Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33342d3334203d3e20323638383538.roa
File:                     323830343a356239633a3a2f33342d3334203d3e20323638383538.roa (raw, json)
Hash identifier:          hN9VsdSoYUjFZHF1k8tn/43XRpdYLeOPxjdOOP9/t0U=
Subject key identifier:   76:62:3E:72:9A:A6:7A:BE:83:B6:63:A8:66:9C:5B:16:7A:D9:36:87
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       6A453D6217BF344435C4D4E288CD9BB0A4631B09
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33342d3334203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:01 +0000
ROA not before:           Tue 03 Sep 2024 12:28:01 +0000
ROA not after:            Tue 02 Sep 2025 12:33:01 +0000
asID:                     268858
IP address blocks:        2804:5b9c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:45:3d:62:17:bf:34:44:35:c4:d4:e2:88:cd:9b:b0:a4:63:1b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:01 2024 GMT
            Not After : Sep  2 12:33:01 2025 GMT
        Subject: CN=76623E729AA67ABE83B663A8669C5B167AD93687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:8e:ff:8e:4c:bc:2f:24:5b:32:9d:a8:54:
                    1d:8b:c0:ec:a7:74:a6:5d:c8:3a:c2:5e:00:62:cf:
                    0a:cf:8e:8f:2d:39:f3:7e:58:4b:17:8a:86:aa:b5:
                    c0:00:1e:c0:f1:d8:1a:ea:ca:5d:93:01:1d:7a:b9:
                    20:c5:73:e0:b6:70:5e:27:80:ae:e3:95:e9:23:4e:
                    a7:1c:d5:3c:eb:8c:80:00:6c:68:b0:fb:8a:3c:0e:
                    4a:fb:21:7d:7c:3c:c8:a4:dd:15:23:6b:93:29:1b:
                    63:d6:66:39:30:19:63:65:be:d5:5a:a0:54:e3:32:
                    6d:98:f3:6a:ef:78:88:d5:68:0f:51:83:5d:d7:9f:
                    85:8a:27:41:87:65:3c:88:ca:94:53:6a:fe:0a:89:
                    29:e2:1d:05:ae:36:74:f8:98:71:1e:47:87:3a:09:
                    fc:77:30:c6:88:a6:f7:22:e5:fe:e9:29:76:37:e3:
                    c2:9f:f7:b9:a7:b2:69:d9:12:ab:a6:8c:31:29:08:
                    3a:5d:b8:00:90:d2:cf:c6:f5:eb:32:d5:6f:0e:3c:
                    c1:ba:84:c9:0d:f7:03:db:6d:41:f0:02:36:19:1a:
                    f7:ea:75:b6:65:20:69:1f:c6:92:bf:93:f3:83:b0:
                    5d:90:3f:ba:4b:5f:9f:a3:9f:67:f2:57:d3:4f:0a:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:62:3E:72:9A:A6:7A:BE:83:B6:63:A8:66:9C:5B:16:7A:D9:36:87
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3a2f33342d3334203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c::/34

    Signature Algorithm: sha256WithRSAEncryption
         c2:da:0d:ea:8f:e6:d4:cb:f2:26:23:21:24:9c:09:3e:7c:20:
         7e:29:71:a0:62:47:0c:c7:bf:95:c0:fc:58:b8:58:c9:08:f2:
         79:c8:4c:22:3f:a3:c2:78:eb:8b:25:80:5d:aa:48:cc:6e:6c:
         a0:db:e0:81:73:99:e6:62:cb:c1:61:18:8c:8a:87:b5:54:c3:
         b6:50:8c:2d:2e:01:f9:d9:f9:95:2a:67:b0:20:dc:32:fa:43:
         e8:bf:8d:34:6c:18:4d:ff:b6:3b:28:df:6f:0f:66:b8:5d:8f:
         4c:1f:6d:4c:3c:84:aa:3f:73:bb:cc:2c:92:79:3e:ab:ac:36:
         61:4f:a9:f2:81:e3:6c:42:8e:7b:ae:d7:80:8e:07:a0:02:35:
         ad:45:b5:59:39:ec:49:d6:f0:bd:66:6a:f1:64:32:11:bd:29:
         d8:64:73:f0:d7:d9:a0:d1:a6:61:10:ea:1f:60:72:4b:8a:8e:
         8a:c9:9a:b5:0f:f8:58:d1:87:e9:07:df:23:38:fe:52:7d:63:
         e6:3d:33:30:ce:6b:66:53:85:9a:8e:55:11:4c:0d:19:7e:07:
         11:1a:4c:03:6a:64:03:72:81:1d:15:04:b9:3a:15:02:d0:f2:
         af:7a:09:63:9b:60:43:79:44:58:7f:fc:80:83:4d:68:d7:aa:
         2e:0b:d2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:51 2024 by rpki-client on console-fra.rpki-client.org