Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa
File:                     323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa (raw, json)
Hash identifier:          5rotOp7qu8PEPnODjuRU6M3wfsZr9Ny6vYTHFZed9YY=
Subject key identifier:   6B:F7:95:77:48:5D:E9:23:49:05:F5:31:5C:2B:3E:20:9A:AD:0C:5A
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       317B47CC9554D3B1558DDE15F757B3E2CA6F9957
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa
Signing time:             Thu 04 Apr 2024 16:10:09 +0000
ROA not before:           Thu 04 Apr 2024 16:05:09 +0000
ROA not after:            Thu 03 Apr 2025 16:10:09 +0000
asID:                     267124
IP address blocks:        2804:487c:6000::/35 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7b:47:cc:95:54:d3:b1:55:8d:de:15:f7:57:b3:e2:ca:6f:99:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Apr  4 16:05:09 2024 GMT
            Not After : Apr  3 16:10:09 2025 GMT
        Subject: CN=6BF79577485DE9234905F5315C2B3E209AAD0C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:ea:20:7a:1f:46:56:3b:e7:d4:cc:b0:d3:
                    f1:f8:59:13:11:af:e0:86:92:14:87:e4:b7:d3:c8:
                    54:07:25:79:e8:d1:5c:42:9a:1d:54:36:4c:3e:17:
                    59:36:56:87:40:07:ff:46:35:09:8a:8d:68:25:40:
                    2e:02:93:d1:6d:46:38:68:2f:c6:5e:ee:a0:ea:e7:
                    a8:d7:c8:49:f4:44:9a:68:fa:6d:7e:93:1d:e8:b0:
                    ea:1a:26:7f:59:76:ee:03:54:92:3d:72:11:90:37:
                    0e:6b:49:2e:95:4d:71:6c:6e:cb:13:36:00:58:9a:
                    94:88:6a:fc:31:15:92:b6:63:5b:b6:07:a5:49:93:
                    95:30:f2:fc:03:bd:e6:21:e0:ea:85:26:82:5f:06:
                    33:4d:c1:92:ab:7b:9b:cf:cb:10:fd:f3:01:16:e7:
                    ec:1f:16:3e:9a:37:77:fb:70:e6:6d:01:c7:14:93:
                    48:39:9f:b9:cc:b5:2d:6e:75:8a:31:5a:1d:61:d7:
                    bd:8b:6e:b1:40:0a:08:72:04:03:88:c0:1b:64:49:
                    60:a2:ff:6c:f2:0c:5c:ac:50:ad:82:95:50:38:c4:
                    30:11:1b:af:13:8f:bb:62:2d:5e:11:89:a9:ec:04:
                    ac:ab:73:4a:65:36:de:b7:fa:f9:ef:d2:a7:c0:cf:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F7:95:77:48:5D:E9:23:49:05:F5:31:5C:2B:3E:20:9A:AD:0C:5A
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a363030303a3a2f33352d3336203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:487c:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:36:be:b7:81:23:5f:35:9c:9d:2b:cc:ce:a6:9a:28:40:
         99:a4:80:ed:14:0f:be:b1:b8:f5:fb:d8:40:67:41:3a:8f:22:
         c7:fd:3f:4d:f3:e8:b3:7b:0e:dc:3d:bc:e3:a1:55:91:cf:d8:
         5d:95:9d:95:de:6a:56:c2:bf:5b:21:c3:f7:0e:22:d3:ee:b7:
         9f:1f:f3:97:59:be:ea:db:26:76:96:90:d0:19:67:78:8a:f5:
         65:4a:ff:92:cd:67:a4:7d:ca:11:5b:9c:a6:c0:66:1a:2f:4b:
         08:d0:81:9c:ab:ea:c4:18:2b:64:63:92:b7:29:30:af:a1:0b:
         12:3e:76:a6:6c:55:17:4c:9c:f6:ba:79:55:b6:df:21:3e:15:
         00:b8:9d:e2:5d:03:0a:63:dc:24:29:b7:4d:3f:0e:f0:7c:54:
         85:02:79:f1:64:6c:79:80:fa:42:c3:3f:47:5f:68:d4:cd:68:
         43:b5:17:59:d8:ab:c0:b5:9b:2d:a4:43:63:10:ff:2e:d0:80:
         0a:c9:60:de:05:ec:f0:f9:82:a0:28:89:d5:b7:4d:12:6f:a9:
         36:7a:9f:3c:43:60:ba:af:89:cb:e3:e5:56:37:88:64:96:99:
         a6:97:a1:49:10:c3:bd:f1:b2:71:9c:89:8f:c9:a8:a9:44:7c:
         28:45:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:48 2024 by rpki-client on console-fra.rpki-client.org