Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa
File:                     323830343a326361633a3a2f33322d3438203d3e20323635323334.roa (raw, json)
Hash identifier:          PffOQQE5fsf6hwB7M8ZVTpaQKRvC3jwA2S6+EZH7RZo=
Subject key identifier:   3F:CD:3B:92:B9:07:46:51:BE:33:8B:1A:9E:3B:25:10:E6:ED:AF:3A
Certificate issuer:       /CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
Certificate serial:       7017D3335A46FDEEC8A855EF1F4F616A9A1FEE0A
Authority key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     265234
IP address blocks:        2804:2cac::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl
                          rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:d3:33:5a:46:fd:ee:c8:a8:55:ef:1f:4f:61:6a:9a:1f:ee:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:1e:5e:56:15:14:74:d2:63:44:8d:79:18:
                    f6:1a:56:9b:95:a9:09:dc:1e:1b:9b:83:f4:f2:f5:
                    9d:1e:70:f7:77:ad:b4:4f:30:20:07:c8:ba:91:e3:
                    01:48:54:cb:70:e1:e1:82:8d:a4:c8:4a:9b:51:bb:
                    40:3c:e4:3d:74:52:be:c9:f4:62:b5:2f:81:0d:e4:
                    7f:b0:4b:c1:1e:54:f4:a1:e5:0f:f6:69:29:f2:69:
                    87:a0:82:55:57:07:93:79:d5:ec:45:11:15:58:31:
                    ed:65:af:eb:a2:e3:36:82:85:ba:76:1a:db:1a:1e:
                    4a:cc:81:9f:3c:03:44:f9:6a:90:c0:86:38:7d:77:
                    0a:2e:74:64:93:59:ec:55:f5:0e:2b:3c:f7:a1:41:
                    3a:dc:2d:6a:a8:99:0a:11:65:ba:78:a7:3b:45:e0:
                    c5:41:13:56:9d:1d:c6:74:49:cf:49:a7:8a:8f:19:
                    32:09:60:89:1e:87:5a:30:03:46:f7:76:34:0d:0d:
                    53:d4:49:23:cd:f3:ee:3d:6b:ff:28:a0:e0:c9:d6:
                    ba:16:3a:10:ef:76:6f:47:b9:99:5d:54:56:ed:d9:
                    ab:5d:2c:0f:aa:e4:ee:9e:d7:ab:a2:0b:61:e6:df:
                    8a:7e:74:57:66:f2:c4:64:c8:a1:71:2e:48:4e:d0:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CD:3B:92:B9:07:46:51:BE:33:8B:1A:9E:3B:25:10:E6:ED:AF:3A
            X509v3 Authority Key Identifier:
                keyid:FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:06:19:e3:42:01:a5:7a:27:48:d6:52:c7:4d:33:67:f7:2f:
         ea:3c:12:55:50:4b:83:00:4d:4d:1f:12:6b:48:20:fd:59:84:
         4b:b1:6b:4d:f1:02:fc:ee:74:04:a4:58:b3:b5:69:01:3c:ae:
         49:2a:84:8b:9e:27:3d:e5:5f:39:13:cf:7a:bc:d8:bf:a9:b0:
         80:8f:45:16:a0:de:19:34:d0:a0:70:c0:d8:db:34:73:c7:5d:
         94:ba:9a:d8:38:26:9f:e8:c7:db:7f:60:f8:3d:bc:2b:ab:9c:
         6d:55:79:3e:29:5b:9c:f8:8a:f3:19:47:a5:62:97:44:c7:3b:
         69:75:b4:4d:42:27:60:b0:80:c7:90:c0:53:7a:ec:80:46:e2:
         88:23:54:fb:36:32:e3:72:7a:50:d4:59:0e:13:98:74:32:e6:
