Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
File:                     323830343a336337303a3a2f33322d3335203d3e20323636323131.roa (raw, json)
Hash identifier:          MjO0A2nB2NGIpflqoJE/QlDGvnn/nCv/JYFA7qma4po=
Subject key identifier:   E1:61:68:86:E2:85:60:DE:93:7E:EE:D8:B9:DD:DE:3F:BE:EC:F8:9C
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       4BA907ECCD8E022E2979DC9F32D2A97883C10087
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
Signing time:             Wed 03 Apr 2024 18:32:01 +0000
ROA not before:           Wed 03 Apr 2024 18:27:01 +0000
ROA not after:            Wed 02 Apr 2025 18:32:01 +0000
asID:                     266211
IP address blocks:        2804:3c70::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a9:07:ec:cd:8e:02:2e:29:79:dc:9f:32:d2:a9:78:83:c1:00:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Apr  3 18:27:01 2024 GMT
            Not After : Apr  2 18:32:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:50:ad:08:5c:ea:0e:97:5b:9b:14:4e:55:
                    b9:b3:b8:7b:f6:1e:88:35:fc:dc:f9:0a:06:23:bf:
                    1d:3d:ec:70:9d:07:0e:2e:d0:3a:1b:d6:73:2c:a0:
                    34:68:0b:83:1d:ed:0a:15:dd:5e:1d:bd:c7:04:0e:
                    fe:5f:9c:f4:44:c9:67:be:61:6c:f7:0c:32:db:3c:
                    7c:88:0a:eb:b7:bb:09:35:35:49:00:9b:a9:e8:60:
                    f9:dd:4d:f1:ab:71:53:6d:9e:35:28:64:8c:66:95:
                    f9:8b:8c:ca:e6:75:b4:89:88:e3:76:a1:ff:57:00:
                    23:e8:f2:51:85:bd:be:b8:55:cd:90:ec:e9:6f:58:
                    e7:4c:f3:9a:53:0c:f3:d0:68:69:61:03:95:70:e3:
                    cd:96:88:20:c3:ce:56:30:4d:48:c6:2a:fb:8f:cd:
                    45:f1:76:a5:35:ba:ee:31:a1:dc:46:ee:fa:29:20:
                    b4:96:00:2a:84:0f:6c:1d:79:81:1e:3e:41:ed:5a:
                    ce:b2:ca:cc:ed:41:fa:3f:f8:18:59:b8:bc:d4:91:
                    89:2c:bb:b2:b0:99:68:16:1f:87:92:62:7c:d2:75:
                    1d:05:1e:b1:c4:83:5b:51:c4:41:f6:ed:e2:fd:fd:
                    44:2f:99:d5:d5:07:25:c6:09:e5:2d:28:a5:cc:18:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:68:86:E2:85:60:DE:93:7E:EE:D8:B9:DD:DE:3F:BE:EC:F8:9C
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:01:b5:ab:40:c2:a9:f2:77:0e:04:19:da:60:52:96:74:
         32:ac:51:86:0a:9e:dd:46:dc:1a:58:97:24:24:3b:ad:c5:50:
         1a:18:4e:d5:c8:63:f8:d4:36:1c:51:cf:16:ad:16:b5:f3:6c:
         66:0c:fb:11:8b:3b:6e:16:dc:44:79:4a:48:c4:c0:ca:30:d0:
         96:90:24:ab:9e:37:24:db:61:4a:89:5d:b2:e6:84:e4:9c:c9:
         5e:af:f3:c8:40:e1:fc:70:eb:7b:85:a2:a2:1b:98:ce:f9:2d:
         bc:50:33:cc:1b:10:9e:83:bc:82:af:05:b2:6d:04:0c:81:ab:
         e9:37:85:90:d1:06:02:5d:73:f3:56:28:8d:e4:4a:8d:00:5d:
         86:30:f7:df:bb:c2:37:b7:c9:4f:c2:28:cf:66:aa:45:d1:e8:
         9c:98:3b:58:cc:aa:10:65:9b:f6:16:b8:a4:0d:e5:04:1e:28:
         4f:62:88:aa:4c:d4:73:1c:1c:0b:27:ef:c4:66:38:b4:4b:26:
         b1:29:59:d9:4a:20:19:98:3a:e7:3b:89:2c:54:66:6b:e4:28:
         c0:ca:84:42:ac:01:94:83:8c:09:f2:db:9f:c0:86:5b:1c:9a:
         9b:66:4b:bc:f4:06:c2:e6:04:5f:45:ab:fc:23:cd:97:67:fc:
         de:da:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org