Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3830303a3a2f33372d3337203d3e20323635393131.roa
File:                     323830343a336662633a3830303a3a2f33372d3337203d3e20323635393131.roa (raw, json)
Hash identifier:          wU1Nw9c5PURzrHZej6cXoCcNe3hoTRpb4OkP0RE/OIA=
Subject key identifier:   4E:3A:45:59:F3:77:78:C1:B9:EC:0A:0F:12:3F:D0:5B:55:38:8C:ED
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       5DE0545F9D1E3F4135734ECF957641B87ADD74FC
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3830303a3a2f33372d3337203d3e20323635393131.roa
Signing time:             Fri 12 Jul 2024 19:53:12 +0000
ROA not before:           Fri 12 Jul 2024 19:48:12 +0000
ROA not after:            Fri 11 Jul 2025 19:53:12 +0000
asID:                     265911
IP address blocks:        2804:3fbc:800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e0:54:5f:9d:1e:3f:41:35:73:4e:cf:95:76:41:b8:7a:dd:74:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jul 12 19:48:12 2024 GMT
            Not After : Jul 11 19:53:12 2025 GMT
        Subject: CN=4E3A4559F37778C1B9EC0A0F123FD05B55388CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:46:ad:72:af:c4:4e:44:ec:ce:d0:ea:49:
                    9a:07:73:d9:f5:8e:82:0b:8d:25:6a:f3:85:a7:4a:
                    9b:29:50:0b:f4:35:59:f9:d0:65:0c:b8:b0:bc:2c:
                    ff:c1:6f:e6:7b:2c:49:f4:46:77:c8:5b:26:1a:f3:
                    ff:b1:c5:90:da:b0:8e:54:d3:4a:f9:1b:99:1f:42:
                    6c:69:6a:00:23:05:70:0e:ff:64:c7:9f:65:a2:fe:
                    4b:00:1b:fd:17:30:be:fa:53:55:7f:86:8d:9d:dd:
                    f4:5f:de:4f:e5:07:55:6a:ca:fb:78:7a:06:51:e3:
                    7c:d6:83:8e:31:a6:69:00:0f:09:a8:c6:fd:44:e6:
                    74:48:c5:54:8c:6d:43:31:9d:69:9d:30:65:06:86:
                    88:23:e9:59:fe:9a:b7:27:d1:7c:88:c1:51:f8:df:
                    e2:f3:70:c8:6e:b6:82:92:94:69:79:d0:10:0d:eb:
                    21:2a:ae:51:8a:a5:c7:ef:ac:2f:f2:63:3c:fd:c4:
                    24:a7:cc:ed:c1:9f:f8:7f:9e:f7:35:b3:f9:da:ff:
                    54:a2:18:bf:49:1d:ed:e7:f4:67:cd:a8:31:a3:ca:
                    01:f1:02:9c:e3:88:95:32:d9:da:b6:30:74:b5:37:
                    cf:96:e8:89:8d:a3:0c:06:16:5f:df:60:06:40:c9:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3A:45:59:F3:77:78:C1:B9:EC:0A:0F:12:3F:D0:5B:55:38:8C:ED
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3830303a3a2f33372d3337203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fbc:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         01:be:e5:91:31:9d:c7:df:2a:49:93:e6:2c:3b:06:b6:64:26:
         86:44:2d:3f:43:28:fc:bc:8f:b9:bc:51:a3:22:a0:bd:7f:cd:
         e3:41:17:d2:a1:5e:09:f4:b1:b8:63:af:90:ff:18:c2:1d:24:
         a6:a3:1e:52:b1:df:57:20:6b:aa:6f:7a:1d:f9:83:ea:76:1d:
         7a:f9:b8:7d:e8:9f:5a:f3:12:f6:8b:51:13:92:60:37:fb:7e:
         29:7a:6b:61:2c:fb:64:c8:65:12:e0:1c:0e:f6:c8:57:b9:33:
         e1:c6:12:98:9c:75:a8:e7:45:16:31:ef:9a:09:c3:cc:5c:bb:
         4a:de:cf:ec:c4:40:da:5f:54:95:db:79:99:ea:31:fa:2f:e7:
         aa:65:15:d1:bf:52:f8:bf:3a:d7:d3:ab:48:34:c8:0a:ab:c6:
         b8:df:7c:23:fa:dd:d7:f9:67:18:26:aa:49:24:21:de:67:5f:
         23:38:c4:55:f2:70:59:82:99:dd:da:5d:3b:6f:9b:b3:78:61:
         ed:9d:2c:ce:3e:1f:3c:1b:4c:c1:5c:72:1d:d5:cd:cf:a9:c1:
         39:ad:8d:43:5f:59:99:ad:28:70:9e:d0:15:1f:60:97:09:ba:
         cb:2b:55:26:64:58:32:d5:e8:e9:b1:6c:61:a7:ac:11:1b:2e:
         d3:6f:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org