Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/323830343a376432633a3a2f33322d3336203d3e20323731353434.roa
File:                     323830343a376432633a3a2f33322d3336203d3e20323731353434.roa (raw, json)
Hash identifier:          mZsHAAvZc7bMvMCt8bFa5t36FHUBpKc/DnNWrzZB8Ps=
Subject key identifier:   71:96:7A:E3:30:A6:DC:40:70:60:D7:97:50:14:19:8E:D9:5D:57:09
Certificate issuer:       /CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Certificate serial:       5F65F241ADCB8D5193B9DDB097098EB8BA6BAE08
Authority key identifier: F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/323830343a376432633a3a2f33322d3336203d3e20323731353434.roa
Signing time:             Thu 04 Apr 2024 02:09:38 +0000
ROA not before:           Thu 04 Apr 2024 02:04:38 +0000
ROA not after:            Thu 03 Apr 2025 02:09:38 +0000
asID:                     271544
IP address blocks:        2804:7d2c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
                          rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:65:f2:41:ad:cb:8d:51:93:b9:dd:b0:97:09:8e:b8:ba:6b:ae:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
        Validity
            Not Before: Apr  4 02:04:38 2024 GMT
            Not After : Apr  3 02:09:38 2025 GMT
        Subject: CN=71967AE330A6DC407060D7975014198ED95D5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f6:a4:23:2c:df:5b:cd:33:25:24:62:8e:b4:
                    11:68:84:89:3f:0a:57:d5:f9:78:68:8d:3b:0b:c5:
                    b4:64:6e:58:19:5d:5f:9f:30:dc:af:46:c5:ec:5c:
                    f2:ca:2a:1f:70:da:da:9f:f7:35:29:70:70:86:53:
                    11:83:5e:31:61:29:a9:ea:f4:37:a2:20:9d:5b:35:
                    20:c4:d5:ec:75:b5:a2:1e:5d:64:18:53:2f:f8:71:
                    18:68:fa:85:de:b3:26:15:8b:ef:11:0f:8d:cb:c3:
                    af:48:de:f8:29:4a:4e:8f:38:69:81:b1:97:56:50:
                    8d:a8:68:f4:ee:a4:b3:ca:d7:e9:ca:b9:a7:9a:f3:
                    ab:b4:a3:7a:85:0b:16:0c:2a:44:a3:20:b7:03:80:
                    a4:c4:ea:66:14:54:6f:fb:c5:91:d8:59:bf:e2:1f:
                    bb:72:40:be:35:be:46:ae:ea:35:81:bf:1f:0b:e5:
                    bc:e2:b6:51:9d:8a:1b:1c:fa:bf:80:22:84:d8:7c:
                    13:ae:06:0c:72:f7:7d:ae:30:fc:ab:6c:16:66:5c:
                    79:0a:2f:81:fe:24:7b:eb:6b:f6:f3:09:f8:6c:9a:
                    22:46:bb:55:a1:34:ae:15:5b:6e:4f:8b:95:36:5b:
                    2c:54:85:71:e1:57:d2:a7:e6:a2:52:b5:e0:9b:69:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:96:7A:E3:30:A6:DC:40:70:60:D7:97:50:14:19:8E:D9:5D:57:09
            X509v3 Authority Key Identifier:
                keyid:F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/323830343a376432633a3a2f33322d3336203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:d8:81:77:2c:81:cb:44:a8:c1:18:5d:6b:56:e9:fe:f4:74:
         07:0f:24:aa:9b:85:89:a2:cb:ec:08:f3:52:10:db:ce:96:5c:
         f8:31:3f:de:37:e2:77:8e:df:a2:40:46:8a:33:a5:50:13:73:
         0c:40:78:32:21:0c:5d:19:4b:98:68:e8:cd:ae:3a:a3:8b:65:
         5c:21:fe:4b:46:dc:cd:61:73:2b:a1:d6:f0:70:67:bf:88:4c:
         37:4a:ea:c0:97:3c:7b:74:f7:68:b9:98:89:39:16:dc:30:85:
         5d:56:00:c1:da:43:ca:67:1b:22:87:19:ec:0c:8d:b8:32:46:
         46:fc:d4:83:d9:19:c9:2f:79:04:2c:ca:eb:73:a1:c3:65:8c:
         2e:80:71:df:a2:5b:e5:b7:16:4d:fd:72:10:1e:90:e8:93:fe:
         67:e8:04:52:73:d6:2f:49:2e:f3:0a:23:11:42:91:25:c5:e4:
         88:00:67:fa:28:9d:16:25:e9:e6:39:3e:44:1c:29:5f:d4:2b:
         e7:22:7e:09:c3:79:c4:1e:ca:78:22:04:79:df:9a:b5:07:ce:
         f7:d0:c9:7d:01:9e:b8:7e:a2:22:e8:95:51:65:bf:36:1d:c1:
         fc:14:c0:f0:c6:21:b8:ba:f9:b7:ff:4b:70:e4:29:fc:b4:83:
         24:e2:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:20 2024 by rpki-client on console-ams.rpki-client.org