Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          TJ1WKVbXpM1GKktoOLC8OYhvVNcBaY9YnPxiFBiDyQ8=
Subject key identifier:   0D:CE:4D:89:1C:E4:46:D0:F4:1C:55:D5:E7:1C:A7:0C:08:05:4B:2E
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       2F0E6407A4A0BB2C607D158B4C6834FF83C11C9E
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Thu 04 Apr 2024 07:57:04 +0000
ROA not before:           Thu 04 Apr 2024 07:52:04 +0000
ROA not after:            Thu 03 Apr 2025 07:57:04 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaac::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0e:64:07:a4:a0:bb:2c:60:7d:15:8b:4c:68:34:ff:83:c1:1c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Apr  4 07:52:04 2024 GMT
            Not After : Apr  3 07:57:04 2025 GMT
        Subject: CN=0DCE4D891CE446D0F41C55D5E71CA70C08054B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:be:b0:ac:fb:d0:84:96:36:09:41:ee:d0:
                    f5:ff:8a:47:1d:20:1f:88:3f:09:61:15:70:7b:ce:
                    8f:e5:74:57:40:33:88:11:3e:2c:59:81:90:93:d5:
                    d4:a3:aa:9b:07:10:09:f1:86:49:7b:33:94:8b:b8:
                    72:c0:d7:29:52:ce:81:48:2f:35:97:5d:0e:23:2c:
                    f9:b3:fa:1a:38:95:10:e5:84:73:b0:40:76:07:4e:
                    b5:b1:e2:d1:b0:2d:1c:bc:22:d5:ab:50:a7:38:86:
                    24:ad:79:f2:dc:e1:f7:aa:f8:b0:18:7e:31:4a:04:
                    a7:b0:a7:40:f9:61:e8:b5:55:fa:13:bb:11:12:8d:
                    5b:87:20:41:54:5e:15:9e:7e:18:eb:49:d3:74:0a:
                    39:77:f0:09:8f:1b:df:2e:4e:94:e6:7d:2c:e5:27:
                    80:1a:2a:7c:93:92:6f:39:22:48:e2:b5:ff:8f:5a:
                    e0:65:3e:77:26:ea:2f:4a:57:ed:50:d9:01:2e:d6:
                    f2:23:ce:03:fc:44:91:93:c2:82:bd:83:e8:e3:2c:
                    45:e7:af:a9:73:8f:f1:57:65:ab:b9:2d:04:16:48:
                    be:1c:d6:5a:b1:d8:bb:da:19:6e:a9:26:f4:98:e0:
                    80:9a:21:5b:65:06:c6:38:38:d5:c9:18:9b:82:8a:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:4D:89:1C:E4:46:D0:F4:1C:55:D5:E7:1C:A7:0C:08:05:4B:2E
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaac::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:8a:2a:ef:07:8b:c9:24:85:69:4c:68:cf:3d:84:04:e8:
         df:41:f7:2a:da:20:c3:dc:99:af:50:63:d6:d3:dc:0b:d6:35:
         a8:e2:7a:de:66:c8:ba:9e:38:c0:6c:bc:55:b6:a2:56:d5:12:
         95:f3:b9:f4:cd:8a:68:2e:65:bd:f0:41:6c:85:0b:8c:32:a6:
         20:d8:15:0e:ec:64:44:88:7a:75:3c:17:b9:56:94:57:e6:a8:
         dc:ab:99:f8:de:0c:a2:6b:13:f3:a6:6f:98:9f:ad:ea:8a:a9:
         2a:0d:6a:fc:de:f2:4a:ba:80:33:f5:da:47:3e:10:a4:f7:b2:
         cd:33:91:8e:3b:ad:19:00:19:bd:5b:33:d2:0f:7d:23:23:20:
         d7:b5:25:a7:dc:7f:f0:40:ce:d6:25:35:1d:1b:ad:e2:61:e3:
         2d:5a:d8:54:23:4a:fa:e8:f6:a9:21:57:68:72:e7:85:20:e3:
         34:f9:8a:e2:78:e7:df:9c:14:bc:16:a7:93:55:f6:22:ae:64:
         b7:1b:6c:61:2b:46:50:d8:7d:ce:c4:55:0c:4c:4c:0f:5d:51:
         5d:ee:99:8f:74:c4:11:73:22:bf:f2:2e:a7:a1:0b:ba:6d:37:
         e3:2c:fa:fb:f1:97:e9:aa:09:18:b1:26:e0:9e:29:bb:44:f1:
         ce:c9:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:37 2024 by rpki-client on console-fra.rpki-client.org