Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33332d3333203d3e20323635393131.roa
File:                     323830343a336662633a3a2f33332d3333203d3e20323635393131.roa (raw, json)
Hash identifier:          XeRkW5FqSx6lC8nMQdkD9Lo6BnhqxUduCVK2EdMHDzg=
Subject key identifier:   2A:95:48:0D:62:0F:C6:B9:DA:9D:1A:6B:39:CC:BF:6B:01:17:13:E8
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       88D6EFAD776F53FFF755D4F7F8DAF828C61BB3
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33332d3333203d3e20323635393131.roa
Signing time:             Thu 08 Aug 2024 18:51:05 +0000
ROA not before:           Thu 08 Aug 2024 18:46:05 +0000
ROA not after:            Thu 07 Aug 2025 18:51:05 +0000
asID:                     265911
IP address blocks:        2804:3fbc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:d6:ef:ad:77:6f:53:ff:f7:55:d4:f7:f8:da:f8:28:c6:1b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Aug  8 18:46:05 2024 GMT
            Not After : Aug  7 18:51:05 2025 GMT
        Subject: CN=2A95480D620FC6B9DA9D1A6B39CCBF6B011713E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:60:d5:b0:6a:1d:73:e9:a3:34:51:92:17:
                    53:fa:0e:bb:53:00:3f:4d:2a:c2:2f:36:07:ec:fc:
                    54:11:dd:11:17:41:e7:ac:ce:3b:02:42:cf:5c:67:
                    c5:ba:a7:fe:a4:6b:f0:8b:3c:e3:bb:f1:ed:e5:fd:
                    9b:2b:6c:97:c5:85:27:ac:e6:6f:23:f5:f4:f8:65:
                    b2:71:34:c8:17:84:6c:e2:92:71:29:bf:c6:f4:33:
                    a8:f9:39:36:c0:8e:d2:fe:c0:4c:39:f8:5b:08:62:
                    86:3e:db:97:30:9b:a1:a4:a4:0b:00:81:75:d9:c1:
                    0e:68:8d:eb:a2:9b:aa:15:8b:d1:89:24:79:b6:d0:
                    16:a3:d5:3e:28:71:f2:cb:06:27:ad:1b:4a:ad:a7:
                    79:82:0d:3a:38:1d:87:7b:00:4a:a9:99:37:f2:b3:
                    d2:0d:04:c5:0a:65:46:63:9c:48:8d:06:bd:7b:ee:
                    09:44:7d:d9:7e:3b:83:ba:f8:f8:56:30:61:a9:45:
                    65:52:d2:96:ad:cd:bf:09:8f:96:27:3a:e1:b5:5d:
                    21:c3:7f:26:89:91:90:f0:02:bc:c1:f3:78:6a:49:
                    d9:04:d4:43:09:56:9b:a3:1d:11:2b:3c:36:67:89:
                    af:48:ab:59:15:5d:1d:fd:93:d1:e9:cf:1a:7e:a9:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:95:48:0D:62:0F:C6:B9:DA:9D:1A:6B:39:CC:BF:6B:01:17:13:E8
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33332d3333203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fbc::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:7e:e7:20:44:96:a7:37:45:86:37:0e:4c:36:72:cb:58:
         0a:26:09:64:77:7a:72:93:9e:e2:ff:54:b0:ce:cc:82:e2:6b:
         65:a1:0b:a0:4b:d3:91:51:89:eb:36:10:08:e0:63:8b:4d:34:
         5e:76:4b:52:da:8e:9e:ba:5b:19:99:37:82:1d:90:0e:af:48:
         a4:06:60:fe:da:ad:d6:a4:68:67:a7:59:01:81:cd:f9:3e:6b:
         5e:e7:2e:88:d7:ae:ce:70:70:f3:6d:26:95:25:78:77:49:83:
         7b:b1:f7:7e:ff:dd:56:fc:b9:d0:f2:2b:42:79:90:0e:66:7d:
         0d:b3:cb:f0:b4:3e:28:f1:2d:f4:ed:52:6f:8d:d6:62:58:41:
         08:6d:f0:90:72:39:6a:d5:ef:c5:d2:2d:72:b7:38:42:73:7b:
         29:a6:e5:83:d5:05:8e:89:00:ae:9d:fd:72:99:3a:cd:2f:fe:
         1a:ca:a6:f3:b5:c7:c0:bf:fe:97:00:a7:7b:03:fd:64:d0:a0:
         b6:44:22:20:56:1b:65:01:46:23:93:27:19:de:2e:d7:52:9a:
         4e:39:82:b3:41:c0:ae:2c:b1:b6:53:c7:e4:f3:d5:39:22:f2:
         e2:df:13:ad:98:89:02:77:fd:55:1d:90:f4:10:30:f4:d7:81:
         db:8c:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org