c:10:09:87:0b:
                    89:93:dc:5e:a3:69:d6:b1:76:39:7b:aa:b4:51:df:
                    30:f9:42:ce:33:df:d2:1b:cd:85:b6:68:70:b8:73:
                    2a:c7:eb:22:57:76:49:62:b2:3c:a1:f8:81:ba:f9:
                    e8:5b:7e:2a:5b:19:38:c2:cb:23:e1:1e:15:49:a0:
                    dd:5a:0b:f8:45:cf:be:82:76:29:a4:00:12:3d:6d:
                    67:7f:b4:44:8e:3f:75:ff:a4:06:16:d5:38:f8:85:
                    76:81:31:b0:c5:a5:53:ca:2d:0e:dc:d5:83:ae:a7:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B3:4B:D3:AF:E7:4C:9C:FB:D2:8A:94:7A:B8:F9:2B:00:BC:6A:EE
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343030303a3a2f33342d3334203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:30:5c:f7:b7:ad:84:3b:b4:ed:d8:cf:4e:ca:ee:e2:5c:
         d8:63:e9:29:04:f0:f9:72:34:55:24:dd:75:4e:e6:5e:80:b1:
         b6:b7:32:92:c6:85:38:fd:da:0f:dd:17:de:6a:6a:92:f3:73:
         6f:5f:d4:d9:64:58:04:44:42:06:ed:da:30:06:9d:f7:30:1b:
         bc:c0:ac:14:b3:5d:7b:45:86:48:6b:af:e1:4c:22:bf:60:43:
         b9:66:6d:91:9f:99:92:15:8c:c4:28:65:ee:4c:46:85:e3:04:
         2c:27:68:a6:39:92:d4:da:89:81:16:ed:1b:45:4c:ad:16:55:
         eb:b3:61:6a:7a:7e:65:8a:7f:07:2f:fc:ea:a2:89:ff:3f:b4:
         41:f4:84:22:a9:5b:34:e5:18:72:5c:c9:57:b2:08:8b:88:82:
         97:90:76:43:36:b3:28:6d:4d:47:10:ca:57:a8:a6:66:94:4d:
         cb:05:47:a9:b6:df:3e:50:50:2a:4c:be:c4:ab:71:1d:10:dc:
         38:65:4b:c3:7f:96:4f:89:5a:15:4a:f1:19:b4:c0:7d:76:63:
         e5:aa:3d:31:89:26:25:b1:9c:e2:a1:4b:5b:5c:7e:12:d1:4f:
         90:14:5e:27:f0:20:95:f2:6d:c5:8a:5c:ea:1b:25:da:2d:a9:
         d0:53:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:20 2024 by rpki-client on console-ams.rpki-client.org