Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa
File:                     323830343a313737343a3a2f33322d3336203d3e20323633313435.roa (raw, json)
Hash identifier:          fWIaZ8+lChCvxywPKB16iZHHMAkNIUsi4TH00+iceuI=
Subject key identifier:   76:C0:1E:4F:64:B9:E0:2D:68:FB:E1:86:62:7C:FD:73:CD:CB:F7:54
Certificate issuer:       /CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
Certificate serial:       378300E1DECE8DF5EC1AF708831F35AF5559B2B9
Authority key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa
Signing time:             Wed 03 Apr 2024 18:39:22 +0000
ROA not before:           Wed 03 Apr 2024 18:34:22 +0000
ROA not after:            Wed 02 Apr 2025 18:39:22 +0000
asID:                     263145
IP address blocks:        2804:1774::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl
                          rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:83:00:e1:de:ce:8d:f5:ec:1a:f7:08:83:1f:35:af:55:59:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
        Validity
            Not Before: Apr  3 18:34:22 2024 GMT
            Not After : Apr  2 18:39:22 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:c3:f7:1a:f1:f1:32:75:14:da:9c:bc:02:
                    e4:ef:85:52:fc:97:2b:f6:90:07:5f:45:0d:1f:7b:
                    58:93:a0:40:c3:30:1f:c3:33:45:28:a2:3d:c1:e4:
                    7d:51:1f:6d:e2:55:fb:cf:cd:2e:ae:5e:b7:e9:6a:
                    5c:28:05:61:b8:3d:c0:15:e8:d3:55:62:09:20:db:
                    47:cc:49:e7:86:de:f7:e2:78:14:b4:48:4d:3d:3b:
                    31:3a:eb:0e:16:08:d4:a5:60:7a:38:96:e6:3a:1d:
                    9f:9b:2b:c1:62:bb:fb:48:be:87:0a:15:1f:c9:18:
                    b1:a4:b2:b5:22:7d:f1:15:1b:46:18:ac:85:a9:96:
                    ec:c9:0e:7e:f0:85:36:7c:4d:27:03:d9:39:0e:cd:
                    84:13:81:c2:13:ff:db:47:ac:c9:c8:93:2e:db:1a:
                    a3:c5:37:9a:22:da:b8:87:c1:55:ef:88:1f:8a:93:
                    b6:d7:55:00:ef:6a:ee:6f:0d:f5:b1:34:b3:bd:3b:
                    ab:18:a1:e0:56:1b:41:95:63:48:f7:37:2c:17:a1:
                    7f:3e:e4:11:5c:44:2a:64:31:64:cd:75:a9:ec:08:
                    cb:2e:21:c0:f4:e0:d8:b1:f1:fc:6a:a0:cd:c6:fb:
                    df:b6:33:85:74:10:b8:93:e9:6c:c4:2d:43:d8:9d:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C0:1E:4F:64:B9:E0:2D:68:FB:E1:86:62:7C:FD:73:CD:CB:F7:54
            X509v3 Authority Key Identifier:
                keyid:FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1774::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:5e:49:49:cb:ef:99:f5:c4:44:a0:a5:98:53:f2:70:01:85:
         9d:e9:21:6d:36:3c:77:f3:4f:d7:58:8f:72:63:74:a7:0f:02:
         be:41:e4:8b:89:95:2e:29:26:23:1f:08:0c:12:9a:3e:15:d7:
         dd:39:51:48:d6:84:a9:ac:1f:48:2e:50:44:23:1e:1c:83:21:
         40:6f:90:52:e2:d2:15:ee:84:87:f8:b1:1e:9c:7a:c0:78:c9:
         0f:8d:ed:16:13:f7:56:ec:7e:9e:55:98:fb:9c:51:e5:74:fc:
         e1:63:8c:63:5d:3c:21:d8:60:85:3a:a2:bf:34:ce:33:3d:8f:
         c6:17:35:f4:b3:63:a9:b9:d7:0b:15:7e:ea:9d:49:1c:5b:40:
         6c:30:5a:6a:bd:21:f7:ae:11:6a:14:91:a7:c6:97:ca:80:d8:
         b9:4a:db:41:92:1f:83:82:0b:28:73:95:3a:9e:82:85:b1:58:
         71:b6:29:c0:c3:4f:b0:fc:6b:5e:8b:66:a1:e7:a1:9c:a8:50:
         a9:ea:ca:17:e8:7b:c1:aa:27:cc:63:3e:58:57:2f:56:a0:9f:
         56:f8:cb:85:90:5e:2d:2d:f8:99:ad:44:08:cf:3e:86:4c:39:
         da:ae:59:8d:8c:d1:00:5e:1e:b8:65:32:bd:97:0d:e4:8f:80:
         bf:49:f2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:33 2024 by rpki-client on console-ams.rpki-client.org