Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
File:                     323830343a366566303a3a2f33322d3438203d3e20323730363238.roa (raw, json)
Hash identifier:          qSqMT2jqOFmWaM8sqWGWN2hCUrHyLTt4J5U1TkAIcRc=
Subject key identifier:   F6:B5:03:0F:C9:BA:DE:99:8E:EE:3F:FC:31:FA:1D:A7:E4:08:C4:54
Certificate issuer:       /CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
Certificate serial:       434DF81ADB249DB709922E0E204307596EE94E8B
Authority key identifier: FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     270628
IP address blocks:        2804:6ef0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl
                          rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4d:f8:1a:db:24:9d:b7:09:92:2e:0e:20:43:07:59:6e:e9:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:f4:25:9a:2b:a6:c1:07:02:b3:1a:f6:d1:
                    f1:89:8f:19:ff:c5:f4:5f:29:6f:e0:13:ab:57:75:
                    a9:75:32:31:a1:d6:02:c1:e3:fa:e3:ab:be:f2:b1:
                    13:4e:fc:03:97:84:69:85:85:d3:28:df:1b:5f:db:
                    fe:44:75:cd:47:c6:19:96:cf:64:18:52:95:c4:a7:
                    08:c4:51:9d:b3:01:37:0e:45:6f:24:79:69:14:ad:
                    b4:e4:c4:32:55:cf:01:b4:83:e6:4b:b4:3f:b3:16:
                    46:82:d1:2d:50:25:2d:25:5d:b3:43:14:f0:16:3d:
                    b3:6a:74:7b:19:63:9f:01:fc:1b:4f:28:3a:90:3b:
                    6d:3a:89:24:a0:da:d7:1e:72:33:58:66:bc:40:9d:
                    99:d6:02:88:18:0c:4c:73:4a:5d:47:69:59:5a:ae:
                    f4:de:58:ad:5b:5c:f8:ef:65:38:af:25:f7:8d:9b:
                    f2:b1:b0:d3:ca:73:d5:bf:d3:08:b2:00:93:9c:96:
                    42:07:5c:16:48:da:8b:87:32:0c:f9:df:8f:b9:2b:
                    a3:b6:5a:ca:9f:da:a6:56:22:fe:c8:e1:36:40:69:
                    c1:77:08:22:4a:e6:40:d4:e7:3b:c5:c4:9a:60:35:
                    e7:2e:bf:e7:92:5f:a2:41:e3:06:05:69:9b:07:26:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:03:0F:C9:BA:DE:99:8E:EE:3F:FC:31:FA:1D:A7:E4:08:C4:54
            X509v3 Authority Key Identifier:
                keyid:FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:77:57:e4:28:ea:2c:dd:90:48:51:67:26:48:d3:57:6f:28:
         01:97:be:4e:61:d5:2c:ba:5a:69:83:21:45:3a:ba:ae:1b:12:
         00:62:19:53:5c:1e:1d:28:11:72:a9:9d:7b:5a:37:0c:f0:c7:
         58:48:f0:5e:e8:88:0b:07:11:e1:0e:d0:08:14:17:71:07:c7:
         7f:58:d8:d2:9b:4e:68:55:9f:64:fb:d7:c6:93:19:99:59:1c:
         15:db:7c:14:93:4d:f0:11:f2:1f:a1:e4:43:43:16:e7:d0:f9:
         a0:75:5b:f4:73:2e:e2:df:4a:87:27:f2:72:24:35:9c:60:dc:
         93:98:89:76:02:70:8b:ac:bd:2d:38:06:af:f8:7d:e8:4b:f6:
         fb:19:4b:13:af:90:24:c1:87:fc:98:e6:16:50:fd:b4:1c:87:
         a2:df:ce:c5:8e:66:9e:c0:9e:d8:8e:2a:f0:82:95:ea:a0:fe:
         fa:36:55:c4:e0:a5:7f:61:0d:ca:8c:63:df:1a:ac:10:76:03:
         31:95:b6:c4:fc:6a:60:4d:bc:95:5c:dc:99:27:47:89:89:7b:
         49:85:ae:04:71:05:cc:e3:40:24:07:48:7e:1b:e1:d6:36:7c:
         fb:83:e3:de:e3:3c:8f:0f:b2:ef:a7:60:72:f2:fd:74:c0:18:
         9b:11:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org