Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
File:                     323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (raw, json)
Hash identifier:          UFxm0EcE6d0BKJqu3rw3MiPgU8eMIQHW0Plbsv1p2QE=
Subject key identifier:   D6:08:CB:A4:69:A0:8E:4F:1A:F5:A4:DF:51:8F:7D:40:ED:87:02:F3
Certificate issuer:       /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial:       5D508AFFCC7C157468DD7B29D6CB77C28D7EC267
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
Signing time:             Wed 03 Apr 2024 23:25:46 +0000
ROA not before:           Wed 03 Apr 2024 23:20:46 +0000
ROA not after:            Wed 02 Apr 2025 23:25:46 +0000
asID:                     273814
IP address blocks:        2804:8cac:2100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
                          rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 11:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:50:8a:ff:cc:7c:15:74:68:dd:7b:29:d6:cb:77:c2:8d:7e:c2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Validity
            Not Before: Apr  3 23:20:46 2024 GMT
            Not After : Apr  2 23:25:46 2025 GMT
        Subject: CN=D608CBA469A08E4F1AF5A4DF518F7D40ED8702F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:97:14:60:86:9a:7c:b7:e6:79:77:0c:5f:
                    96:9f:d0:9e:c1:cb:35:70:72:8f:bd:5d:7d:85:ca:
                    ac:32:bb:d6:50:e7:c3:c4:09:3b:0b:8c:d9:81:99:
                    58:12:bb:8f:9b:13:7f:21:f0:98:a0:f4:30:a6:bd:
                    2b:d2:b1:43:ec:1d:f1:e7:0e:6b:be:e6:d1:c8:48:
                    b5:6b:0a:13:99:8e:18:7f:72:0f:f9:39:04:f1:4c:
                    46:69:e8:81:ad:88:1f:1a:51:4e:9b:4f:41:5e:de:
                    6d:80:42:3a:f3:e4:1d:3c:9c:30:3e:51:0b:54:d2:
                    49:d2:b2:a3:cf:73:73:e5:44:b9:07:a3:24:31:b1:
                    39:a2:7d:b4:a9:36:10:62:33:96:c6:cc:02:3b:95:
                    4e:b5:6d:43:a9:9f:0c:41:bf:43:07:51:cb:1a:d2:
                    9f:df:a4:f2:64:fe:b0:b5:8d:33:b9:58:2f:ab:2b:
                    24:f8:af:f5:cc:9c:3f:75:3d:49:c3:38:a8:3d:73:
                    70:2e:1c:05:5f:87:40:f0:8b:27:a8:ac:30:ae:30:
                    7d:69:a1:ce:8f:6b:74:c3:c4:87:24:20:a9:f9:b3:
                    59:f5:41:d4:fa:7a:49:2d:f2:58:9d:da:b7:27:d9:
                    3c:7f:a3:d4:e3:71:57:eb:eb:48:fd:1d:88:3f:d8:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:CB:A4:69:A0:8E:4F:1A:F5:A4:DF:51:8F:7D:40:ED:87:02:F3
            X509v3 Authority Key Identifier:
                keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:01:8d:ae:61:d9:76:82:e4:87:e1:fa:23:37:c6:6a:02:
         6f:c7:d2:55:90:5c:0a:15:4e:e9:7e:f1:95:cf:49:d3:9a:d0:
         d3:4d:36:38:3e:b9:88:4e:48:af:4d:45:3d:df:11:fb:2d:47:
         d8:89:83:55:07:f6:4c:a9:b2:c7:4f:61:75:fc:c1:dc:b0:aa:
         f0:b2:18:89:8c:a5:7c:cc:7f:5e:64:1c:3b:7e:e7:bf:71:26:
         a7:9d:23:f1:6d:07:fb:ae:b2:22:a7:28:e6:d3:23:64:12:52:
         67:0d:a7:b3:d9:1f:71:ce:43:e3:0e:07:d0:c5:67:e3:f4:83:
         8f:d2:83:3d:60:3c:65:31:8b:82:45:34:49:0d:ce:cc:c1:5b:
         6c:25:a3:08:6a:b3:d2:00:db:f4:3d:cf:a2:1c:3d:b4:ce:68:
         ad:49:d2:34:c3:8c:70:21:28:45:0b:f3:23:11:42:b9:72:05:
         64:a8:66:73:e9:31:73:b3:66:73:c0:b8:e0:d2:f9:17:e0:a7:
         99:d1:8a:dd:81:f3:81:71:da:43:26:12:4c:60:10:dc:30:0b:
         0c:e6:da:89:3b:c8:41:5c:6b:0d:b1:d2:9d:51:78:87:ed:22:
         71:39:e4:1f:87:9c:65:c2:8a:fb:0b:59:b4:63:8d:89:8f:8d:
         01:de:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 10:43:04 2024 by rpki-client on console-ams.rpki-client.org