         e8:b8:d2:3e:68:7c:78:08:08:bd:b3:86:c0:29:c4:76:57:43:
         41:d7:65:a6:93:55:c4:5a:46:2d:d9:6c:c2:f6:29:ff:ae:18:
         a7:7f:9c:bb:22:d5:11:be:0d:20:44:da:e6:6c:49:b5:aa:7d:
         f2:a4:42:93:12:b7:73:7e:35:2d:e4:cb:db:03:6d:92:b6:69:
         de:b3:20:97:b2:b5:fb:42:41:ed:26:91:e4:31:7c:47:12:1a:
         3f:09:e5:4e
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUcBfTM1pG/e7IqFXvH09hapof7gowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIyOTZDQjk1RDY1NzA5N0Q4MUFGQzc4QkU2QTQwQUMy
NTkxRTM0OTAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc1QjFFNUU1NjE1MTQ3NEQy
NjM0NDhENzkxOEY2MUE1NjlCOTVBOTA5REMxRTFCOUI4M0Y0RjJGNTlEMUU3MEY3
NzdBREI0NEYzMDIwMDdDOEJBOTFFMzAxNDg1NENCNzBFMUUxODI4REE0Qzg0QTlC
NTFCQjQwM0NFNDNENzQ1MkJFQzlGNDYyQjUyRjgxMERFNDdGQjA0QkMxMUU1NEY0
QTFFNTBGRjY2OTI5RjI2OTg3QTA4MjU1NTcwNzkzNzlENUVDNDUxMTE1NTgzMUVE
NjVBRkVCQTJFMzM2ODI4NUJBNzYxQURCMUExRTRBQ0M4MTlGM0MwMzQ0Rjk2QTkw
QzA4NjM4N0Q3NzBBMkU3NDY0OTM1OUVDNTVGNTBFMkIzQ0Y3QTE0MTNBREMyRDZB
QTg5OTBBMTE2NUJBNzhBNzNCNDVFMEM1NDExMzU2OUQxREM2NzQ0OUNGNDlBNzhB
OEYxOTMyMDk2MDg5MUU4NzVBMzAwMzQ2Rjc3NjM0MEQwRDUzRDQ0OTIzQ0RGM0VF
M0Q2QkZGMjhBMEUwQzlENkJBMTYzQTEwRUY3NjZGNDdCOTk5NUQ1NDU2RUREOUFC
NUQyQzBGQUFFNEVFOUVEN0FCQTIwQjYxRTZERjhBN0U3NDU3NjZGMkM0NjRDOEEx
NzEyRTQ4NEVEMDY1NkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt1seXlYVFHTSY0SNeRj2GlablakJ3B4bm4P08vWdHnD3d620TzAg
B8i6keMBSFTLcOHhgo2kyEqbUbtAPOQ9dFK+yfRitS+BDeR/sEvBHlT0oeUP9mkp
8mmHoIJVVweTedXsRREVWDHtZa/rouM2goW6dhrbGh5KzIGfPANE+WqQwIY4fXcK
LnRkk1nsVfUOKzz3oUE63C1qqJkKEWW6eKc7ReDFQRNWnR3GdEnPSaeKjxkyCWCJ
HodaMANG93Y0DQ1T1EkjzfPuPWv/KKDgyda6FjoQ73ZvR7mZXVRW7dmrXSwPquTu
nterogth5t+KfnRXZvLEZMihcS5ITtBlawIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FD/NO5K5B0ZRvjOLGp47JRDm7a86MB8GA1UdIwQYMBaAFPspbLldZXCX2Br8eL5q
QKwlkeNJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U5MWgxV0Z3Yk5YNFpE
ZXRZZlN5M2t6dHA1RUZuZWlvYVlGQXh6NXBmaHp2LzEvRkIyOTZDQjk1RDY1NzA5
N0Q4MUFGQzc4QkU2QTQwQUMyNTkxRTM0OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GQjI5NkNCOTVENjU3MDk3RDgxQUZDNzhCRTZBNDBBQzI1OTFF
MzQ5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FOTFoMVdGd2JOWDRaRGV0WWZT
eTNrenRwNUVGbmVpb2FZRkF4ejVwZmh6di8xLzMyMzgzMDM0M2EzMjYzNjE2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTMyMzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
LKwwDQYJKoZIhvcNAQELBQADggEBANYGGeNCAaV6J0jWUsdNM2f3L+o8ElVQS4MA
TU0fEmtIIP1ZhEuxa03xAvzudASkWLO1aQE8rkkqhIueJz3lXzkTz3q82L+psICP
RRag3hk00KBwwNjbNHPHXZS6mtg4Jp/ox9t/YPg9vCurnG1VeT4pW5z4ivMZR6Vi
l0THO2l1tE1CJ2CwgMeQwFN67IBG4ogjVPs2MuNyelDUWQ4TmHQy5ui40j5ofHgI
CL2zhsApxHZXQ0HXZaaTVcRaRi3ZbML2Kf+uGKd/nLsi1RG+DSBE2uZsSbWqffKk
QpMSt3N+NS3ky9sDbZK2ad6zIJeytftCQe0mkeQxfEcSGj8J5U4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org