Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/323830343a316366303a3a2f33322d3332203d3e203631363834.roa
File:                     323830343a316366303a3a2f33322d3332203d3e203631363834.roa (raw, json)
Hash identifier:          q8KaSxoUmxmAFox+phyqcUBgjbNxb02BNugxful3TYw=
Subject key identifier:   DE:52:70:7D:94:22:9D:1B:47:0C:2A:AA:D7:B3:3E:30:2A:2B:48:D2
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       209635EBA17A3E6D0DB736D3B21B32467125117B
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/323830343a316366303a3a2f33322d3332203d3e203631363834.roa
Signing time:             Wed 24 Apr 2024 14:40:32 +0000
ROA not before:           Wed 24 Apr 2024 14:35:32 +0000
ROA not after:            Wed 23 Apr 2025 14:40:32 +0000
asID:                     61684
IP address blocks:        2804:1cf0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:96:35:eb:a1:7a:3e:6d:0d:b7:36:d3:b2:1b:32:46:71:25:11:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Apr 24 14:35:32 2024 GMT
            Not After : Apr 23 14:40:32 2025 GMT
        Subject: CN=DE52707D94229D1B470C2AAAD7B33E302A2B48D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:c6:00:b8:7e:54:57:32:df:65:18:df:35:
                    ec:4d:75:5b:d8:17:e1:1c:d7:a2:74:44:45:cc:ac:
                    2c:d0:8d:ea:57:d3:58:58:9c:e1:35:83:04:4b:98:
                    e7:03:8d:af:af:ed:76:6c:d5:74:cc:b5:e2:6d:80:
                    a4:cf:d9:69:fa:bf:22:90:e0:e9:2e:05:b7:ca:9e:
                    d8:72:dd:8c:99:48:80:3d:b6:1f:bd:33:30:e1:50:
                    b3:34:d2:6b:c0:29:98:a9:3b:99:65:55:60:95:30:
                    19:97:04:a9:74:78:b4:5f:7e:63:d9:97:25:64:37:
                    d1:d3:14:9b:9c:1e:8b:cb:26:06:07:a9:6f:23:03:
                    3a:48:14:f2:dd:4f:ae:85:d5:cf:a0:42:6b:c6:e1:
                    14:b2:4f:69:cb:dd:d0:e4:23:82:54:4c:9b:3f:0e:
                    60:31:1a:2a:17:38:8b:c5:70:cd:c0:b7:f5:e2:5e:
                    ea:6a:da:b4:76:c8:0f:c0:98:51:a3:7b:cd:8d:e4:
                    8f:a7:5f:4a:f0:7f:a9:4d:78:f5:88:89:82:a8:c0:
                    7a:02:16:d9:8a:59:55:1d:2a:b8:5d:20:8c:88:ff:
                    d2:ba:89:d1:18:96:f1:78:d2:48:7d:a1:b6:cc:fd:
                    64:07:d8:51:7e:10:99:b6:19:cd:5e:17:7c:c1:de:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:52:70:7D:94:22:9D:1B:47:0C:2A:AA:D7:B3:3E:30:2A:2B:48:D2
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/323830343a316366303a3a2f33322d3332203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:92:b6:02:e5:30:10:3a:43:2e:22:1f:6d:85:af:00:4c:a1:
         62:77:ad:fe:e1:f5:aa:38:f2:e8:b8:74:47:3a:78:1b:d2:2f:
         2c:cf:c5:56:55:bf:4d:32:36:39:55:ed:49:93:a1:e4:09:20:
         d5:c2:55:15:9d:6e:1f:89:fe:62:00:82:cd:1d:8b:52:b6:85:
         28:c6:12:36:8c:3c:45:66:46:c3:0b:43:0c:63:26:39:5d:08:
         0e:ce:12:a3:10:1b:58:61:34:2c:6a:8f:e8:c0:a4:ee:58:53:
         2f:07:7d:c5:de:c5:3d:65:27:2e:e5:ee:b1:bf:46:dd:84:e9:
         0b:de:70:d6:9d:b2:a7:d2:85:05:de:fc:b6:b4:56:a7:46:d2:
         ff:6f:8d:d1:97:53:c1:2e:d7:05:17:38:16:b9:6f:58:ac:c3:
         80:5d:e8:77:e6:1f:2c:a5:e6:3e:2c:e8:b0:77:c9:d0:12:04:
         11:74:10:da:78:de:86:f7:27:b0:a3:20:88:66:84:ab:77:15:
         b6:09:2c:56:f0:47:a9:2c:54:04:c0:c3:7a:8e:5f:14:cc:dd:
         1e:5e:23:6f:4f:9f:32:b2:5b:ce:cc:fd:fd:e7:3f:1b:2b:98:
         09:57:aa:e6:4c:6c:52:e5:5b:ca:7f:f6:1a:9b:a4:21:bb:02:
         e6:d5:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org