Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa
File:                     323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa (raw, json)
Hash identifier:          GVwpgHFL6YUvKufsEKxNZZUZccXMhjkBY4ML4wX5Rio=
Subject key identifier:   70:D4:95:0A:88:93:98:2B:E5:C0:2A:3B:28:2E:AD:29:F7:EC:F6:56
Certificate issuer:       /CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
Certificate serial:       5434B92C7D78B28B801A1DA1D0CE033CBE4219BB
Authority key identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa
Signing time:             Wed 03 Apr 2024 22:49:42 +0000
ROA not before:           Wed 03 Apr 2024 22:44:42 +0000
ROA not after:            Wed 02 Apr 2025 22:49:42 +0000
asID:                     52756
IP address blocks:        2801:80:1c10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl
                          rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:34:b9:2c:7d:78:b2:8b:80:1a:1d:a1:d0:ce:03:3c:be:42:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
        Validity
            Not Before: Apr  3 22:44:42 2024 GMT
            Not After : Apr  2 22:49:42 2025 GMT
        Subject: CN=70D4950A8893982BE5C02A3B282EAD29F7ECF656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:2b:30:a2:56:85:08:2e:f0:37:8d:a2:15:
                    16:bd:40:4f:61:ed:1c:54:56:a7:7d:bd:49:7e:c2:
                    fa:2c:8b:75:a8:48:7b:49:53:bb:1d:39:0d:36:34:
                    6d:15:94:78:82:9a:bd:9f:cb:ed:7c:ca:c7:33:63:
                    4a:c0:43:c9:68:5a:c7:fc:b5:cb:80:10:4e:e1:71:
                    c1:02:c3:71:94:ce:e2:69:36:aa:f4:69:a5:25:d9:
                    f1:24:e3:67:73:1b:f0:b7:f9:36:01:38:c1:a1:7a:
                    20:c8:d1:dc:9d:dc:c8:32:bd:da:08:04:09:96:42:
                    d2:ca:3c:49:cd:8b:0b:11:57:02:c5:e9:c8:3e:41:
                    a8:ab:42:e0:dd:65:f0:92:e7:69:0e:4e:d0:ba:79:
                    6e:dd:a4:7e:c1:ec:b7:cd:22:d3:c9:5f:41:5a:96:
                    51:3a:1a:02:e2:07:95:ad:08:06:e2:f9:94:e0:93:
                    c8:7d:4f:e5:1e:43:89:b1:56:88:f6:fe:1f:5e:a3:
                    3f:0c:f5:bd:6f:2a:90:38:e7:ff:91:6b:3c:58:2f:
                    b1:f3:1f:0e:c0:e0:f9:ea:be:fd:d7:6a:3c:67:4b:
                    54:6e:4b:04:56:85:7c:0a:1f:ea:7f:e0:af:7a:ce:
                    03:9d:d4:e1:30:09:51:54:84:1c:8e:6b:2b:93:bd:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D4:95:0A:88:93:98:2B:E5:C0:2A:3B:28:2E:AD:29:F7:EC:F6:56
            X509v3 Authority Key Identifier:
                keyid:FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1c10::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:c3:31:2d:ba:03:0e:32:62:c8:17:ee:58:0f:5e:04:47:
         b2:78:a8:01:23:ad:f5:46:61:6d:09:d1:21:d1:fc:12:fc:47:
         14:64:d0:72:7c:72:58:d5:e7:fb:9f:02:3a:0f:2b:78:60:9b:
         75:52:26:4a:85:23:6f:d9:f6:70:5e:2e:ab:fe:2b:79:5e:53:
         f9:53:df:8c:c1:2a:8a:a8:d5:c9:96:1c:dc:f3:65:bc:70:e6:
         a2:a5:ce:a5:b7:73:1f:01:60:dd:cc:0a:3b:20:78:80:d7:3b:
         3b:9d:6f:bd:cf:1e:a0:ec:cc:7c:9c:16:37:70:65:1d:c2:35:
         75:72:d7:50:64:65:aa:4a:53:2b:4b:41:11:26:72:8a:a8:2b:
         9a:5f:67:6d:f1:b9:9e:04:4f:58:56:fd:ea:01:42:d5:f5:02:
         e0:a2:a7:b5:9f:4e:22:f7:27:8b:4e:b2:5f:06:88:6c:dc:81:
         ce:49:0f:06:d5:09:5d:87:80:46:93:53:da:96:71:21:36:30:
         90:38:2b:e4:f2:c1:0e:41:aa:5a:12:5e:18:dd:dc:7a:14:3e:
         fc:24:31:51:f9:62:1b:98:ba:e3:fd:d6:4f:e7:83:a4:bf:e5:
         47:25:d3:80:53:26:1f:f8:4a:61:d0:69:a1:26:d7:b8:1e:7d:
         86:4a:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org