Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa
File:                     323830343a336634303a3a2f33322d313238203d3e20323636363438.roa (raw, json)
Hash identifier:          eqPtbiumpy+spcoMTyXmkIAcz8sTCml587a6NC9puZ4=
Subject key identifier:   5C:B1:88:2A:40:A3:BD:D9:8F:ED:34:5B:AB:81:D2:F1:D7:79:30:B9
Certificate issuer:       /CN=FD1F02FB13B8A44549F4A7647596B707E14850D0
Certificate serial:       70152E51EB73CE899D88DDCE08D79D121C25C018
Authority key identifier: FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa
Signing time:             Thu 04 Apr 2024 10:15:41 +0000
ROA not before:           Thu 04 Apr 2024 10:10:41 +0000
ROA not after:            Thu 03 Apr 2025 10:15:41 +0000
asID:                     266648
IP address blocks:        2804:3f40::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.crl
                          rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:15:2e:51:eb:73:ce:89:9d:88:dd:ce:08:d7:9d:12:1c:25:c0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1F02FB13B8A44549F4A7647596B707E14850D0
        Validity
            Not Before: Apr  4 10:10:41 2024 GMT
            Not After : Apr  3 10:15:41 2025 GMT
        Subject: CN=5CB1882A40A3BDD98FED345BAB81D2F1D77930B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:18:70:9e:d5:38:6a:27:df:e1:bf:49:fa:
                    8c:dc:d6:9a:a9:c1:eb:af:79:67:62:32:b2:d1:f2:
                    b4:e6:39:33:21:a0:7c:1d:ec:08:ce:f2:e4:58:cf:
                    c1:53:8e:31:29:79:cd:1a:a4:db:64:af:23:6e:df:
                    e0:a9:1c:9f:5d:3d:28:ca:30:c6:e2:4d:0a:1f:05:
                    d8:1a:ac:d7:67:9f:0c:cb:61:ac:d2:b5:3e:2d:5e:
                    7b:f8:88:6f:1c:77:dc:bd:ed:15:95:ae:89:24:11:
                    9a:e8:6d:7d:d0:ac:b7:10:1c:6d:8d:46:58:b0:7c:
                    b1:3b:97:0c:ad:25:2a:59:1c:f5:d5:57:c4:36:65:
                    9b:36:cf:b3:4f:0b:79:cd:24:83:f7:40:93:e6:36:
                    4e:0f:30:ff:fe:1b:ad:e5:39:85:14:08:fb:bf:21:
                    fe:ef:e8:7d:fc:07:a3:bd:43:21:71:dc:2d:55:97:
                    21:c6:38:16:3c:f7:81:11:c5:80:c3:56:42:ff:53:
                    2b:fe:68:95:2b:84:3e:ee:96:dc:88:66:d3:46:03:
                    d8:08:cc:de:e1:b1:ad:02:a0:dd:f2:42:67:0c:ff:
                    d0:01:98:a1:d2:63:c4:00:0a:a1:13:7a:e0:dd:0d:
                    64:12:1e:40:4f:5b:4d:52:25:a5:5b:78:bf:5a:e2:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:88:2A:40:A3:BD:D9:8F:ED:34:5B:AB:81:D2:F1:D7:79:30:B9
            X509v3 Authority Key Identifier:
                keyid:FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:31:21:ee:72:d4:7f:e4:a2:82:eb:0a:ca:20:ca:82:c0:89:
         d1:0d:33:15:34:86:a2:ff:fd:58:82:7f:2e:f3:98:6c:1d:90:
         ca:4d:52:8f:1c:70:1c:67:bf:4c:d0:42:25:3a:5b:03:6f:75:
         46:73:98:51:91:45:da:48:d6:71:e4:ab:fc:78:c3:81:db:61:
         98:70:ce:53:2f:f1:0d:cb:0f:31:a6:f4:3c:fe:dd:e9:db:6f:
         2a:85:26:37:09:9f:55:7b:ce:9d:ea:6c:f6:64:f2:7f:2c:e0:
         02:36:a8:b8:1b:3a:b8:17:41:4a:36:17:ec:bf:fc:10:31:74:
         e8:b7:40:5a:56:54:61:60:bb:bd:15:72:73:9b:de:30:b8:eb:
         63:8d:65:78:e1:0f:92:6a:3d:9f:7f:63:b1:bd:a1:18:12:ca:
         1e:a5:a6:71:7f:a1:3d:56:52:59:7a:08:f6:47:e8:a9:12:4b:
         d2:db:fa:3c:40:f6:d2:53:44:bc:d4:e8:ec:9d:c7:f1:25:2f:
         a0:27:8f:6e:24:06:e6:e5:5f:1c:bf:c4:36:c5:72:21:92:d2:
         e7:c7:7a:ec:89:ee:9c:0b:e6:97:70:a2:df:b8:41:42:75:c5:
         bb:af:f3:09:05:4b:8d:9f:a6:86:05:95:49:10:b6:a6:5e:f7:
         e8:2e:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org