Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/323830343a333234343a3a2f33322d3438203d3e20323635303636.roa
File:                     323830343a333234343a3a2f33322d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          xsr4lmckfNXYVQR3lGuMBB2i+z0vHojfQhZOG60Glg8=
Subject key identifier:   4B:89:F1:7E:D4:8E:02:C4:0E:ED:90:BD:B9:01:AC:54:09:67:67:F2
Certificate issuer:       /CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
Certificate serial:       49DCEAA94720DAAD4AAAAD995308E9F15057D5BD
Authority key identifier: F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/323830343a333234343a3a2f33322d3438203d3e20323635303636.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     265066
IP address blocks:        2804:3244::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl
                          rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dc:ea:a9:47:20:da:ad:4a:aa:ad:99:53:08:e9:f1:50:57:d5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=4B89F17ED48E02C40EED90BDB901AC54096767F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:90:00:c1:25:46:e9:bf:70:b3:89:6c:a7:
                    dc:36:0e:c0:61:0e:cc:bf:d5:a6:87:4a:af:3d:3b:
                    36:35:a5:0f:16:6a:ec:91:7f:66:2f:f8:b3:17:5a:
                    9c:68:94:9e:18:31:33:22:d4:3b:69:45:1d:ff:84:
                    cf:f6:f6:81:02:42:bc:09:19:64:c6:95:76:8b:0f:
                    8e:c8:36:fa:03:e9:85:22:4d:a6:06:e0:19:7d:50:
                    08:c6:dd:84:a9:a7:f1:b4:a4:38:66:92:6e:5b:12:
                    2c:b0:b2:15:0c:63:d0:95:66:70:c6:bf:9f:54:2d:
                    26:65:db:be:fc:a1:29:d0:92:47:3e:f5:97:6d:64:
                    a2:db:4c:c2:70:71:ed:f9:72:c0:5a:c4:b2:10:11:
                    e8:de:3f:8c:9a:79:6c:8d:eb:6b:02:ea:da:1c:3c:
                    4d:b6:47:c1:b1:7e:5c:cd:c0:13:91:88:eb:20:43:
                    f0:d5:21:e6:48:d1:e6:f6:09:74:78:5d:ef:22:c7:
                    8b:53:6f:a5:b3:ba:c8:ed:04:3e:87:26:eb:36:0d:
                    59:5a:45:e8:f9:c6:3a:22:b4:f7:d6:01:0b:f0:4f:
                    84:4a:3e:ce:fe:3a:58:3d:b0:dc:f9:02:f2:4a:56:
                    61:04:e3:a0:ee:3b:24:89:e7:80:96:6f:e5:bd:dc:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:89:F1:7E:D4:8E:02:C4:0E:ED:90:BD:B9:01:AC:54:09:67:67:F2
            X509v3 Authority Key Identifier:
                keyid:F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/323830343a333234343a3a2f33322d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:97:eb:c4:a8:dd:97:ab:53:f7:8e:ea:17:c7:e6:34:83:53:
         fc:dd:ea:75:4c:b1:20:02:84:49:54:17:42:8d:1d:ea:1b:83:
         55:03:b7:f4:59:63:90:96:86:2b:01:05:a4:b2:8d:fd:93:0f:
         ac:ca:0e:90:ec:9f:8e:76:32:f1:92:71:18:de:cc:c5:be:52:
         d0:33:da:1c:42:ef:32:8f:e0:dc:d7:10:ae:bf:c7:74:ad:d3:
         43:76:92:8b:c1:37:c8:0a:f9:0b:6d:d6:1c:fa:ca:b6:fc:5d:
         9c:83:b3:00:d1:1a:28:d0:10:09:9d:59:bb:68:f5:15:f7:0f:
         59:71:ae:84:4a:4a:a6:b4:63:cd:11:ec:86:24:33:cd:3f:6b:
         19:62:36:b3:d9:f2:7e:58:b0:6d:b4:b0:b3:9d:4d:13:a1:18:
         ea:80:59:f2:90:b6:6f:7b:47:a0:ab:86:36:e9:bb:9f:5e:32:
         37:15:98:52:69:30:87:9b:92:26:a3:6e:4a:b3:af:6c:6e:e5:
         3a:76:ff:43:2a:c5:25:9e:e1:c7:3c:27:7f:0e:e9:49:f0:e1:
         b5:90:e7:cd:45:a5:9e:7d:fc:22:fc:3a:f2:f3:78:08:27:6b:
         a8:60:38:6b:e2:33:32:6b:f2:bb:9a:4b:eb:63:cc:21:d5:57:
         5b:e8:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org