Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a353030303a3a2f33362d3336203d3e20323632363338.roa
File:                     323830343a3736303a353030303a3a2f33362d3336203d3e20323632363338.roa (raw, json)
Hash identifier:          aEWqPnEFb1D5UkS0xdTtrspOzb9h7E7sOTynNu7D7Tc=
Subject key identifier:   12:FC:42:01:2C:6A:02:6C:2F:37:E1:8A:77:86:0E:9C:90:CE:08:70
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       72A5AA358215B2D6563AAC53163B529E0DDBEB74
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a353030303a3a2f33362d3336203d3e20323632363338.roa
Signing time:             Thu 11 Jul 2024 20:15:17 +0000
ROA not before:           Thu 11 Jul 2024 20:10:17 +0000
ROA not after:            Thu 10 Jul 2025 20:15:17 +0000
asID:                     262638
IP address blocks:        2804:760:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a5:aa:35:82:15:b2:d6:56:3a:ac:53:16:3b:52:9e:0d:db:eb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jul 11 20:10:17 2024 GMT
            Not After : Jul 10 20:15:17 2025 GMT
        Subject: CN=12FC42012C6A026C2F37E18A77860E9C90CE0870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:c5:90:73:2c:0f:60:a8:7e:79:37:4d:90:
                    1c:da:28:78:67:e6:fb:c0:94:3e:4b:44:74:50:8c:
                    4f:f1:43:0f:52:21:43:11:fa:71:aa:3a:47:b4:dc:
                    ab:91:e0:ea:7d:a6:c0:ad:94:d6:11:a2:76:33:62:
                    74:1b:f2:2d:a1:ea:70:6d:02:59:d2:3b:70:f7:67:
                    b2:65:e9:45:63:88:95:c6:56:0b:dd:70:a7:ce:6e:
                    f1:20:ea:92:dd:20:55:47:9d:4e:52:ed:a0:66:a9:
                    3a:7a:2b:24:95:f5:63:fb:26:b6:ad:da:48:fa:84:
                    be:5e:66:46:3d:39:f0:0e:a4:23:a5:77:56:bd:50:
                    a7:5d:fe:34:c2:47:10:e9:9c:0f:c7:f2:9c:cf:bc:
                    7c:7a:df:8c:f6:d3:44:c4:00:2d:99:54:67:7d:73:
                    3c:33:3c:cb:c3:48:95:d5:8a:67:d1:bb:61:1d:75:
                    e1:61:b8:d1:ac:95:fd:ca:c0:83:72:47:9f:f3:af:
                    9a:ab:8a:f3:de:0d:65:1d:11:ab:8d:b8:06:cc:a0:
                    a8:42:51:eb:d7:dd:29:11:61:78:e6:5c:87:08:cb:
                    85:5d:45:78:6e:af:13:22:ca:6f:62:9f:ab:e7:ef:
                    c2:69:42:c8:4c:c6:aa:7b:0c:ad:f5:7a:52:95:dc:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FC:42:01:2C:6A:02:6C:2F:37:E1:8A:77:86:0E:9C:90:CE:08:70
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a353030303a3a2f33362d3336203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:760:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:d8:d2:cb:df:04:a6:ae:c2:6c:5e:e4:1f:ee:ef:f7:0e:cb:
         e0:a2:09:29:4e:f7:f4:cf:93:f8:25:c4:e7:ab:b4:25:57:c9:
         f8:f8:38:eb:11:9b:e4:e2:ee:26:4a:9c:5c:aa:dd:ca:da:5c:
         57:3e:7f:86:0d:69:e8:5c:b5:9d:e6:c9:ba:b8:0d:53:3e:90:
         e3:ec:51:c3:3e:44:d3:77:85:f3:a2:72:98:49:89:97:ab:0e:
         c2:c1:8e:ea:9c:7d:33:53:2a:67:ef:36:f6:0f:6b:c7:59:95:
         5d:86:fa:3e:1c:7a:1b:1a:e0:1d:6c:49:39:61:58:46:86:ca:
         b1:7d:bb:2a:c5:6b:f4:7d:73:d6:d9:e1:ae:60:ff:a7:11:30:
         8f:3c:2e:1d:3a:61:56:d1:1e:6b:13:e6:12:b4:60:59:73:a9:
         7b:64:8c:41:3e:1b:ab:c1:62:47:74:9c:bc:dd:fe:ef:59:67:
         01:28:4d:18:6f:74:01:0d:58:fc:a1:95:b6:7e:f3:df:8c:f2:
         f1:eb:b0:93:78:cf:1f:9b:67:53:00:cc:41:3a:37:e2:a7:4b:
         7e:4d:1d:47:3d:d3:ce:4c:9e:10:c4:a6:e5:b8:aa:86:02:a4:
         31:f5:23:3b:d0:1b:05:43:52:c8:b3:ca:69:9c:6c:ad:30:80:
         d1:9e:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:07 2024 by rpki-client on console-fra.rpki-client.org