Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030313a3a2f34382d3438203d3e20323633363631.roa
File:                     323830343a313132383a383030313a3a2f34382d3438203d3e20323633363631.roa (raw, json)
Hash identifier:          NkfiRwQyXsWg5FGGVmo/Q5pspKoe/LCZhx5b+7SLWog=
Subject key identifier:   9A:AA:30:2A:E2:D0:7A:20:F0:8D:4B:E0:26:99:43:44:27:BE:78:17
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       0EAEE97D2C664C3CD4466CB589344FD3AA8B3D0B
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030313a3a2f34382d3438203d3e20323633363631.roa
Signing time:             Sun 20 Aug 2023 15:42:52 +0000
ROA not before:           Sun 20 Aug 2023 15:37:52 +0000
ROA not after:            Sun 18 Aug 2024 15:42:52 +0000
asID:                     263661
IP address blocks:        2804:1128:8001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 18:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ae:e9:7d:2c:66:4c:3c:d4:46:6c:b5:89:34:4f:d3:aa:8b:3d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Aug 20 15:37:52 2023 GMT
            Not After : Aug 18 15:42:52 2024 GMT
        Subject: CN=9AAA302AE2D07A20F08D4BE02699434427BE7817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:af:6d:6d:43:84:47:c8:f8:c3:57:4a:1c:
                    2a:3e:b4:cd:53:cf:bb:e9:20:f1:09:21:0a:ab:42:
                    6c:0c:7d:d0:a5:5f:d5:01:f7:65:91:de:77:bc:d8:
                    f2:f0:6a:f7:05:7f:ad:bc:ba:21:4d:1c:48:d2:d6:
                    7c:9a:e2:d5:cf:d2:6b:08:85:aa:d1:bd:9f:8b:a2:
                    63:aa:79:9c:85:2b:35:be:7b:ef:ec:4a:a8:64:f2:
                    1c:d0:63:15:72:7b:f2:cd:e2:bf:d0:77:d1:02:0d:
                    cd:7a:01:ea:5b:ea:7f:0e:99:b0:7e:93:80:80:f0:
                    23:74:2a:4d:be:c9:ca:c4:ff:3a:51:1f:78:bc:19:
                    3c:c6:9e:01:ea:7c:c4:bb:3f:3b:ee:6d:b7:6b:b2:
                    1a:3c:6b:90:8f:46:2e:c9:6d:7e:11:cb:30:b6:9a:
                    83:a0:f7:0e:f0:91:0c:bf:74:5d:75:a4:52:eb:a1:
                    ab:84:da:90:ff:56:70:58:d3:51:b3:90:2b:af:76:
                    da:45:52:a3:18:80:6d:06:e8:17:13:a1:15:fe:67:
                    2d:6c:e6:22:ec:73:79:4a:8d:1f:7c:8e:a4:fb:9f:
                    cb:72:b7:61:b4:0b:a6:97:50:d4:a5:56:c4:0e:bf:
                    f9:15:16:b8:49:cd:c0:92:ed:1c:34:f2:8f:48:e3:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AA:30:2A:E2:D0:7A:20:F0:8D:4B:E0:26:99:43:44:27:BE:78:17
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030313a3a2f34382d3438203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:1f:05:f2:1f:3c:4b:76:30:b4:ff:ab:7f:d5:70:c2:d0:fe:
         15:58:a2:9e:ce:8d:9b:99:38:9f:85:d5:b4:e2:54:8b:c1:9c:
         ca:72:52:4c:57:04:88:e9:50:6c:e6:4e:9b:59:7f:be:a6:4a:
         15:1a:03:b6:38:3a:aa:2d:ff:3c:e5:7a:46:0b:38:c1:82:da:
         5a:5f:b0:1a:dc:d4:0e:4f:71:f9:d3:ea:11:e2:26:32:5c:c3:
         37:68:7c:0d:10:8e:e0:dd:4f:cd:1d:dd:ca:34:c6:f1:57:1a:
         ad:58:10:f6:60:cd:51:7d:f8:bc:f6:30:33:4e:a0:19:17:0a:
         cd:a0:7d:d7:eb:dd:8d:38:6e:34:63:16:13:e2:18:52:4e:7b:
         42:1e:0a:34:36:f9:81:87:e4:9b:97:85:73:b9:4d:ed:ae:9d:
         ee:1d:8d:e8:97:f2:90:07:cf:e6:d2:6c:39:15:17:98:b9:c2:
         33:5e:0f:74:61:bf:5e:e0:f2:3f:c4:9b:4d:f5:15:dd:e9:53:
         34:be:b2:fb:68:0d:d8:f7:df:15:43:8c:ec:7e:41:a0:70:e5:
         1a:c8:a9:da:f1:f4:e5:61:b3:96:58:88:ac:d2:b7:0a:6c:a9:
         ce:d3:1a:28:7e:88:84:e0:9c:ca:48:8f:48:b8:de:7a:9f:c5:
         34:c8:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:39 2024 by rpki-client on console.sobornost.net