Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a3a2f33322d3438203d3e20323637313234.roa
File:                     323830343a343837633a3a2f33322d3438203d3e20323637313234.roa (raw, json)
Hash identifier:          Z1op1s62zQvCEicxBH27Fseuw0bXbQuF26Y6X7UQ5Jk=
Subject key identifier:   C7:F2:91:67:BD:97:D4:3E:E4:C6:41:E2:2E:E0:DA:DB:E3:FE:D8:DD
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       0BF78665C8879399675560F0B9BDE495C4C2637E
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a3a2f33322d3438203d3e20323637313234.roa
Signing time:             Wed 21 Aug 2024 15:12:44 +0000
ROA not before:           Wed 21 Aug 2024 15:07:44 +0000
ROA not after:            Wed 20 Aug 2025 15:12:44 +0000
asID:                     267124
IP address blocks:        2804:487c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f7:86:65:c8:87:93:99:67:55:60:f0:b9:bd:e4:95:c4:c2:63:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Aug 21 15:07:44 2024 GMT
            Not After : Aug 20 15:12:44 2025 GMT
        Subject: CN=C7F29167BD97D43EE4C641E22EE0DADBE3FED8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:e6:8e:ec:00:88:d0:5d:6f:fb:d2:a3:dc:
                    76:8d:41:40:e2:5b:7a:4f:1b:3f:a8:e9:17:f1:0d:
                    11:3c:8a:4c:c2:bd:29:38:f6:8b:d7:08:26:4c:c6:
                    f4:d7:50:45:64:27:2f:0f:46:9c:e3:ca:95:3f:06:
                    a6:39:30:f4:71:7c:9c:35:9d:52:ee:9e:7c:41:b3:
                    8f:51:20:ae:e9:06:57:c8:fc:95:c5:6c:9b:d8:a9:
                    c1:40:92:30:d0:ab:59:a5:f5:5b:a4:3d:45:6c:69:
                    4f:76:fb:c0:f2:bc:f3:7a:f6:02:60:7b:44:8b:2a:
                    9b:3e:a1:aa:1d:60:22:6f:67:5b:6a:c5:fe:28:e3:
                    34:b6:cd:1a:3f:68:e0:a9:01:87:d9:4e:30:1b:56:
                    d0:c5:91:b4:aa:b6:77:a1:c5:e5:69:ac:08:bc:d0:
                    30:8b:08:8f:b3:97:f3:ed:68:02:71:7b:ce:22:da:
                    f3:54:06:09:63:62:ec:c6:33:4a:73:11:e7:2e:07:
                    02:ca:d1:15:eb:48:14:70:1f:39:89:35:09:ea:99:
                    99:c2:5b:f2:b2:93:53:d9:fd:4c:ac:4f:e5:05:21:
                    4b:8a:9e:4a:ba:ed:14:95:64:53:73:0d:e0:7a:c2:
                    11:c9:70:b6:c4:b3:03:95:e6:35:8b:bb:a9:b6:a3:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F2:91:67:BD:97:D4:3E:E4:C6:41:E2:2E:E0:DA:DB:E3:FE:D8:DD
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/323830343a343837633a3a2f33322d3438203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:487c::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:cb:ae:21:26:63:d6:2c:88:6c:28:13:56:fb:31:11:99:80:
         15:e0:be:e1:61:3f:6f:a0:c6:f3:bc:c6:90:b5:ec:69:70:90:
         11:79:18:f9:2c:45:68:f3:ee:47:69:39:d7:0b:3e:af:3d:de:
         a3:7e:12:43:5d:2b:4a:60:b2:99:31:4d:39:b6:64:57:e7:4a:
         db:89:2e:0b:74:47:b4:90:bb:1a:e2:82:5a:09:39:95:6c:e5:
         43:01:06:b9:3f:0b:9d:ef:cb:3d:8c:67:eb:cc:9c:40:72:7d:
         5f:3c:c8:ce:ec:3d:f8:a3:ac:2b:be:18:b5:8e:05:a3:71:35:
         7e:b5:1d:4b:35:44:75:72:d2:fd:a8:cc:3c:aa:c6:75:87:58:
         91:4e:36:21:c5:bd:86:40:7e:fc:4b:1c:48:fb:62:16:82:9c:
         18:91:64:ba:53:ac:d5:5d:bc:fa:56:da:5f:63:40:f0:e8:5a:
         d9:ad:7b:3a:63:bd:5e:6c:51:72:04:0c:28:8a:b5:22:6f:b0:
         b5:39:3c:96:63:7f:1e:03:3d:b9:b1:93:1e:30:cd:a2:d3:bc:
         1f:f6:79:82:78:40:eb:d1:85:9a:ba:b1:59:1d:c8:cc:c3:3a:
         61:bb:91:ba:62:69:1c:a3:81:fd:08:8a:c8:aa:62:b0:02:2d:
         11:31:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org