Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa
File:                     323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa (raw, json)
Hash identifier:          GuGl4r5iHotUwFOKEojAtSKjPcQbiSbQqVzR67MszoI=
Subject key identifier:   F0:50:59:37:4F:48:7C:C2:92:BF:0F:7C:19:E9:32:64:48:25:2A:7B
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       2E434BC0A3040B570A27E84B8BE0267A2C0DE93A
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa
Signing time:             Thu 04 Apr 2024 10:56:51 +0000
ROA not before:           Thu 04 Apr 2024 10:51:51 +0000
ROA not after:            Thu 03 Apr 2025 10:56:51 +0000
asID:                     267209
IP address blocks:        2804:49ec:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:43:4b:c0:a3:04:0b:57:0a:27:e8:4b:8b:e0:26:7a:2c:0d:e9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Apr  4 10:51:51 2024 GMT
            Not After : Apr  3 10:56:51 2025 GMT
        Subject: CN=F05059374F487CC292BF0F7C19E9326448252A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:25:75:4b:e2:32:34:36:e5:cc:58:64:46:
                    97:3f:25:0b:10:41:63:50:32:50:33:32:3b:0e:f3:
                    4e:50:d7:a4:0f:e2:2a:9f:b9:f6:1d:e1:30:87:a3:
                    e2:bb:67:31:48:49:7f:ea:d5:bd:3f:06:85:f7:ea:
                    1b:e3:d9:71:47:9d:41:41:6e:65:d8:e6:2e:7a:38:
                    d0:94:e7:35:fa:ac:da:a7:4f:f4:08:26:55:b9:78:
                    27:8e:21:2f:71:12:34:17:ad:b3:2c:92:75:ab:2c:
                    2a:64:cc:ed:90:31:9f:b8:df:aa:34:9e:19:e6:06:
                    81:60:cc:a4:ed:f9:c3:d6:98:3b:a3:92:23:81:3e:
                    f6:78:f5:a9:6b:c1:5d:2c:78:47:ba:18:9b:8a:d5:
                    65:c8:de:fb:59:a8:1b:26:b4:39:f9:cd:43:e9:b8:
                    ec:b6:b4:4f:53:01:de:20:ef:3d:0a:40:72:e5:64:
                    bc:06:cc:e9:1b:60:14:8e:8a:fc:7a:f0:71:17:7f:
                    26:f9:cf:ea:a1:b1:9d:03:ae:29:de:42:6f:e7:3b:
                    dc:28:2b:b3:ea:f5:ab:7c:e9:56:c0:40:43:f0:aa:
                    3d:48:c5:7e:df:62:0e:d3:18:43:ba:59:a8:b2:fd:
                    27:48:7e:b1:89:5b:65:4a:bb:18:65:8f:af:41:8a:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:59:37:4F:48:7C:C2:92:BF:0F:7C:19:E9:32:64:48:25:2A:7B
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:e1:b9:9a:32:92:3c:8b:28:4a:0a:81:19:e6:36:2a:7b:d5:
         1c:4e:f5:85:2a:34:30:65:34:6a:8a:21:e0:61:3b:0d:89:e6:
         3e:e8:8d:d3:13:fc:5a:90:cd:6d:dc:de:56:d5:f8:ee:4e:ae:
         53:cd:ad:60:97:01:e4:19:e5:b5:a1:45:ce:ed:43:dd:81:9e:
         66:58:4f:c3:27:b5:cc:20:2d:3c:92:11:55:79:5c:d8:75:8e:
         72:6c:d8:7c:bf:65:a5:55:3e:0c:18:cf:a6:e0:05:18:cf:10:
         6e:77:9f:d7:f7:76:46:4f:a5:bb:db:6e:fe:c1:02:63:a8:62:
         31:51:d6:c7:6c:7f:f1:28:de:d2:ce:e7:08:ae:2b:c9:f2:ac:
         9b:6c:93:97:cf:39:ce:80:86:bd:63:b3:d1:75:bf:ff:d4:91:
         8d:3c:dc:41:70:3b:ed:e9:8a:cc:fb:25:2a:ef:f9:b8:4f:3a:
         05:69:ae:23:3b:b7:28:55:96:40:e0:d7:54:99:51:3f:da:8c:
         e9:b0:c2:67:00:c5:33:60:a7:65:a8:ee:c4:ac:8a:d3:d8:b1:
         26:d8:7c:0f:8b:fc:e4:65:f6:61:96:ba:da:75:05:7e:4a:bf:
         09:53:e9:13:af:ba:18:60:63:ba:3f:0a:62:78:b2:47:ac:76:
         ff:71:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org