Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa
File:                     323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa (raw, json)
Hash identifier:          QxCX8FZPzS07LBeJ4Vc116JgAI/MAX9pacrpEg/tSqg=
Subject key identifier:   F0:03:09:2F:CB:90:B2:DB:F5:3F:C9:22:D0:31:35:4D:06:7B:B8:C0
Certificate issuer:       /CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
Certificate serial:       58C44BFD28F8177D8C5B135E1D410D0A484C818E
Authority key identifier: FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa
Signing time:             Wed 03 Apr 2024 22:42:16 +0000
ROA not before:           Wed 03 Apr 2024 22:37:16 +0000
ROA not after:            Wed 02 Apr 2025 22:42:16 +0000
asID:                     28215
IP address blocks:        2801:80:550::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl
                          rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:4b:fd:28:f8:17:7d:8c:5b:13:5e:1d:41:0d:0a:48:4c:81:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
        Validity
            Not Before: Apr  3 22:37:16 2024 GMT
            Not After : Apr  2 22:42:16 2025 GMT
        Subject: CN=F003092FCB90B2DBF53FC922D031354D067BB8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:0c:08:01:1d:d0:0b:23:95:8d:e9:73:aa:
                    0a:2c:65:6a:99:d4:42:56:15:ab:9a:9b:7b:72:37:
                    6d:b4:80:ee:58:21:e9:1b:00:78:98:ba:84:9b:41:
                    d2:4b:b1:8f:d5:97:8c:02:68:69:99:8b:34:99:73:
                    41:21:ef:f6:a1:d0:4c:de:82:85:93:6a:79:64:78:
                    dd:aa:94:2f:cc:fa:da:2b:eb:3d:c5:a7:5a:64:3c:
                    f0:bf:b1:6c:c5:a6:ca:b6:8a:a4:fc:0a:5f:f8:c8:
                    3e:5f:c5:44:6e:d0:12:6d:94:6d:ce:de:f1:30:68:
                    b4:42:cc:99:0a:67:06:ce:af:9a:ce:ad:35:96:a9:
                    19:58:10:d2:d1:df:d5:9c:c5:70:61:e5:d2:e3:1e:
                    ca:e2:63:b1:13:f3:48:f9:f3:cf:23:f3:6b:6d:44:
                    e2:01:9d:de:62:97:31:af:cc:e6:c5:ac:19:bf:26:
                    cb:92:5b:fd:fc:05:7f:46:9d:d9:f4:eb:72:1f:11:
                    b8:06:e6:68:da:6d:6e:9d:30:94:10:a5:ea:15:f0:
                    0e:e2:ad:fc:88:a0:52:f0:59:5a:c2:b3:56:66:17:
                    93:95:a3:ab:27:63:e0:e8:a0:92:a9:74:ed:43:de:
                    c9:25:78:29:c3:89:70:f8:7f:21:50:b7:fd:85:30:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:03:09:2F:CB:90:B2:DB:F5:3F:C9:22:D0:31:35:4D:06:7B:B8:C0
            X509v3 Authority Key Identifier:
                keyid:FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:550::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:d7:68:50:a6:b8:a8:3b:4a:df:59:7b:42:bc:45:75:b5:
         02:1f:40:e9:2c:70:23:11:cd:49:75:08:41:06:23:19:01:2b:
         15:b6:c4:ae:cf:29:71:0d:c2:f1:4b:af:5a:b9:bc:01:63:60:
         b0:ee:36:5b:77:bd:cd:21:56:59:f5:6b:c3:7f:54:de:97:74:
         9d:e2:dc:4f:ff:2c:77:cf:ea:ba:c8:1f:56:84:62:b0:9f:93:
         e8:81:e3:67:c9:9d:f9:07:c3:31:88:80:33:23:07:2b:1b:a0:
         f7:6a:4e:3b:d2:72:d6:d8:48:07:70:6d:8c:b6:47:be:3c:1e:
         cd:0d:1d:1d:a5:f9:38:03:ce:c7:b7:b2:ae:54:f8:e0:f2:e3:
         08:76:06:1e:aa:a4:4f:5c:0a:a3:4d:e5:ec:28:a7:c6:c3:a5:
         fc:36:ae:42:0d:28:15:71:2a:1d:ce:ed:d7:54:52:8e:b2:7f:
         d7:36:5e:22:48:40:a8:2d:21:ce:35:17:55:db:50:e5:e6:13:
         56:ff:24:cf:44:33:8b:cc:67:a7:21:f9:78:5c:88:6d:d2:e6:
         ff:3e:b2:a3:97:87:0f:72:21:6c:08:b5:c6:3c:05:15:7a:aa:
         bd:7e:0d:64:bd:47:58:90:36:8a:00:4a:0a:c9:ee:c0:ae:29:
         c8:7d:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:03 2024 by rpki-client on console-fra.rpki-client.org