Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa
File:                     323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa (raw, json)
Hash identifier:          sP0fHVVlRPMh0GzfJ5/sl+W+kumG2uIbd0QuXmb8N4o=
Subject key identifier:   29:E2:1B:50:9E:C5:FC:E8:CA:9B:F2:46:02:7C:E1:78:CC:B8:C9:6F
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       281DE6156E606F5B89E5B77F09CF73774A752F3A
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:22 +0000
ROA not before:           Thu 04 Apr 2024 14:51:22 +0000
ROA not after:            Thu 03 Apr 2025 14:56:22 +0000
asID:                     52780
IP address blocks:        2804:2e94:6000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1d:e6:15:6e:60:6f:5b:89:e5:b7:7f:09:cf:73:77:4a:75:2f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:22 2024 GMT
            Not After : Apr  3 14:56:22 2025 GMT
        Subject: CN=29E21B509EC5FCE8CA9BF246027CE178CCB8C96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:43:cd:34:25:82:c3:90:07:0e:53:1c:c1:
                    1c:5b:07:76:87:67:ac:1c:90:79:8b:b9:ef:73:cb:
                    41:29:a2:d3:e4:d8:e3:e0:91:ac:60:49:8d:59:27:
                    64:e2:35:62:ca:81:b4:92:6a:b6:a1:40:70:67:4b:
                    07:b3:71:bf:f3:3d:90:b9:9f:8c:6b:f1:55:73:ce:
                    c1:4e:4d:e6:d8:9b:af:0d:d1:f4:eb:a5:11:88:f1:
                    aa:d1:fc:ec:cc:14:0e:1c:99:f7:5c:83:ee:b3:87:
                    b4:3c:ef:fc:2f:c7:e2:8b:9d:f0:1e:1b:5f:25:3e:
                    ac:47:fd:8c:61:c3:20:7f:fd:5f:25:4c:c6:3b:d4:
                    ce:0d:a1:ea:9f:48:ec:f1:80:d5:3e:c3:e0:af:6c:
                    6a:3a:9c:a8:01:2a:8d:bd:74:b0:e6:ec:ee:d9:c2:
                    bd:05:71:f1:6d:e7:66:ad:60:2d:55:81:9f:7e:26:
                    db:15:6f:82:9a:fd:79:05:2d:59:a5:be:f9:3f:0b:
                    d1:6c:8e:25:71:82:7d:06:c7:a9:7a:e7:94:fb:cd:
                    fd:3f:a2:dd:1c:dc:82:81:45:f8:d9:76:d3:47:ed:
                    fd:71:c0:c1:76:79:b7:d5:31:b0:c8:b3:84:80:b5:
                    bc:f6:87:ce:7a:ee:41:e0:f6:35:81:8a:78:f6:fb:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E2:1B:50:9E:C5:FC:E8:CA:9B:F2:46:02:7C:E1:78:CC:B8:C9:6F
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c6:82:66:c9:5c:46:df:39:a9:56:06:cc:96:0c:32:fa:49:0a:
         01:09:a3:90:dd:b6:c9:40:fb:b7:b9:9a:81:d9:20:8e:36:00:
         4e:f4:9f:a1:86:0d:d3:16:a8:48:5c:61:7f:3d:54:1a:14:10:
         95:83:51:fd:af:a6:d7:2b:8e:80:9c:c4:b4:94:4f:ab:fc:49:
         d1:2e:a4:ce:9c:4f:df:d2:3e:c4:f3:93:af:41:28:9c:38:96:
         ac:ca:db:51:65:fc:68:81:bf:74:11:56:99:f6:6e:f8:00:c6:
         21:39:2a:db:e3:0a:40:da:89:88:86:63:fc:60:46:33:b8:ea:
         5a:71:ca:7c:2c:01:3d:33:2a:fa:48:66:06:ad:d8:52:ad:d4:
         63:d9:4c:6a:82:e0:33:a2:0e:41:1c:ba:92:bf:fc:a6:61:59:
         85:38:36:fd:03:d1:9e:07:93:d2:db:cf:5a:64:9c:9f:7e:df:
         b7:bd:9c:67:d2:ab:ac:8b:48:e0:4e:3f:f8:84:f5:21:cf:e7:
         c8:2a:84:0f:db:18:f4:84:8e:c5:8b:e8:51:fc:ab:8f:21:b7:
         d4:99:88:3b:80:a2:ef:91:99:e4:39:21:f0:fb:ff:90:97:66:
         d7:10:14:31:9c:70:9c:07:02:04:9b:84:58:cb:6a:51:77:40:
         5f:83:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org