Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/323830343a37633a3a2f33322d3438203d3e203238353835.roa
File:                     323830343a37633a3a2f33322d3438203d3e203238353835.roa (raw, json)
Hash identifier:          W1yLblJX56gNPUdVFjTJBcgHgZeuUqzp0H6e/wagiuk=
Subject key identifier:   05:13:9B:A2:E2:31:14:30:E2:F5:91:5D:85:29:85:56:EB:5E:C5:5F
Certificate issuer:       /CN=ED7939F3F16AA36F0B40368F5069CEB847CF770D
Certificate serial:       1F7BC6A322823AC4504A2190EBFC8CFBB0CF35F0
Authority key identifier: ED:79:39:F3:F1:6A:A3:6F:0B:40:36:8F:50:69:CE:B8:47:CF:77:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7939F3F16AA36F0B40368F5069CEB847CF770D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/323830343a37633a3a2f33322d3438203d3e203238353835.roa
Signing time:             Fri 11 Oct 2024 19:22:06 +0000
ROA not before:           Fri 11 Oct 2024 19:17:06 +0000
ROA not after:            Fri 10 Oct 2025 19:22:06 +0000
asID:                     28585
IP address blocks:        2804:7c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/ED7939F3F16AA36F0B40368F5069CEB847CF770D.crl
                          rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/ED7939F3F16AA36F0B40368F5069CEB847CF770D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7939F3F16AA36F0B40368F5069CEB847CF770D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7b:c6:a3:22:82:3a:c4:50:4a:21:90:eb:fc:8c:fb:b0:cf:35:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7939F3F16AA36F0B40368F5069CEB847CF770D
        Validity
            Not Before: Oct 11 19:17:06 2024 GMT
            Not After : Oct 10 19:22:06 2025 GMT
        Subject: CN=05139BA2E2311430E2F5915D85298556EB5EC55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:57:17:73:05:68:d4:c4:b3:41:e8:52:83:
                    b5:02:e8:6b:3f:53:72:d9:26:3d:57:31:54:bd:5b:
                    7e:6c:7d:81:80:6d:01:31:e3:85:c0:9f:db:9b:4c:
                    e7:80:b9:cf:0c:bd:dd:4c:df:05:98:db:d8:d2:ba:
                    41:99:3c:2e:34:88:ae:e2:01:53:16:f8:df:1f:65:
                    bc:46:d1:12:ca:f7:ae:79:16:ed:d0:02:f2:b1:00:
                    a1:86:b0:78:82:13:c4:da:93:a7:8a:05:74:d4:49:
                    47:da:14:6f:e5:a4:18:23:58:69:a0:ba:18:fd:ed:
                    54:c1:1c:64:cb:3a:05:eb:cd:2f:88:72:d2:9c:da:
                    28:eb:eb:b0:80:9b:9c:6b:87:ce:77:03:91:7d:61:
                    ea:d0:fd:a3:ee:76:98:cf:a5:36:d4:a8:8c:1d:6c:
                    26:34:42:da:d5:52:e6:5a:1d:f4:e9:8f:51:f9:0a:
                    36:9b:2e:74:a9:aa:40:48:e6:55:15:14:5b:25:09:
                    20:70:3c:e7:10:43:87:1a:65:bf:7b:70:79:fd:02:
                    d7:06:fb:1c:5b:3a:e2:a5:a5:ba:1e:6c:35:bc:fd:
                    02:d2:7f:27:4f:fd:41:cc:93:41:d0:73:9a:ba:ec:
                    b6:3e:c6:91:d4:f7:62:88:9c:89:ee:14:3e:8d:de:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:13:9B:A2:E2:31:14:30:E2:F5:91:5D:85:29:85:56:EB:5E:C5:5F
            X509v3 Authority Key Identifier:
                keyid:ED:79:39:F3:F1:6A:A3:6F:0B:40:36:8F:50:69:CE:B8:47:CF:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/ED7939F3F16AA36F0B40368F5069CEB847CF770D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7939F3F16AA36F0B40368F5069CEB847CF770D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/323830343a37633a3a2f33322d3438203d3e203238353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:39:23:30:13:6b:a0:fc:d8:1e:0f:83:47:9c:ea:42:f1:f9:
         58:4c:ac:9f:43:73:06:24:f6:7e:cc:8e:78:45:4d:66:ff:db:
         43:3d:fa:f6:4b:74:60:e7:e4:3d:3c:63:50:81:ee:07:46:b3:
         f2:9d:07:13:db:49:c8:e6:f8:07:f7:6a:6c:a8:38:1e:ac:21:
         5a:d1:a0:df:98:f8:99:21:76:e5:f4:45:0c:6a:35:2f:96:ec:
         31:9c:a2:06:79:fb:de:ed:37:75:81:9b:ab:55:d4:d1:60:79:
         11:6f:e6:b5:69:63:db:e7:63:34:c3:84:42:63:36:98:98:f0:
         f7:27:09:26:f6:a8:9b:0e:77:d0:cf:09:aa:2f:54:3a:71:c1:
         bc:a0:86:db:b2:33:21:98:6d:d5:d1:b7:0a:ea:17:d9:e9:bc:
         7b:ab:82:d8:92:45:dc:cf:68:87:3f:42:14:0c:a4:41:62:22:
         66:25:63:de:95:79:b3:93:d4:56:4d:73:0b:2f:98:a5:ba:e1:
         f2:04:77:2f:12:06:3b:66:67:7e:a7:d1:2c:50:6b:70:01:d3:
         ed:e6:3e:2e:f1:df:71:a9:3f:82:2f:c3:40:a0:7f:bb:f7:3d:
         47:a9:5f:e9:e2:e4:bd:47:18:e6:86:92:e3:06:b9:2d:1b:83:
         e0:b4:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:38 2024 by rpki-client on console-fra.rpki-client.org