Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa
File:                     323830343a333639343a3a2f33322d3438203d3e20323636333537.roa (raw, json)
Hash identifier:          RJP062ag7Tiqbr957fjSFMvSxdUsqLPfyDd5lsHtsfE=
Subject key identifier:   89:78:AD:19:2E:E9:CC:03:4B:4C:A4:A0:91:AF:6C:CA:59:DF:BE:EB
Certificate issuer:       /CN=0CC5E1CBDCD04F80282F613D311E54D6E47CE236
Certificate serial:       488BA1E20D594E0BEC7D64BF8CE3CAC7E099E70B
Authority key identifier: 0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266357
IP address blocks:        2804:3694::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.crl
                          rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8b:a1:e2:0d:59:4e:0b:ec:7d:64:bf:8c:e3:ca:c7:e0:99:e7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5E1CBDCD04F80282F613D311E54D6E47CE236
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:c4:14:4f:e1:8b:d9:85:b6:78:59:1b:f3:
                    e5:8b:56:92:f6:0a:25:4f:1b:e2:84:41:ca:b3:ad:
                    53:8e:9a:06:c3:e3:81:f3:82:99:d0:41:b6:cb:e6:
                    1a:1a:bf:af:e7:44:64:3a:6a:b6:45:44:34:4b:4a:
                    1a:91:e1:61:ba:55:ba:e4:df:b0:5e:80:52:f0:97:
                    3d:e4:25:88:80:68:24:10:ca:75:ad:31:1c:b8:2f:
                    b3:49:48:08:75:7b:47:67:4c:38:eb:eb:8a:b7:24:
                    6a:e5:16:a2:89:56:b0:d4:a2:4f:92:6f:44:ee:04:
                    0f:81:45:25:41:68:9f:55:97:e7:7e:4b:0f:92:aa:
                    70:7c:90:a4:45:de:7c:15:66:01:d2:bf:96:00:78:
                    99:0e:ec:91:e4:aa:e5:a8:71:4b:f4:79:53:79:4a:
                    e2:ec:2a:79:4b:2c:8d:2c:91:73:22:ac:f0:ed:0c:
                    03:96:bf:e1:32:6a:c5:8f:9c:06:cb:21:93:41:b4:
                    82:2e:4c:58:ec:30:15:a0:48:13:c1:11:38:6f:5f:
                    a7:9a:39:5d:67:e7:0e:49:9e:2f:93:8a:4b:4a:cf:
                    38:06:27:9e:44:2e:8b:f5:4a:b1:bf:3e:ac:a5:4b:
                    dc:cb:49:3c:f3:f4:23:e6:30:c5:ed:08:86:cd:37:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:78:AD:19:2E:E9:CC:03:4B:4C:A4:A0:91:AF:6C:CA:59:DF:BE:EB
            X509v3 Authority Key Identifier:
                keyid:0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3694::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:98:a0:77:57:f1:13:33:08:cc:72:c0:17:48:bd:c4:61:6c:
         6d:54:04:97:26:b8:21:91:8d:d9:3a:b5:52:95:cd:1b:fc:f5:
         b3:ec:02:bd:43:72:79:c6:c6:1e:e2:1d:5c:d8:34:39:2d:75:
         7b:8f:d9:49:b8:e9:d9:a9:cf:12:a8:5e:e8:84:2c:cb:9f:8f:
         18:72:f6:31:1d:55:5a:85:e1:d0:03:9a:22:d9:3f:d5:73:17:
         49:d3:6e:d0:96:4d:9a:60:20:aa:0e:e3:df:10:65:a7:2d:c5:
         b3:c4:4e:16:86:d9:30:ad:8b:f6:e2:c5:e7:6a:2b:ed:4a:cf:
         72:eb:85:45:b9:bd:bf:2e:32:a5:09:1b:ab:bd:27:3e:cc:4a:
         08:cf:d1:98:49:0a:f2:c7:fc:32:c5:bb:05:4a:47:1a:20:b6:
         3c:8b:00:0a:77:20:8f:3d:ef:6a:77:38:19:da:bb:a5:f7:9f:
         8d:16:bf:0c:8f:76:58:71:39:ea:26:7a:9d:b4:3e:14:32:b0:
         c5:31:ba:43:b9:d3:ee:93:0d:7e:31:ba:15:c2:6f:b4:1f:9a:
         82:fa:47:71:e1:03:8f:8c:6a:11:84:f5:99:08:d8:5e:42:50:
         fb:fa:fe:47:c6:33:5e:4c:20:2c:c3:b5:52:d8:4b:1f:46:e8:
         10:3f:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:58 2024 by rpki-client on console-ams.rpki-client.org