Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/323830343a373135383a3a2f33322d3332203d3e20323730373833.roa
File:                     323830343a373135383a3a2f33322d3332203d3e20323730373833.roa (raw, json)
Hash identifier:          xhAJkW4FBrQOOaRJoojYfZNihQvT8KuNPNGkPS3H0qw=
Subject key identifier:   63:2D:F8:95:79:4A:72:A4:8C:8E:71:8B:1B:5B:F4:45:E9:A0:CB:1B
Certificate issuer:       /CN=FA5B6BA1D194F09F71907F61D710577A55EEDEDF
Certificate serial:       50250C2A1C7B198A4B9404EA8C29135175199014
Authority key identifier: FA:5B:6B:A1:D1:94:F0:9F:71:90:7F:61:D7:10:57:7A:55:EE:DE:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/323830343a373135383a3a2f33322d3332203d3e20323730373833.roa
Signing time:             Mon 25 Nov 2024 18:24:11 +0000
ROA not before:           Mon 25 Nov 2024 18:19:11 +0000
ROA not after:            Mon 24 Nov 2025 18:24:11 +0000
asID:                     270783
IP address blocks:        2804:7158::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.crl
                          rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:25:0c:2a:1c:7b:19:8a:4b:94:04:ea:8c:29:13:51:75:19:90:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5B6BA1D194F09F71907F61D710577A55EEDEDF
        Validity
            Not Before: Nov 25 18:19:11 2024 GMT
            Not After : Nov 24 18:24:11 2025 GMT
        Subject: CN=632DF895794A72A48C8E718B1B5BF445E9A0CB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:71:6c:0b:57:3b:9c:4b:d6:dd:54:6e:06:
                    dd:2b:5c:e2:4b:25:d3:57:d7:01:27:b2:11:37:f6:
                    09:35:dd:6f:df:f5:fc:0d:6f:95:a7:e3:60:14:02:
                    1b:c3:b6:60:a2:fe:69:4c:9f:ed:4f:fa:72:6a:6a:
                    0d:5c:2f:3a:45:b4:e0:19:93:0d:ea:5d:71:36:48:
                    ed:44:da:ad:18:03:86:98:9d:7b:d1:1c:65:7f:28:
                    d6:2f:52:b3:0f:3a:e1:fc:e4:2e:9a:0a:54:f4:71:
                    ca:ca:fc:1b:bf:13:96:28:b4:36:f9:c6:2a:41:de:
                    ee:84:28:ef:49:85:3f:fb:95:fb:01:c4:e6:e8:25:
                    db:f5:e2:0c:4d:71:62:3a:af:71:33:78:8b:d1:21:
                    d7:64:02:37:74:7c:36:56:ea:af:ff:cc:ea:1b:54:
                    6d:34:2e:d4:8e:84:b3:83:6a:ef:3d:d0:69:50:58:
                    5d:55:e9:10:93:cf:01:cc:1d:63:b6:7e:68:2c:71:
                    10:15:73:05:60:14:18:47:d7:3e:26:e5:5a:3e:b5:
                    87:ab:8d:fe:59:77:30:d4:c2:ad:e4:63:09:48:4f:
                    bc:4d:15:48:e3:c5:a8:b1:bc:6c:fa:31:92:eb:c2:
                    19:b4:d9:32:41:24:e0:e3:a0:5e:92:68:ba:26:da:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:F8:95:79:4A:72:A4:8C:8E:71:8B:1B:5B:F4:45:E9:A0:CB:1B
            X509v3 Authority Key Identifier:
                keyid:FA:5B:6B:A1:D1:94:F0:9F:71:90:7F:61:D7:10:57:7A:55:EE:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/323830343a373135383a3a2f33322d3332203d3e20323730373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7158::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:dd:76:8c:15:87:49:5b:31:02:a6:05:8d:22:67:a3:7c:
         12:09:b0:d8:a0:bb:c5:04:6f:2f:0d:cb:68:aa:56:a9:c1:45:
         5b:8b:fa:55:46:b5:91:df:85:fa:e1:ea:46:4e:07:10:85:28:
         c9:5c:ed:5c:28:73:a1:9c:e0:89:03:31:23:fc:de:3c:6e:ae:
         75:00:d3:3a:b1:b1:8c:1f:1f:c3:5a:6a:ee:ae:3e:9c:29:bf:
         b4:63:04:df:af:fd:31:dc:53:6d:79:a3:51:11:1c:ac:ab:13:
         08:8c:dc:ef:ee:3e:40:12:8d:15:23:64:a5:62:2c:ff:4e:0d:
         f0:5e:fa:8a:55:d8:d6:91:ef:6f:e6:b1:f8:f4:23:af:07:03:
         1c:0c:9f:5c:db:11:b6:a4:23:31:88:74:48:32:33:46:74:97:
         d3:b0:0f:56:ba:c2:4d:7a:e6:ab:c3:da:8f:b1:d8:cc:2b:78:
         a5:c3:a4:02:7b:ce:07:17:bf:b8:b3:65:33:cf:fe:9b:39:07:
         f0:a4:34:b8:52:38:21:4c:52:73:fa:87:41:ce:90:48:98:fc:
         26:cc:9f:5e:44:63:e4:e9:de:95:b4:6e:ed:46:a5:fb:cc:48:
         a7:85:29:2e:4f:20:ce:f5:d4:3c:94:eb:c9:e8:50:50:f3:ca:
         55:3e:79:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:27:26 2024 by rpki-client on console-ams.rpki-client.org