Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gv4SfUNU6E7dt4c2Ebno3UHsTaw77qhvCQLYNCD6iWxW/0/323830343a386265633a3a2f33322d3332203d3e20323733373638.roa
File:                     323830343a386265633a3a2f33322d3332203d3e20323733373638.roa (raw, json)
Hash identifier:          4tgVvSWnGfc1OiFAIcADSrEz/c1I0xNchLja4RJiG9U=
Subject key identifier:   0F:98:48:86:E6:55:04:0B:78:24:14:94:F8:07:EC:F6:29:C0:E9:6A
Certificate issuer:       /CN=EA2E12EAA5D90FF3B45C0660457B41A910874506
Certificate serial:       1ADC295330FB0B7F865092B08C75C70F00C20BE2
Authority key identifier: EA:2E:12:EA:A5:D9:0F:F3:B4:5C:06:60:45:7B:41:A9:10:87:45:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA2E12EAA5D90FF3B45C0660457B41A910874506.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gv4SfUNU6E7dt4c2Ebno3UHsTaw77qhvCQLYNCD6iWxW/0/323830343a386265633a3a2f33322d3332203d3e20323733373638.roa
Signing time:             Fri 02 Aug 2024 19:10:43 +0000
ROA not before:           Fri 02 Aug 2024 19:05:43 +0000
ROA not after:            Fri 01 Aug 2025 19:10:43 +0000
asID:                     273768
IP address blocks:        2804:8bec::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gv4SfUNU6E7dt4c2Ebno3UHsTaw77qhvCQLYNCD6iWxW/0/EA2E12EAA5D90FF3B45C0660457B41A910874506.crl
                          rsync://rpki-repo.registro.br/repo/Gv4SfUNU6E7dt4c2Ebno3UHsTaw77qhvCQLYNCD6iWxW/0/EA2E12EAA5D90FF3B45C0660457B41A910874506.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA2E12EAA5D90FF3B45C0660457B41A910874506.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:dc:29:53:30:fb:0b:7f:86:50:92:b0:8c:75:c7:0f:00:c2:0b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA2E12EAA5D90FF3B45C0660457B41A910874506
        Validity
            Not Before: Aug  2 19:05:43 2024 GMT
            Not After : Aug  1 19:10:43 2025 GMT
        Subject: CN=0F984886E655040B78241494F807ECF629C0E96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:be:56:07:c3:c5:de:10:1e:41:f3:06:ac:
                    d1:7e:13:75:ce:7e:ad:09:7c:d6:a7:09:6a:db:73:
                    af:ab:f6:28:4a:b0:fe:72:d5:2e:35:36:88:8e:20:
                    45:00:7d:43:5f:44:66:75:03:f2:44:50:1e:f7:0d:
                    94:fe:cd:c7:61:44:67:27:22:1f:a3:d2:c1:ba:35:
                    31:40:d5:12:cb:a8:8b:15:da:52:49:f4:d7:e5:b1:
                    c1:dc:07:5c:72:38:3f:53:f5:bd:d0:a7:f0:e4:b2:
                    7c:d4:f8:8e:a8:dc:08:24:7d:0a:2d:90:86:6e:76:
                    c9:7a:1e:0d:cc:4f:b0:52:46:d2:7d:bb:33:1f:30:
                    aa:3e:3e:af:38:0a:a4:29:80:1a:9b:ea:5d:53:78:
                    27:b0:cf:70:d4:07:5f:90:67:31:57:7c:d0:f5:b3:
                    52:f1:f6:0e:d7:bc:d6:17:94:b0:0f:53:e9:59:7f:
                    83:79:86:bc:e4:fb:7c:55:49:87:c5:fa:ee:ab:84:
                    af:10:85:90:27:33:bb:1b:e7:40:2b:8f:8b:77:d7:
                    f6:ab:23:94:5e:90:24:f2:cb:41:d6:78:11:5b:23:
                    20:bc:32:31:58:d5:8b:9a:3d:31:a1:a9:8d:64:fc:
                    3a:5a:57:1c:2a:2c:c5:7d:d6:cf:d2:ed:85:ea:9f:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:48:86:E6:55:04:0B:78:24:14:94:F8:07:EC:F6:29:C0:E9:6A
            X509v3 Authority Key Identifier:
                keyid:EA:2E:12:EA:A5:D9:0F:F3:B4:5C:06:60:45:7B:41:A9:10:87:45:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gv4SfUNU6E7dt4c2Ebno3UHsTaw77qhvCQLYNCD6iWxW/0/EA2E12EAA5D90FF3B45C0660457B41A910874506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA2E12EAA5D90FF3B45C0660457B41A910874506.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gv4SfUNU6E7dt4c2Ebno3UHsTaw77qhvCQLYNCD6iWxW/0/323830343a386265633a3a2f33322d3332203d3e20323733373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bec::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:45:a1:d5:c8:37:ff:93:a9:1e:e9:f3:d3:7e:41:76:cd:e0:
         43:7d:a3:ff:5d:85:ab:1a:b9:fe:aa:55:62:f0:25:f9:1c:6e:
         b6:27:03:29:7b:ac:a1:8e:72:3e:21:4a:c3:e0:10:7c:22:52:
         3c:7b:63:99:c5:9e:0d:fa:ec:d9:f3:35:00:c3:2a:84:90:1f:
         a3:4e:15:0f:0c:c8:58:70:9a:76:f5:18:17:2e:f6:52:1d:04:
         62:c4:51:09:4d:93:4a:6c:3b:85:74:5a:d0:b9:85:4c:04:e9:
         d9:ac:79:b1:bd:45:26:e2:2f:e6:91:d1:28:34:80:d7:83:fb:
         0c:6d:7e:f9:bf:82:b8:a3:3c:99:dc:fb:39:8b:25:78:9b:85:
         59:71:99:4a:03:d8:08:f7:4b:01:e1:71:56:bf:67:b4:45:22:
         77:11:8f:36:68:65:c1:ee:74:1f:ce:6e:d3:73:20:77:4f:3f:
         d7:28:29:7f:79:57:41:e7:a7:6f:7d:b5:a4:ab:42:20:bb:a5:
         d9:7f:02:cc:12:20:22:8f:d6:3b:ce:33:b2:92:1e:cc:1c:24:
         ec:51:cc:c7:7f:71:a4:1b:93:b4:7c:c1:69:5c:7d:a2:46:6c:
         78:aa:45:8d:ff:a1:29:74:1c:03:b0:81:23:ef:b6:3f:96:df:
         28:54:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:54 2024 by rpki-client on console-fra.rpki-client.org