Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa
File:                     323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa (raw, json)
Hash identifier:          wRLeYn+yKH9yU25XWEnSJO8W6cOQ5hY1xSxRl01svRU=
Subject key identifier:   63:69:E9:05:9E:14:90:A0:E8:21:EC:4E:F9:99:FD:A5:41:72:88:EE
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       23BFDD01524EB8500A7D3F017080D6D20C8C4746
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:44 +0000
ROA not before:           Thu 04 Apr 2024 09:26:44 +0000
ROA not after:            Thu 03 Apr 2025 09:31:44 +0000
asID:                     263482
IP address blocks:        2804:1288:f00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bf:dd:01:52:4e:b8:50:0a:7d:3f:01:70:80:d6:d2:0c:8c:47:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:44 2024 GMT
            Not After : Apr  3 09:31:44 2025 GMT
        Subject: CN=6369E9059E1490A0E821EC4EF999FDA5417288EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:cc:a9:d2:e5:c2:29:b6:12:dc:1c:e9:9e:
                    bb:04:a6:20:ef:e8:8f:8f:6a:5a:1c:43:1b:17:93:
                    91:1b:09:97:46:9c:f2:e1:84:c3:b7:c2:2a:c3:bc:
                    ae:4b:89:8f:d3:75:28:40:6d:9d:bd:3d:ec:6f:3b:
                    09:cf:c0:95:f0:3d:aa:3e:cf:91:91:0c:42:4a:bd:
                    b0:fb:31:8b:81:7b:ec:c3:f1:55:e9:38:c1:70:8a:
                    56:04:a6:09:0d:a6:5d:f3:95:53:c7:06:6c:09:d1:
                    72:e5:e6:74:c0:a9:75:3d:e2:b8:32:db:db:4d:7b:
                    2b:9a:4b:b3:6d:01:07:89:7c:ea:40:d6:e2:18:10:
                    0d:b1:f8:c4:a3:e1:af:c6:d3:b7:99:de:29:06:31:
                    8a:4e:2d:a7:ba:97:9f:b3:04:01:39:aa:85:53:7f:
                    66:f1:5c:20:a1:4f:50:bd:23:fb:9b:60:86:ed:23:
                    fc:87:97:d1:56:b4:08:9d:69:78:cc:38:df:64:2d:
                    1f:78:a6:53:9b:ca:a2:13:2a:83:14:a3:bc:c2:c6:
                    3c:d1:68:1c:67:d4:7a:30:6b:f5:74:68:a3:18:c2:
                    15:9b:89:be:ff:3d:87:95:62:f4:67:53:cd:78:51:
                    41:48:eb:0d:b6:0a:4f:8b:8b:24:21:cd:ae:31:66:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:E9:05:9E:14:90:A0:E8:21:EC:4E:F9:99:FD:A5:41:72:88:EE
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1288:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:4f:fd:71:61:f1:ac:55:1e:b3:fa:ab:47:05:39:ff:56:
         5d:4f:c5:86:7d:b4:ef:3c:b1:85:5e:b0:55:ee:c4:f6:e7:78:
         f9:6b:d1:d2:93:5a:2d:af:cb:25:4f:21:f9:a4:5b:df:31:8e:
         3f:06:09:a8:57:05:a7:61:fc:1e:27:4c:35:f2:1b:f7:7d:34:
         00:38:9f:dd:4f:c2:be:c0:02:5a:70:38:9b:bd:e7:38:c6:6b:
         22:4a:a5:62:1e:94:73:f6:44:1b:29:80:64:3a:3c:fb:57:a6:
         65:67:2b:b9:ef:c5:7d:c6:b7:88:13:16:a8:ba:33:e5:39:63:
         61:b7:ca:fe:c8:ed:5f:cf:81:04:d8:06:cc:74:5f:dc:c0:ff:
         f7:81:81:13:9f:c8:15:57:e5:b0:10:6f:39:82:62:94:11:3d:
         c6:f6:85:6f:fc:05:6a:a0:f2:f5:19:12:e3:da:4d:90:1d:cc:
         d3:66:f5:72:88:d2:12:dc:20:d0:85:b9:68:75:b5:2f:a1:cb:
         c8:22:ed:e2:2b:9d:d9:a8:7f:9e:51:fe:e7:aa:a0:e3:a3:8a:
         be:3a:81:73:ec:b0:d0:7d:ea:16:fe:bb:be:d0:bb:b4:1b:2f:
         49:b4:b8:d2:f2:a7:c2:74:de:59:5d:ed:ab:27:f6:61:6e:9f:
         a7:8c:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org