Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/323830343a6133633a3a2f33322d3332203d3e203533303534.roa
File:                     323830343a6133633a3a2f33322d3332203d3e203533303534.roa (raw, json)
Hash identifier:          f2PgjJuB+1RG1+Zzp60Eg7m16/ZUfoHOgEmUb/j4Aow=
Subject key identifier:   0E:A0:84:DB:90:03:DB:7E:0E:A3:AE:98:7F:F5:AE:65:15:89:EF:1B
Certificate issuer:       /CN=FECB959E21E756261292E2137CDE9CAD85492B0A
Certificate serial:       265FF2568F41564FF83921ED9DD299265DC5F88F
Authority key identifier: FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/323830343a6133633a3a2f33322d3332203d3e203533303534.roa
Signing time:             Mon 09 Sep 2024 15:06:02 +0000
ROA not before:           Mon 09 Sep 2024 15:01:02 +0000
ROA not after:            Mon 08 Sep 2025 15:06:02 +0000
asID:                     53054
IP address blocks:        2804:a3c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5f:f2:56:8f:41:56:4f:f8:39:21:ed:9d:d2:99:26:5d:c5:f8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Validity
            Not Before: Sep  9 15:01:02 2024 GMT
            Not After : Sep  8 15:06:02 2025 GMT
        Subject: CN=0EA084DB9003DB7E0EA3AE987FF5AE651589EF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:19:df:61:2a:dc:af:2e:47:4b:73:d8:c5:
                    e5:c1:dd:56:e5:09:63:cf:6e:da:4f:18:56:44:2d:
                    16:ec:e4:e5:51:f5:3b:79:72:59:a5:ca:c1:2e:7e:
                    9a:3e:60:b9:75:c1:58:bb:14:62:0d:7d:8d:8d:3a:
                    8b:89:5b:b3:a9:6e:23:20:f7:19:dc:20:7a:d0:42:
                    a3:1a:97:92:8b:74:5b:bd:da:b0:47:61:5a:5b:4a:
                    b5:30:95:43:c2:76:4c:e0:1e:6a:98:92:dd:47:54:
                    dd:c9:59:ae:4a:1a:a8:a5:79:2c:04:9e:c4:fb:02:
                    77:eb:61:f5:9a:14:e4:c3:fc:b8:ae:19:d0:9a:71:
                    1c:f4:f0:29:20:4a:81:ef:c0:8d:7c:7a:11:17:2d:
                    16:24:ad:2a:15:64:8f:ab:3b:61:a9:29:3c:10:08:
                    cf:61:0d:bd:2f:50:d8:c1:f1:85:ba:ca:78:15:42:
                    80:ed:f5:3c:cc:45:c3:6e:be:23:cd:cf:66:37:4a:
                    d0:b2:86:16:a4:8a:c9:b7:a9:1b:72:8d:b0:b9:15:
                    92:28:37:cb:a5:d8:4a:da:d8:21:7c:db:e7:82:bb:
                    bc:d2:24:88:87:17:be:6b:3a:0a:dd:64:0f:10:3a:
                    6e:2c:9b:8a:0c:95:88:44:be:3d:71:af:98:86:9f:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:84:DB:90:03:DB:7E:0E:A3:AE:98:7F:F5:AE:65:15:89:EF:1B
            X509v3 Authority Key Identifier:
                keyid:FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/323830343a6133633a3a2f33322d3332203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:7c:78:46:c1:ba:12:6b:89:68:f2:a9:82:ac:8f:6a:4b:
         b6:5b:ab:01:11:bb:e5:ca:a3:4e:45:e1:e9:23:32:01:ca:2a:
         62:ff:ce:0c:eb:3a:c4:5d:32:ee:6b:f4:51:e1:5f:69:d4:b0:
         44:01:ec:1b:df:94:bd:b3:91:80:0b:20:35:71:d0:7b:c4:51:
         8f:04:05:53:eb:12:44:ec:40:ad:27:2b:44:d5:a9:14:94:24:
         79:1e:82:ea:3d:6a:15:cd:0b:5d:90:4f:8b:8b:c6:e1:55:9e:
         f8:91:64:9d:45:d1:72:1c:57:53:00:9d:af:2b:de:5f:b8:ef:
         88:80:21:9f:b1:8f:0a:16:76:94:e5:cf:1b:0e:34:93:8e:81:
         b4:52:82:7e:ec:96:d3:e2:67:70:c9:f8:17:c0:ec:c5:63:18:
         a1:47:b0:94:c5:16:71:72:a2:81:4c:b2:f7:46:ff:ad:31:6c:
         8a:5a:a5:f2:3e:49:38:e6:83:22:39:2d:8e:85:1a:4f:8a:54:
         5d:f2:df:7e:c5:a5:c0:4e:01:00:00:9e:51:d6:12:e2:de:a6:
         c9:c7:93:05:c8:90:89:e7:d3:34:56:fe:5e:98:c0:4e:ed:ef:
         df:39:a8:c6:1d:50:88:9c:31:57:21:d8:11:ba:fa:a3:98:9a:
         ab:24:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org