Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33342d3334203d3e20323637323039.roa
File:                     323830343a343965633a3a2f33342d3334203d3e20323637323039.roa (raw, json)
Hash identifier:          ywi5Y7SSQmZnsFvqptnKty7ZLGdSkp1lLdhw1wPaqgw=
Subject key identifier:   F1:EF:A2:50:3F:76:F9:F8:4B:29:BC:D5:1A:5D:BA:52:C2:08:0C:58
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       2D263B4DC4A4A26AE0426A7D4341BA6E96259C6B
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33342d3334203d3e20323637323039.roa
Signing time:             Thu 04 Apr 2024 10:56:50 +0000
ROA not before:           Thu 04 Apr 2024 10:51:50 +0000
ROA not after:            Thu 03 Apr 2025 10:56:50 +0000
asID:                     267209
IP address blocks:        2804:49ec::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:26:3b:4d:c4:a4:a2:6a:e0:42:6a:7d:43:41:ba:6e:96:25:9c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Apr  4 10:51:50 2024 GMT
            Not After : Apr  3 10:56:50 2025 GMT
        Subject: CN=F1EFA2503F76F9F84B29BCD51A5DBA52C2080C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:8a:19:98:d7:93:6b:10:76:81:20:10:6e:
                    75:07:45:52:a8:45:d4:63:e9:3f:c0:94:41:2d:56:
                    5d:17:ff:61:ff:d3:76:07:83:5a:aa:b2:f9:79:d4:
                    3c:41:e3:fc:d5:c2:73:37:08:74:48:3b:d0:ba:14:
                    9b:ff:89:2c:c9:0e:49:a8:99:7c:88:68:10:fe:a6:
                    9a:94:74:34:35:63:f6:49:dc:20:a6:86:ff:ba:c5:
                    89:9c:72:19:e5:c3:c8:43:32:b1:3c:3b:53:d2:d5:
                    4c:02:03:3b:45:e3:51:93:b3:6f:49:36:ff:29:bc:
                    94:6a:d4:cd:4a:3a:f4:f6:58:0d:c7:bb:e3:ac:85:
                    7d:37:03:40:f0:72:da:14:4c:4a:68:b4:56:ad:bf:
                    47:3c:c4:cf:40:5a:4d:34:21:08:75:39:f5:5e:ce:
                    5a:89:6e:49:ad:a2:19:b6:43:a0:83:2a:02:7b:72:
                    ef:b9:04:f2:09:ac:6b:19:5b:27:4e:64:c8:60:53:
                    22:23:4a:16:dc:53:3b:90:f9:ee:2d:ea:95:5d:06:
                    d3:fa:33:b6:ec:53:3a:81:72:93:f3:0f:6d:a3:76:
                    e9:05:d7:76:77:9a:70:82:54:cd:49:64:fe:0b:bb:
                    84:d3:fb:1b:32:99:14:21:dd:2d:57:45:44:41:0b:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EF:A2:50:3F:76:F9:F8:4B:29:BC:D5:1A:5D:BA:52:C2:08:0C:58
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33342d3334203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec::/34

    Signature Algorithm: sha256WithRSAEncryption
         20:28:3c:5f:80:87:ec:23:9e:0e:e6:c9:1c:6f:7f:cd:78:d2:
         5a:2e:09:43:97:72:fc:e7:f4:54:d1:d6:e7:26:f3:61:c7:ca:
         b1:47:26:67:2a:a9:0e:7e:57:32:d4:e4:19:00:6f:c9:7b:65:
         e1:f7:b0:1b:16:6f:3d:e8:3c:65:6b:8a:73:a4:5e:91:33:9a:
         a2:a2:7d:97:eb:93:d9:72:67:37:f6:d6:6b:ba:a0:a7:11:7a:
         85:1b:c8:50:0e:33:66:8e:b5:26:f6:21:f7:2e:f4:e9:bf:e1:
         5a:e2:8b:d4:6f:f1:3c:4c:f9:83:8a:97:b3:24:9e:55:e7:93:
         1b:b2:ed:8e:c9:44:51:34:bf:e1:8f:a2:ab:a3:6f:a2:04:41:
         02:75:03:e9:ea:69:0c:a3:67:b8:6c:ac:17:1b:f8:64:15:d3:
         8a:30:a9:ba:63:51:c6:e9:72:2b:97:fe:5e:df:1e:46:4e:6d:
         a2:10:34:1d:22:87:e9:b9:17:e6:0b:3b:61:ab:e6:bf:c4:ec:
         69:5f:29:16:09:25:83:f6:56:74:fd:96:c3:34:04:4c:bc:e2:
         6b:fc:ce:6b:e9:02:16:23:be:88:85:7f:85:5f:4c:66:d8:b9:
         67:1d:a2:c3:3c:a3:e1:42:a9:02:7e:ea:0c:fa:aa:44:d9:f2:
         0c:9a:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org