Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa
File:                     323830343a333239303a3a2f33322d3336203d3e20323635303835.roa (raw, json)
Hash identifier:          vjnPYXnNUC7k1gFauvYKVuARtEv/DkWsMRqTduZmltE=
Subject key identifier:   DE:9E:96:E7:1F:30:BC:5B:8B:DB:1F:96:1B:69:D4:BA:50:9C:23:F2
Certificate issuer:       /CN=FB16D49E1AC4BE9524150A7FB2C98D0147D2757C
Certificate serial:       769BC3383FA1EA6A8E085788739F421A4225549A
Authority key identifier: FB:16:D4:9E:1A:C4:BE:95:24:15:0A:7F:B2:C9:8D:01:47:D2:75:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa
Signing time:             Tue 06 Aug 2024 18:41:27 +0000
ROA not before:           Tue 06 Aug 2024 18:36:27 +0000
ROA not after:            Tue 05 Aug 2025 18:41:27 +0000
asID:                     265085
IP address blocks:        2804:3290::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.crl
                          rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9b:c3:38:3f:a1:ea:6a:8e:08:57:88:73:9f:42:1a:42:25:54:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB16D49E1AC4BE9524150A7FB2C98D0147D2757C
        Validity
            Not Before: Aug  6 18:36:27 2024 GMT
            Not After : Aug  5 18:41:27 2025 GMT
        Subject: CN=DE9E96E71F30BC5B8BDB1F961B69D4BA509C23F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:38:f9:b1:52:4a:01:06:d7:bc:b4:dc:d1:
                    f5:5a:56:95:a5:c9:cc:77:b4:1b:1d:5b:36:4a:8b:
                    81:b6:37:73:d2:db:69:d3:01:56:1a:2d:34:e6:e6:
                    0f:72:54:47:4b:74:11:31:0f:5a:7f:ea:d8:88:41:
                    07:ec:5f:ec:6e:e7:33:1b:b2:52:58:c1:19:0e:f8:
                    d5:09:f2:e0:7c:92:a5:13:da:55:82:36:e2:7d:7c:
                    ec:89:5c:d3:2e:ec:6a:cb:f2:bc:14:e0:fa:ba:5b:
                    88:d7:bd:9a:bf:ea:c3:f3:68:e1:0f:26:66:6d:39:
                    e7:9e:25:46:1e:59:bb:3c:fa:0f:c0:00:5e:fc:ee:
                    d0:ed:fd:fc:d6:70:5a:ab:28:cb:7e:bd:98:c3:79:
                    00:55:db:7d:af:43:0a:a0:83:8c:eb:02:37:81:e9:
                    e2:60:7c:79:0f:8d:87:af:c2:86:f7:47:7c:6c:83:
                    a0:08:61:91:eb:3e:97:2e:a1:57:60:e4:c0:5b:95:
                    0c:39:f0:76:88:f5:62:8e:5e:43:c0:9a:1c:8f:ae:
                    ac:f2:ba:55:c9:a4:66:72:52:01:86:19:64:76:b7:
                    f8:37:ea:10:f1:35:86:82:2b:3f:a0:f7:ba:56:36:
                    f6:fc:e6:dc:96:3c:ea:74:52:e2:cf:df:47:ee:dd:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9E:96:E7:1F:30:BC:5B:8B:DB:1F:96:1B:69:D4:BA:50:9C:23:F2
            X509v3 Authority Key Identifier:
                keyid:FB:16:D4:9E:1A:C4:BE:95:24:15:0A:7F:B2:C9:8D:01:47:D2:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:59:bb:46:c9:a5:99:b3:b9:1d:11:f6:d5:5e:06:d0:7d:55:
         ec:fa:40:f0:db:b2:9b:7f:0f:5f:bc:a8:1a:1e:37:b8:9f:d7:
         e5:a5:d1:20:fe:b1:1c:3d:da:b3:ba:ca:ce:ac:e5:22:94:ee:
         c1:cc:f7:a9:b6:37:d0:b7:d8:ba:5e:f6:41:d9:ce:89:e9:2b:
         7f:b0:f3:08:d0:3c:f8:b0:b8:6c:5f:c1:7f:96:d6:df:9f:5f:
         09:c9:35:f9:44:03:03:1a:b6:d4:b3:29:40:cf:66:ec:0a:8d:
         11:c3:b2:d0:55:f9:c5:fa:d9:2d:dc:08:0c:98:ef:9e:47:9d:
         62:07:68:85:3f:67:0d:04:dc:76:85:7b:eb:bc:a3:81:d4:fb:
         d1:b3:21:86:ba:36:48:1d:82:41:53:62:44:70:4e:82:7e:78:
         f4:f9:7a:da:0d:f5:cd:04:1d:6c:50:59:4e:86:db:e9:53:d9:
         6b:d6:c1:ac:4b:09:4c:1c:71:5b:f8:b0:dd:d6:88:66:ab:bb:
         3e:9c:7d:c1:0d:ce:2e:61:c6:13:46:4c:59:1c:fb:30:d1:69:
         f7:56:11:ed:1e:c3:f6:31:c0:d7:8e:b7:60:f1:38:70:b7:1c:
         bc:fc:ff:1d:17:19:ea:a5:38:32:b5:19:7a:d1:81:37:6f:cb:
         d8:1f:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org