Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
File:                     323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (raw, json)
Hash identifier:          HZXxIF4i97WK+NxLmhVdMCjIzFkgSy9zE0XGNMfzrHU=
Subject key identifier:   FE:3B:45:D3:04:BB:24:C1:87:66:92:EF:5B:45:84:CE:89:DE:7F:3B
Certificate issuer:       /CN=65E1DB5984802637A5800225A87C14E97A15601B
Certificate serial:       58102420148A257C8231B807296630B3F29F1FAF
Authority key identifier: 65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
Signing time:             Thu 04 Apr 2024 17:47:11 +0000
ROA not before:           Thu 04 Apr 2024 17:42:11 +0000
ROA not after:            Thu 03 Apr 2025 17:47:11 +0000
asID:                     265397
IP address blocks:        2804:3374::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl
                          rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:10:24:20:14:8a:25:7c:82:31:b8:07:29:66:30:b3:f2:9f:1f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E1DB5984802637A5800225A87C14E97A15601B
        Validity
            Not Before: Apr  4 17:42:11 2024 GMT
            Not After : Apr  3 17:47:11 2025 GMT
        Subject: CN=FE3B45D304BB24C1876692EF5B4584CE89DE7F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:dc:11:a7:f7:72:0e:96:1b:e2:6f:e5:3b:
                    be:97:fd:09:d2:09:31:fa:27:16:b7:c4:c5:7d:23:
                    97:d9:a3:92:10:6f:58:df:76:78:ea:34:26:d4:80:
                    27:f4:f6:8a:99:a7:04:0c:bb:eb:7e:b8:d6:7a:66:
                    c7:9b:88:13:49:03:bf:de:cf:93:07:06:79:26:55:
                    ae:f2:6d:44:a8:7f:03:4d:4e:8f:6a:92:6d:53:c5:
                    e5:58:cb:b2:ae:fe:d7:ca:1e:e1:34:6b:2a:68:29:
                    61:40:8c:ab:16:e0:9d:df:34:94:97:30:1d:c2:e5:
                    c3:83:ef:e3:1a:7c:88:55:e4:63:f4:ee:64:f1:99:
                    a5:37:74:3b:1d:5b:d0:66:b3:e3:a5:0f:03:32:10:
                    57:bd:3f:f9:f5:da:de:ce:78:55:88:bc:55:c8:fc:
                    bb:f5:08:92:a0:e7:10:c7:f5:93:69:c1:f3:c9:b6:
                    12:1d:f2:b0:5c:ae:c3:bc:ae:9a:24:54:33:6b:b7:
                    ae:37:39:4f:45:43:c3:01:96:ea:61:90:a6:fe:2e:
                    08:64:04:dc:12:8b:2c:ed:8c:72:3d:2a:b6:a8:46:
                    f8:59:57:5b:e6:70:0b:6b:59:fa:0b:d4:14:91:7c:
                    34:7c:7f:f2:55:d0:cc:4b:a4:d8:5b:37:8f:85:54:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3B:45:D3:04:BB:24:C1:87:66:92:EF:5B:45:84:CE:89:DE:7F:3B
            X509v3 Authority Key Identifier:
                keyid:65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3374::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:96:87:75:43:09:06:e5:91:b1:22:95:56:64:b4:4e:7b:6d:
         02:84:5b:1f:d3:97:51:cd:ef:45:ca:14:ab:80:45:83:5f:8b:
         db:de:83:90:06:5c:0a:fa:6f:e7:ab:d7:dd:7c:6b:39:4f:cf:
         01:57:54:bd:02:08:ae:9b:04:4a:d4:ae:7b:58:71:d2:c9:9f:
         ca:8b:07:f1:7e:16:e8:bd:76:1c:11:07:ea:d0:97:bd:86:6a:
         e8:9e:16:67:3b:6d:27:7e:8c:8b:24:8d:a9:00:1e:1d:f6:f9:
         3f:12:c8:de:62:02:76:b2:77:6d:35:13:d4:61:e1:41:30:e7:
         42:a6:cc:e6:51:16:fb:69:8c:55:15:20:7b:d6:a4:a2:b7:69:
         46:dd:ee:79:59:2d:ec:79:2c:19:4b:e7:8a:96:77:93:0a:9d:
         73:1a:9e:e9:fa:30:eb:e5:3b:00:e8:83:db:44:f6:7f:11:17:
         d3:f4:3e:55:88:4c:6c:a5:be:84:1b:13:97:f5:e9:13:ab:d3:
         e5:63:86:13:46:3f:b8:26:c4:9e:1d:c2:c6:da:b3:4c:fb:d8:
         06:57:cb:32:bc:ea:54:9d:5f:19:43:9a:41:5d:61:85:df:ba:
         a7:96:d4:2f:a7:18:e8:08:17:d5:b9:66:67:59:4e:45:1a:ac:
         9f:0c:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 08:26:01 2024 by rpki-client on console-fra.rpki-client.org