Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          27EO9fFrKPgnW3OcOuJL9vMuqY+3e28aA/A48l+UxvI=
Subject key identifier:   52:E5:AB:17:AD:4E:A9:BE:81:F4:0A:B9:27:20:3A:11:26:DF:E1:A4
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       6C1B96C1B397F3B6FBCB53DFEEB7248D4894433D
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Thu 04 Apr 2024 07:57:02 +0000
ROA not before:           Thu 04 Apr 2024 07:52:02 +0000
ROA not after:            Thu 03 Apr 2025 07:57:02 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaab::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1b:96:c1:b3:97:f3:b6:fb:cb:53:df:ee:b7:24:8d:48:94:43:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Apr  4 07:52:02 2024 GMT
            Not After : Apr  3 07:57:02 2025 GMT
        Subject: CN=52E5AB17AD4EA9BE81F40AB927203A1126DFE1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:b7:a8:0f:d2:7a:a2:61:d8:cb:ef:74:e7:
                    0d:14:99:11:44:de:0c:13:12:7a:2a:13:db:28:6d:
                    f5:f1:e9:2e:16:18:3b:91:80:99:dc:04:44:47:c9:
                    28:4c:ab:a8:14:57:d9:63:a3:39:84:3e:1f:9e:03:
                    74:bb:f6:5b:00:94:d3:92:62:94:65:e5:be:df:6f:
                    48:f2:0e:3f:c3:49:53:ea:16:e8:71:87:d8:17:25:
                    56:e5:18:82:bf:f3:bb:e7:7c:6d:41:0a:52:f9:76:
                    86:9f:4f:ca:c3:b9:f4:d0:d7:08:48:d9:8c:a3:a4:
                    fc:92:9a:ec:3f:c5:55:dc:7b:8c:18:4b:82:ea:e5:
                    eb:fe:85:5d:15:39:07:ff:84:97:5a:4b:84:8d:c7:
                    79:d2:a1:29:8b:5e:a5:e8:bb:c9:f8:78:69:6b:a8:
                    c2:90:13:7f:0f:f9:f1:e9:4e:eb:df:3d:88:58:5b:
                    01:da:ff:b3:ee:fa:9b:09:a6:3d:df:32:e0:58:e6:
                    5b:51:9e:c6:99:1c:0d:4c:73:ed:57:23:f9:7b:b4:
                    c8:46:f4:ed:09:df:f0:11:33:dd:28:2a:0f:ed:01:
                    66:da:03:9e:77:c3:8b:03:51:96:c6:f0:80:60:e6:
                    b7:8d:59:ed:aa:25:94:9c:93:90:e5:c1:9f:a8:0c:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E5:AB:17:AD:4E:A9:BE:81:F4:0A:B9:27:20:3A:11:26:DF:E1:A4
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaab::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:eb:46:24:4d:72:7d:5a:27:f9:9a:3d:2e:92:cb:ca:0c:
         f5:39:1f:d4:18:b4:7d:1f:cc:a8:ce:87:b9:ff:ed:11:e2:e8:
         ee:bd:bf:ba:79:22:b5:05:4c:ce:4d:80:a6:5d:6c:ee:36:34:
         3a:23:ba:5d:b5:a3:78:8e:16:fa:3b:30:7c:ec:87:25:07:82:
         10:f6:ec:84:19:ff:bf:f6:96:76:ac:2a:bd:7f:eb:37:5b:b2:
         85:8d:d5:9e:21:65:57:c6:f4:a6:99:fe:e6:51:11:bb:31:ac:
         47:2d:07:d9:14:9f:f2:3c:7c:b0:3a:96:30:98:15:32:5b:35:
         b1:b0:b5:04:21:2c:e9:a2:44:cf:66:5e:43:ba:63:53:ed:e3:
         57:84:86:79:80:f2:9f:f5:fa:5e:d6:85:43:6c:79:33:f7:a5:
         65:7b:00:41:bc:96:1d:52:b6:8c:29:f6:d5:a2:7c:1c:31:28:
         90:9f:4d:85:98:99:ee:ee:59:74:f2:cc:1c:dd:88:7c:74:3d:
         58:a1:84:0f:24:e8:bf:dc:02:24:df:7c:f1:3d:d0:9a:0a:fb:
         50:df:c5:0d:70:70:b4:22:32:9b:16:81:64:9c:19:3f:9b:a4:
         6a:77:88:55:83:62:63:58:b9:63:96:11:ee:4d:21:49:15:7d:
         20:00:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:58 2024 by rpki-client on console-ams.rpki-client.org