Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33332d3333203d3e20323637323039.roa
File:                     323830343a343965633a3a2f33332d3333203d3e20323637323039.roa (raw, json)
Hash identifier:          m69bJznPLdtfwdlapvy36VlVeqwWm5NcZ+dW1Oc/F1Y=
Subject key identifier:   A8:2D:2A:6E:B0:46:E0:DC:1F:6B:DB:89:B3:E0:27:1D:FE:A6:7B:90
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       39FE7F27987196D46F7A5A3EEF9EE68829308B4F
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33332d3333203d3e20323637323039.roa
Signing time:             Thu 04 Apr 2024 10:56:49 +0000
ROA not before:           Thu 04 Apr 2024 10:51:49 +0000
ROA not after:            Thu 03 Apr 2025 10:56:49 +0000
asID:                     267209
IP address blocks:        2804:49ec::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fe:7f:27:98:71:96:d4:6f:7a:5a:3e:ef:9e:e6:88:29:30:8b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Apr  4 10:51:49 2024 GMT
            Not After : Apr  3 10:56:49 2025 GMT
        Subject: CN=A82D2A6EB046E0DC1F6BDB89B3E0271DFEA67B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:ca:48:13:75:e3:ff:ec:96:0e:65:5c:6d:
                    6a:d3:bf:81:56:d0:15:03:de:3c:de:dc:39:aa:a9:
                    d8:5d:a7:86:a9:b0:aa:7f:2d:4d:0a:82:e5:1f:55:
                    46:4a:49:f4:16:dc:60:ce:d0:d9:1b:eb:2a:79:d3:
                    ef:c7:6e:56:19:89:14:4c:fd:e1:32:02:5a:85:07:
                    0b:53:b0:13:90:2b:d2:9d:bf:c9:f4:06:cf:19:8d:
                    a9:48:0b:3a:7a:09:c7:cc:a8:1a:3f:96:e4:01:43:
                    c7:10:c0:4a:4f:db:d1:fc:94:d1:6d:bc:d0:fc:98:
                    01:18:f7:fd:64:25:30:0f:62:d3:17:91:1b:e8:07:
                    99:d2:bd:ea:4d:0c:8d:7a:f1:05:03:bd:7f:a6:b3:
                    6b:1f:3b:d1:06:9b:43:09:32:f5:44:40:57:32:d5:
                    c8:25:ff:2a:66:cf:15:3d:4c:a3:7f:49:a6:46:19:
                    46:56:a3:7d:ef:2b:c0:c4:e2:34:75:e2:bb:2d:a2:
                    53:0c:89:4c:2e:90:39:7a:d8:d3:d3:db:16:5a:e1:
                    ee:8a:31:43:30:45:f9:e9:72:0f:c2:0e:0a:8b:57:
                    3a:44:03:40:3a:78:43:d6:e2:9a:d6:13:93:c7:40:
                    c4:54:b5:6b:9f:95:bd:bd:42:07:56:ab:11:1b:5c:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2D:2A:6E:B0:46:E0:DC:1F:6B:DB:89:B3:E0:27:1D:FE:A6:7B:90
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33332d3333203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:0e:84:f6:4f:93:1c:bb:66:db:f9:ab:c3:32:83:94:9a:
         9d:f8:ad:e2:4d:11:7d:25:25:f8:4b:7b:9d:27:ac:a9:35:93:
         e3:79:44:d5:64:3a:3c:49:a4:99:6f:76:9f:d4:ba:ad:bd:09:
         38:f4:e1:0f:8d:42:83:20:c4:d5:b7:28:35:51:87:80:21:b1:
         61:bf:fc:52:20:d1:5b:58:62:4c:27:e1:0f:15:5d:b8:5d:95:
         69:8b:9f:20:61:d3:65:a6:5f:ab:61:2f:ea:6b:cf:71:37:51:
         01:4e:24:52:38:b4:d1:e0:bd:06:b8:7b:0d:92:f1:2f:02:8f:
         b5:7d:98:41:7b:55:25:9d:1c:04:8f:da:c8:74:71:5e:d9:59:
         d9:1a:6a:d3:9b:98:50:58:5a:73:af:2a:87:ee:90:16:5e:22:
         83:4b:fa:17:ea:d2:fa:58:5f:51:c6:b4:45:06:65:6c:09:51:
         4f:41:ad:48:72:f7:ac:c7:ae:a5:78:60:67:c3:7f:ff:2c:cd:
         48:1c:d0:cc:3b:d6:f6:66:a3:f4:dc:75:37:eb:ec:d2:fd:25:
         a6:9d:49:f6:42:b5:08:62:b5:5e:62:59:d0:ec:62:b8:9b:70:
         e7:ee:75:0b:91:81:c5:4c:fd:b5:92:fd:70:e0:13:6c:f9:b4:
         8a:d3:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org