Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33322d3332203d3e20323638383538.roa
File:                     323830343a356239633a3a2f33322d3332203d3e20323638383538.roa (raw, json)
Hash identifier:          wyHVfE0n8SsJKb04QvM+mnmzBlOq766W1LMIyQupxsA=
Subject key identifier:   68:A2:2D:FA:1E:1F:4F:4E:C8:0A:14:CF:72:98:DA:FD:0D:16:81:9A
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       38E60CA15329601F703B8F22050E82BFFFF2E210
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33322d3332203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:01 +0000
ROA not before:           Tue 03 Sep 2024 12:28:01 +0000
ROA not after:            Tue 02 Sep 2025 12:33:01 +0000
asID:                     268858
IP address blocks:        2804:5b9c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e6:0c:a1:53:29:60:1f:70:3b:8f:22:05:0e:82:bf:ff:f2:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:01 2024 GMT
            Not After : Sep  2 12:33:01 2025 GMT
        Subject: CN=68A22DFA1E1F4F4EC80A14CF7298DAFD0D16819A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:b9:ee:ff:7e:a7:87:0f:28:cb:d6:0f:ef:
                    a1:9c:52:7e:98:7a:95:43:f4:b2:b6:8a:5a:b2:98:
                    5d:3f:6a:e5:52:2a:ca:58:0a:1b:a6:3e:ee:34:70:
                    35:d7:76:56:a9:dd:ce:09:d9:f6:95:9f:36:04:5f:
                    8c:54:3e:ba:32:30:48:dd:cb:41:cf:f8:5a:4e:64:
                    a2:02:e6:7f:8a:74:a3:86:ad:13:f2:5d:07:5c:61:
                    54:c2:9c:cd:10:16:2b:17:36:7a:8e:8e:ed:f3:06:
                    d4:3c:68:7a:54:96:e2:93:24:83:b1:d3:36:55:66:
                    06:d5:94:22:5a:61:98:e2:bc:d2:e0:5c:f6:31:c7:
                    4b:d1:d9:f0:97:c7:d5:da:e7:b7:00:58:28:ba:4e:
                    6d:ab:0d:42:1c:65:55:f3:6b:28:fb:a5:2d:4c:3d:
                    ac:75:fc:2d:e6:be:2e:3f:bf:e8:26:15:f4:5e:a3:
                    ca:37:6d:75:e3:2c:b4:01:b4:b0:8f:d0:f0:29:1b:
                    14:93:95:6c:81:7f:b4:ec:35:2d:52:99:02:4c:21:
                    44:78:1b:ea:54:fc:73:c2:16:ec:05:1f:1e:90:17:
                    3e:49:87:36:16:11:fa:ad:d7:ee:d3:95:1a:63:9e:
                    4d:d6:79:6a:aa:6d:34:09:9e:93:ce:90:c7:0d:92:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:2D:FA:1E:1F:4F:4E:C8:0A:14:CF:72:98:DA:FD:0D:16:81:9A
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33322d3332203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:c8:f8:1b:3f:0e:74:e2:89:1c:65:a4:f1:6d:64:75:42:
         9b:72:45:77:34:de:9a:2b:c2:fe:1a:35:33:b7:66:a8:1d:0b:
         66:34:87:0e:b2:a2:22:b2:b7:66:d1:f0:bc:89:b2:06:f4:03:
         3e:5b:d9:e1:c5:36:1e:21:da:af:ea:4d:4b:f8:5d:b7:67:89:
         d2:b9:fe:18:66:0b:d1:98:83:d2:35:a5:dd:a0:c6:a3:68:a0:
         e5:87:83:a3:d7:92:e5:ff:4b:aa:8f:94:ee:59:b6:52:bc:2e:
         ff:43:24:66:bf:b0:15:81:d9:fe:24:03:ec:4a:0e:89:e5:e8:
         a1:78:e7:2d:20:50:99:a2:b6:5f:ef:eb:4e:d5:ff:fa:82:23:
         e1:77:87:71:25:bc:7f:ae:08:cf:3c:94:89:ee:3e:b8:46:06:
         34:3e:f4:ab:00:a2:3a:e3:95:c0:26:0e:b2:92:6d:a5:37:ac:
         8f:23:67:d7:2d:b1:5f:1f:a8:c2:79:44:82:17:29:11:c0:de:
         79:7c:f0:a8:aa:7e:cb:cc:f0:30:df:27:1a:05:ea:02:b6:88:
         dd:63:de:68:a3:97:da:23:ce:02:83:97:0d:27:09:73:b2:f4:
         bb:25:86:cf:b3:27:ba:34:6f:37:62:60:0e:86:f8:44:87:4a:
         34:da:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:51 2024 by rpki-client on console-fra.rpki-client.org