Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa
File:                     323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa (raw, json)
Hash identifier:          GPq+mweNLKyTuwbFbIrc+M13QtLh2k1kxMlkuvOq1lw=
Subject key identifier:   26:78:0A:89:68:49:B9:AA:CB:FA:CC:26:DD:4D:2F:4E:B6:50:C9:4C
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       0E24F08045FA851670B9864712F890C9A01A5CA6
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa
Signing time:             Thu 04 Apr 2024 20:25:43 +0000
ROA not before:           Thu 04 Apr 2024 20:20:43 +0000
ROA not after:            Thu 03 Apr 2025 20:25:43 +0000
asID:                     267614
IP address blocks:        2804:43fc:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl
                          rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:24:f0:80:45:fa:85:16:70:b9:86:47:12:f8:90:c9:a0:1a:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Apr  4 20:20:43 2024 GMT
            Not After : Apr  3 20:25:43 2025 GMT
        Subject: CN=26780A896849B9AACBFACC26DD4D2F4EB650C94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:0c:ab:77:c4:be:5b:d5:87:fa:20:74:8b:
                    a6:95:b0:74:dd:a3:09:8f:0a:06:2b:ae:b0:bc:ec:
                    ff:8e:77:1f:ff:28:a6:0c:c1:b8:8d:2d:d7:e0:bd:
                    71:1f:28:8c:d5:24:f5:e3:12:83:2d:ff:0c:a0:4d:
                    82:32:f7:9f:ce:2f:43:19:62:de:c0:b7:65:77:6b:
                    89:84:64:6f:55:f3:34:24:93:80:1a:5b:14:ab:d9:
                    58:11:3f:c1:7d:30:a1:0d:7d:30:bd:22:9a:23:73:
                    b7:a7:29:93:24:66:e3:48:46:a8:d2:c7:8c:cb:c3:
                    1e:db:ce:9c:08:13:1b:7d:f5:92:f3:e3:38:05:ef:
                    f0:da:f3:09:29:d6:d6:c6:a1:0d:81:b9:62:78:86:
                    5b:80:0c:96:c0:75:bb:f6:50:a8:34:9a:62:75:fd:
                    52:71:f8:ca:30:dc:7c:74:69:08:e6:54:01:5a:76:
                    3f:e7:f4:56:97:cd:c4:40:32:94:0c:c3:54:0f:bc:
                    8e:f7:e5:2f:bb:cd:8b:69:2e:c0:a4:fb:88:dc:8e:
                    bc:32:7c:1e:07:6f:98:d9:64:a5:c3:24:d7:8e:0b:
                    ee:6d:4e:a8:15:16:76:02:27:2e:40:c9:4d:c1:c1:
                    73:e4:73:30:9f:64:66:e9:c2:05:81:e9:85:34:00:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:0A:89:68:49:B9:AA:CB:FA:CC:26:DD:4D:2F:4E:B6:50:C9:4C
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:30:c1:19:b6:ca:5d:ad:b7:9f:26:cd:e6:64:26:d7:08:85:
         a2:06:e0:df:96:0a:ed:01:20:1e:87:54:26:49:c9:2a:01:15:
         23:b7:3d:c4:ea:6a:e5:4d:97:65:0b:64:a6:0f:df:77:90:be:
         59:36:27:31:f7:5e:2e:2e:a5:86:eb:b2:29:95:ae:b6:fe:44:
         38:38:a9:df:4f:35:99:07:54:7c:0f:7f:2f:18:6c:48:c8:bd:
         16:dd:fb:f6:80:d7:fc:a1:49:6f:8d:bf:4e:51:b5:19:a8:4b:
         ef:56:82:de:04:6c:ad:6e:d9:bf:2c:ab:14:15:78:b0:be:70:
         13:55:0b:81:3d:03:bf:b6:42:f6:0b:d7:89:62:3a:9f:29:2b:
         29:a7:2b:c4:54:71:46:d0:62:0c:24:23:3a:8c:e0:fe:44:40:
         4f:f0:a8:0d:20:0b:2d:fe:44:d5:02:b0:f9:37:17:f4:22:f6:
         ef:e0:76:64:ec:6e:d6:e0:b0:a7:68:d9:15:00:e2:c6:4e:a6:
         67:34:4d:0e:03:c0:5a:4c:d9:ff:f2:f2:b9:ff:d3:63:8d:ba:
         a9:2b:95:e7:d1:4f:fd:af:3d:55:de:87:23:67:cb:b2:8b:62:
         7c:f1:ab:80:69:0a:e7:b0:19:43:07:d6:d5:20:88:99:e8:9b:
         69:3c:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org