Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/323830343a343061383a3a2f33322d3438203d3e20323635393733.roa
File:                     323830343a343061383a3a2f33322d3438203d3e20323635393733.roa (raw, json)
Hash identifier:          IMK3fAwTjbD1xRSLbglHDPO9bo1bVoaMFShs656Stts=
Subject key identifier:   5F:1F:11:77:05:07:10:26:46:1F:93:4A:58:6B:97:A0:C1:AA:E0:AF
Certificate issuer:       /CN=FBB82B5A5B4797A01075B8E5C4B8C22293BB364F
Certificate serial:       4E9D59D05F25A0487627F5B922F74D40A7CD9945
Authority key identifier: FB:B8:2B:5A:5B:47:97:A0:10:75:B8:E5:C4:B8:C2:22:93:BB:36:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBB82B5A5B4797A01075B8E5C4B8C22293BB364F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/323830343a343061383a3a2f33322d3438203d3e20323635393733.roa
Signing time:             Wed 15 May 2024 19:09:12 +0000
ROA not before:           Wed 15 May 2024 19:04:12 +0000
ROA not after:            Wed 14 May 2025 19:09:12 +0000
asID:                     265973
IP address blocks:        2804:40a8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/FBB82B5A5B4797A01075B8E5C4B8C22293BB364F.crl
                          rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/FBB82B5A5B4797A01075B8E5C4B8C22293BB364F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBB82B5A5B4797A01075B8E5C4B8C22293BB364F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9d:59:d0:5f:25:a0:48:76:27:f5:b9:22:f7:4d:40:a7:cd:99:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBB82B5A5B4797A01075B8E5C4B8C22293BB364F
        Validity
            Not Before: May 15 19:04:12 2024 GMT
            Not After : May 14 19:09:12 2025 GMT
        Subject: CN=5F1F117705071026461F934A586B97A0C1AAE0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:93:16:09:b4:4e:78:e5:ac:b9:4d:fc:79:
                    ae:2c:85:20:0a:8b:68:64:13:5e:b5:ed:34:a5:bb:
                    b8:be:e9:c1:08:c4:dd:2e:41:0e:85:f0:14:2e:64:
                    42:7f:62:ce:c1:48:7b:4f:10:df:10:be:5c:d7:59:
                    8f:ba:5b:9d:a7:94:3d:20:7f:52:b5:7b:82:50:4a:
                    1a:5c:5b:69:5b:e4:b9:cc:7f:60:35:e9:8d:f1:8f:
                    d1:56:f0:b5:58:6b:a0:b1:8a:74:99:69:30:00:01:
                    03:c1:45:b2:69:7a:2c:a6:9f:6e:d4:1d:b9:91:46:
                    38:45:66:58:05:73:04:5b:69:ba:16:48:bc:c5:91:
                    cf:f0:51:52:12:5c:f4:fb:f9:64:cd:9f:23:51:0a:
                    6e:b0:1e:00:3f:6c:92:f6:4f:eb:16:22:b0:4b:22:
                    70:77:64:44:38:7f:8a:80:38:be:fb:cc:b2:d3:25:
                    de:26:fb:19:af:9a:c6:e9:79:61:88:fb:3b:4b:7c:
                    21:15:10:73:bb:b1:5b:0c:67:1c:6b:a0:ca:d9:2c:
                    cc:17:80:76:18:16:ef:a1:4b:93:c4:7f:78:c5:a5:
                    95:56:d4:5a:a5:20:6c:e1:fa:85:70:63:50:3a:62:
                    c6:75:9b:1e:5c:e2:dd:b4:90:1b:9c:f0:b2:01:ac:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1F:11:77:05:07:10:26:46:1F:93:4A:58:6B:97:A0:C1:AA:E0:AF
            X509v3 Authority Key Identifier:
                keyid:FB:B8:2B:5A:5B:47:97:A0:10:75:B8:E5:C4:B8:C2:22:93:BB:36:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/FBB82B5A5B4797A01075B8E5C4B8C22293BB364F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBB82B5A5B4797A01075B8E5C4B8C22293BB364F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/323830343a343061383a3a2f33322d3438203d3e20323635393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:d9:be:28:a8:4b:a7:27:69:99:3d:5a:8d:4b:f9:52:22:
         c5:f6:2f:9a:6b:33:93:aa:72:9c:cf:1f:6b:06:48:4c:8c:78:
         45:16:aa:ae:ef:fb:28:0e:d8:61:bf:75:1f:a6:4f:45:40:75:
         10:6c:52:51:35:65:e9:50:b3:7a:fe:fd:60:6b:a2:f0:44:8f:
         e7:4f:42:b7:e3:bf:c0:bb:19:9f:17:9a:3a:cd:a1:3e:24:48:
         4f:e6:39:7a:b4:71:28:e0:f7:01:74:09:b5:50:d2:ca:51:46:
         df:d8:09:ad:b1:64:90:54:bd:2c:f3:32:a0:80:52:72:2a:a0:
         5f:58:fb:33:20:0b:44:25:03:6c:b4:f5:c6:4b:b2:be:71:e6:
         2d:80:7f:7f:1b:49:12:57:e5:95:4f:77:7c:e7:5b:10:11:85:
         4c:4c:b7:31:a5:cc:6f:0b:02:66:fc:fd:3a:8b:09:79:e0:82:
         75:76:b5:c9:4c:37:93:40:55:90:2e:be:17:ec:b9:27:d8:89:
         3b:c0:68:15:ce:e1:d1:76:46:de:b0:bc:62:51:b3:8b:1d:4f:
         e0:73:17:fb:5f:18:91:19:0c:cd:05:7a:e3:31:c8:9a:77:eb:
         7a:23:16:9c:d5:5f:c9:03:da:56:6d:b7:aa:f3:b7:a7:50:5c:
         1a:17:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 20:28:20 2024 by rpki-client on console-ams.rpki-client.org