Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/323830343a356361303a3a2f33322d313238203d3e20323638393230.roa
File:                     323830343a356361303a3a2f33322d313238203d3e20323638393230.roa (raw, json)
Hash identifier:          ZfNZzm5cbhMp6F6riNV7uDxbJW7VrMpfTvDvMfOUrWk=
Subject key identifier:   08:AA:60:F8:E2:58:BF:F5:BF:83:54:2F:74:FC:BC:AA:99:E9:25:D4
Certificate issuer:       /CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
Certificate serial:       1FF6E63077661213FA56818F4E08C45A63F24D79
Authority key identifier: EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/323830343a356361303a3a2f33322d313238203d3e20323638393230.roa
Signing time:             Thu 15 Aug 2024 13:27:57 +0000
ROA not before:           Thu 15 Aug 2024 13:22:57 +0000
ROA not after:            Thu 14 Aug 2025 13:27:57 +0000
asID:                     268920
IP address blocks:        2804:5ca0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl
                          rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f6:e6:30:77:66:12:13:fa:56:81:8f:4e:08:c4:5a:63:f2:4d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
        Validity
            Not Before: Aug 15 13:22:57 2024 GMT
            Not After : Aug 14 13:27:57 2025 GMT
        Subject: CN=08AA60F8E258BFF5BF83542F74FCBCAA99E925D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:ae:80:e5:74:6d:8d:09:48:37:24:3b:44:
                    4c:7a:e8:bf:b4:42:d9:1d:70:fe:33:5f:c4:e0:a9:
                    dd:f7:2a:13:f6:f6:2b:96:fb:3f:83:bb:4c:5b:6e:
                    31:87:02:23:b4:5f:56:25:59:fe:cf:4f:00:ee:ce:
                    8d:68:6f:b7:56:ce:19:ce:f5:c8:d3:23:df:41:6e:
                    b0:34:f8:4b:f0:45:9e:ea:25:a3:fd:2b:d7:d1:52:
                    5a:6b:fd:c9:6a:81:cf:72:8a:75:b8:68:aa:71:71:
                    08:0e:bd:3b:c0:fa:c9:a5:a1:15:00:2f:56:24:55:
                    3e:3f:ad:a0:88:a8:d3:74:61:da:a9:0e:bc:44:e9:
                    2b:ae:4f:03:53:59:f3:15:4a:a4:1f:b7:56:2d:71:
                    00:b1:40:3d:8c:6d:a4:aa:8d:18:af:df:09:4e:c4:
                    be:8d:ed:11:b0:36:95:47:c3:23:ad:93:d0:23:9d:
                    18:05:70:83:4f:8b:55:fa:12:ef:14:c6:ee:ae:fe:
                    f9:cc:07:d9:e9:8f:39:fb:a0:a8:f1:be:aa:92:46:
                    a4:87:bd:5f:72:a2:1b:04:09:fc:e2:de:59:ac:5c:
                    f0:c4:20:28:0b:fd:5f:2d:94:7f:93:cd:a8:04:9f:
                    5c:63:fa:60:f2:12:ef:dd:7b:ed:88:ce:2d:dd:f6:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AA:60:F8:E2:58:BF:F5:BF:83:54:2F:74:FC:BC:AA:99:E9:25:D4
            X509v3 Authority Key Identifier:
                keyid:EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/323830343a356361303a3a2f33322d313238203d3e20323638393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:19:21:2e:83:92:a3:a8:43:0b:98:0c:b2:0a:4b:37:a3:
         f9:fa:f8:ad:82:ec:fc:e0:e4:76:09:a5:5f:bf:7b:92:d3:c4:
         b3:56:e6:cc:4a:bd:bb:5b:47:11:3c:8c:00:8b:a6:d1:a2:42:
         2b:5a:f0:fc:70:60:8b:40:1b:1e:02:d9:a3:4d:49:cd:59:31:
         d0:31:82:b8:17:f9:62:f4:e4:6b:67:35:50:1c:44:8f:5e:6c:
         f9:11:b5:fc:5a:76:8a:74:1a:16:85:12:ec:55:db:95:c8:41:
         e6:29:14:34:03:75:ae:4a:aa:5e:c1:cc:50:aa:05:09:47:d2:
         d7:e3:fd:8a:b4:4b:9f:2d:04:51:4c:1d:f6:57:83:c9:93:02:
         a7:c3:64:d2:34:f1:1a:b1:95:ca:f9:3b:eb:b7:46:0b:3b:83:
         27:8b:79:5e:dc:0a:85:9a:05:f9:eb:8e:6d:de:c6:10:d2:0d:
         54:83:73:1f:9b:9a:67:ff:28:19:06:94:2d:07:61:ba:05:25:
         76:0a:e6:5f:cd:d3:6d:9a:1e:74:3f:dd:6c:af:14:d6:75:5a:
         13:88:f5:72:10:d3:f8:7c:59:1f:b9:4a:2f:86:16:d0:ec:b1:
         50:72:a5:6c:3d:46:60:9e:a7:48:14:fb:a5:be:4b:80:61:c8:
         3b:3c:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:46 2024 by rpki-client on console-fra.rpki-client.org