Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa
File:                     323830343a316364343a3a2f33322d313238203d3e203631363738.roa (raw, json)
Hash identifier:          ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=
Subject key identifier:   FB:F4:0E:73:73:61:E5:EC:7E:3B:8C:9C:A1:82:83:9E:49:7B:49:D8
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       1874A1D5DC4613BAF1924E5D92D19B4959AA70C1
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa
Signing time:             Sat 10 Aug 2024 23:17:38 +0000
ROA not before:           Sat 10 Aug 2024 23:12:38 +0000
ROA not after:            Sat 09 Aug 2025 23:17:38 +0000
asID:                     61678
IP address blocks:        2804:1cd4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:74:a1:d5:dc:46:13:ba:f1:92:4e:5d:92:d1:9b:49:59:aa:70:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Aug 10 23:12:38 2024 GMT
            Not After : Aug  9 23:17:38 2025 GMT
        Subject: CN=FBF40E737361E5EC7E3B8C9CA182839E497B49D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:d3:b0:91:6a:30:99:2f:d1:ac:3d:4a:8e:
                    01:e9:e0:3f:48:04:c7:9a:61:2a:bd:2f:ed:1c:74:
                    a3:a1:c8:22:5c:9e:4c:a8:3c:3f:56:4f:fc:f5:92:
                    29:9e:0d:97:2e:32:9f:08:4b:bf:32:bb:61:73:a2:
                    0c:5c:fe:75:48:7b:df:ae:a8:db:6c:3c:ee:be:1b:
                    36:6a:00:18:3c:02:02:d8:3a:3b:fe:25:7b:43:de:
                    73:82:e8:3b:a9:6e:82:3f:37:ff:0a:16:94:02:e6:
                    6b:af:bc:01:a1:75:af:fb:e4:a5:6f:09:02:4c:aa:
                    4d:56:dc:7b:a0:97:80:59:e5:5d:d8:4c:e1:04:4f:
                    17:47:cc:de:2f:f1:71:de:e7:3a:85:43:90:12:59:
                    3a:99:42:28:52:aa:3c:6e:58:44:1d:ff:3c:e2:af:
                    64:c2:94:1f:f2:28:c2:b9:c6:33:2b:25:de:5e:f2:
                    ed:37:6d:5c:42:c6:d7:5b:90:73:22:d1:4a:5e:f8:
                    ed:4d:ae:d9:63:aa:2a:7a:00:1c:8b:67:b2:c0:56:
                    3b:fd:64:71:f9:29:9c:25:9f:8f:8b:92:26:ba:a5:
                    76:a7:59:90:a7:5e:6c:21:a3:89:8c:ff:df:ea:73:
                    8a:0e:13:b7:f5:ce:b8:f8:e6:f8:d9:89:5f:b8:b0:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:0E:73:73:61:E5:EC:7E:3B:8C:9C:A1:82:83:9E:49:7B:49:D8
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:b1:ef:aa:65:7c:cf:9f:6b:4e:4c:32:1e:c4:9a:38:89:f9:
         5a:dd:cc:9b:91:ab:90:21:78:3a:a5:64:35:f7:91:c3:35:e1:
         53:30:1c:1e:06:45:d2:da:38:cd:44:e0:c1:30:75:67:71:a0:
         d1:23:b9:43:46:3f:8f:80:5a:74:b1:e1:99:71:ad:bb:57:9f:
         61:cc:b4:8e:76:91:7d:c1:e9:65:37:c2:fd:48:f3:ca:88:58:
         07:b3:b8:ac:88:af:11:63:64:aa:d1:e7:de:3a:0a:d2:43:e5:
         f7:d5:25:a2:39:04:1f:e5:77:fe:74:95:7d:c0:0e:b2:24:aa:
         b3:20:33:a7:ff:61:f7:08:47:16:b8:e3:63:62:71:92:0a:d6:
         fb:66:81:c3:57:16:8b:d4:aa:34:a1:c4:b7:91:77:d1:c6:6b:
         2a:b5:aa:7e:76:14:95:a0:5d:3a:82:e3:8e:34:e3:88:fa:ef:
         49:d5:e0:5b:08:a8:1a:fa:94:cd:ce:32:54:01:a6:f2:4c:ff:
         88:44:3f:4b:a7:a9:b6:0f:0b:56:17:63:66:db:a3:c0:52:05:
         61:ee:c7:56:b4:4b:78:f2:ef:28:54:bd:ce:74:8a:21:4b:3c:
         bf:c3:eb:c0:4b:2b:49:79:b8:be:df:b4:74:9b:03:64:64:6d:
         56:49:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:11 2024 by rpki-client on console-ams.rpki-client.org