Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33322d3332203d3e20323634393133.roa
File:                     323830343a326664303a3a2f33322d3332203d3e20323634393133.roa (raw, json)
Hash identifier:          2eBT/b72ikftXjSPoJK7N+CfzP/A2PzXDd2FpfcW6oc=
Subject key identifier:   EA:B2:25:3F:A4:B6:9D:A7:64:99:DE:A0:CA:64:37:64:26:11:67:26
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       58AA94165EDD43295C56E8540FA1C27DD7E2BDAE
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33322d3332203d3e20323634393133.roa
Signing time:             Thu 04 Apr 2024 04:14:00 +0000
ROA not before:           Thu 04 Apr 2024 04:09:00 +0000
ROA not after:            Thu 03 Apr 2025 04:14:00 +0000
asID:                     264913
IP address blocks:        2804:2fd0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:aa:94:16:5e:dd:43:29:5c:56:e8:54:0f:a1:c2:7d:d7:e2:bd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Apr  4 04:09:00 2024 GMT
            Not After : Apr  3 04:14:00 2025 GMT
        Subject: CN=EAB2253FA4B69DA76499DEA0CA64376426116726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:1d:a3:d1:76:25:00:9d:ca:2b:cc:4b:c8:
                    d8:aa:22:6c:a6:a3:b1:be:f2:45:94:86:4c:24:2d:
                    8a:d6:87:29:05:67:60:29:8c:2a:fd:83:26:34:9b:
                    a6:44:2f:04:1c:d7:f9:6e:05:6a:04:67:bb:cc:a7:
                    c3:37:fd:e2:d2:6b:d8:3a:b4:73:9b:01:fb:d4:84:
                    a9:2a:b3:5b:66:0a:ce:8a:c4:38:80:7e:54:a3:d3:
                    f8:2c:b9:02:9b:db:95:36:87:d7:30:b9:e9:85:4f:
                    ca:95:18:e8:d1:ef:8f:15:e5:54:7b:36:43:4b:c2:
                    34:f6:14:51:6e:e4:9a:6a:aa:8e:13:cc:c5:cf:fb:
                    fa:b9:f4:c2:a9:95:a2:ef:4a:b8:f4:a4:8f:44:b4:
                    0e:dd:70:95:4b:77:79:cb:03:a4:45:eb:f5:a9:50:
                    73:f3:05:89:7d:a0:c9:d6:20:38:ad:de:cd:fe:13:
                    8a:92:ca:22:aa:f3:70:46:71:a7:b7:c8:bb:b9:a9:
                    8b:20:b5:69:5e:e2:a7:ca:ed:15:3f:f8:9b:33:cf:
                    59:65:af:d5:6c:5f:5e:f7:22:a0:1d:a5:b3:1c:23:
                    06:28:6b:48:80:67:f1:6c:b2:5d:4f:a0:fa:90:03:
                    9e:1e:f5:5b:ca:0a:4c:67:38:a5:2f:fb:97:5c:62:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:25:3F:A4:B6:9D:A7:64:99:DE:A0:CA:64:37:64:26:11:67:26
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/323830343a326664303a3a2f33322d3332203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:54:3d:e9:14:7a:81:10:9c:fa:da:b0:94:8f:ac:cb:e4:66:
         bb:a0:09:84:11:47:a3:8d:8f:1b:dd:f6:51:a5:c9:89:c8:2a:
         a4:36:2b:03:17:26:c9:9c:d9:70:e0:09:ca:31:4b:a4:40:55:
         cd:70:a8:cb:82:5f:5d:70:5b:1b:9d:e6:82:a4:58:c6:9d:9c:
         8f:2a:bf:0a:c1:82:13:f9:12:6f:a4:ca:be:d2:3c:fa:5b:af:
         11:1f:90:37:24:3c:ff:23:e6:57:c0:39:03:d3:4a:42:0d:ee:
         22:3b:ed:e2:6c:a9:b1:87:35:0f:b5:fe:73:01:5e:b9:88:c7:
         4d:3e:a1:4e:18:ec:90:36:dc:63:61:12:b1:94:b2:5f:89:57:
         c6:b8:78:2c:27:fb:cf:da:36:d3:4a:07:dc:93:e9:14:38:0f:
         19:0a:16:67:a7:be:18:df:b1:5c:03:c9:b8:75:4d:76:a1:e7:
         85:ce:cb:30:08:72:cf:29:cd:bc:f1:3a:71:31:e9:d5:52:03:
         5f:d9:01:16:e9:f4:c1:bd:dc:4a:77:3d:e3:ec:59:bf:9c:bf:
         71:5c:fd:95:97:6e:e1:e1:79:6b:5d:a7:e8:58:1b:9a:3d:e5:
         70:74:dc:5b:df:2d:3e:11:fa:4e:96:0a:b2:4b:98:7b:2a:d4:
         84:ea:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org