Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a393230303a3a2f34302d3430203d3e203532373830.roa
File:                     323830343a326539343a393230303a3a2f34302d3430203d3e203532373830.roa (raw, json)
Hash identifier:          rIcNSDJpzvNe11vZXOB6MPo0XO34fWx6qxUwmmF3l+Q=
Subject key identifier:   00:65:B4:FA:2D:CA:18:5D:71:13:8F:7E:9A:ED:E0:A6:B2:39:84:CF
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       14D435C24B6F775E670C6D7387AB8302AF9D3B3D
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a393230303a3a2f34302d3430203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:23 +0000
ROA not before:           Thu 04 Apr 2024 14:51:23 +0000
ROA not after:            Thu 03 Apr 2025 14:56:23 +0000
asID:                     52780
IP address blocks:        2804:2e94:9200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d4:35:c2:4b:6f:77:5e:67:0c:6d:73:87:ab:83:02:af:9d:3b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:23 2024 GMT
            Not After : Apr  3 14:56:23 2025 GMT
        Subject: CN=0065B4FA2DCA185D71138F7E9AEDE0A6B23984CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:82:51:72:90:0a:fc:dc:47:63:1e:18:83:
                    6a:18:62:10:86:95:de:1e:31:31:b7:77:95:b1:10:
                    89:ac:dc:b5:4c:de:1b:12:7b:90:9e:22:b2:c2:ef:
                    7d:d9:e8:5b:87:dc:36:78:06:a6:94:7d:cf:5f:cd:
                    0a:be:e7:e9:91:f2:50:1a:96:b2:23:af:ae:da:ef:
                    48:b8:4b:06:2d:85:80:6d:52:5a:09:d8:e2:21:fc:
                    6d:40:1e:5c:ae:a0:7b:44:98:13:b2:b0:0c:29:a6:
                    b6:db:e1:31:9d:3f:e2:8f:57:bf:c3:4f:af:38:6e:
                    e8:d1:e2:0b:8d:73:0d:4b:2f:92:b7:83:85:17:08:
                    9e:a3:06:9d:34:0e:8c:70:66:e4:ef:87:69:c8:25:
                    53:25:b0:0c:07:8f:cb:3e:20:b1:df:e3:89:2e:73:
                    ce:36:f0:49:9b:c7:01:03:6c:6f:e6:ce:d4:7f:d8:
                    d5:15:fe:29:e5:4d:37:93:96:cd:fa:3e:2a:7e:64:
                    e2:b0:95:6c:e0:61:52:b5:55:58:14:4f:6f:7a:38:
                    7a:a8:0e:24:ed:6d:88:26:7d:14:ee:cb:58:22:88:
                    51:d6:b8:fc:f6:57:69:9c:fa:f3:eb:49:ba:ad:59:
                    b3:bc:de:7d:87:36:65:c9:ed:c0:90:0d:3a:8e:63:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:65:B4:FA:2D:CA:18:5D:71:13:8F:7E:9A:ED:E0:A6:B2:39:84:CF
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a393230303a3a2f34302d3430203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:ed:75:f8:7c:6b:2f:a3:6e:3b:07:86:ba:1a:62:85:63:
         ef:9b:4b:91:14:c7:bc:af:36:f9:2e:a8:46:f3:86:8b:ff:9e:
         00:29:90:98:55:45:52:5e:6e:d0:a7:a5:fa:8b:02:56:ca:c0:
         38:f7:0c:81:7e:07:a9:82:09:57:16:23:99:2d:d0:76:5a:ca:
         9c:be:d1:a2:e3:37:70:ee:b0:40:55:b5:5b:a0:22:01:06:00:
         2e:e6:8e:8a:fa:1b:31:76:79:28:bb:9f:88:46:58:4d:b9:ce:
         77:27:62:43:50:34:a0:e0:d6:3b:d7:58:bb:73:50:83:1c:9f:
         b4:71:1e:27:b5:21:9a:b9:8c:27:0a:48:6d:67:82:57:d9:f4:
         90:5b:3b:33:70:c7:d4:66:24:7b:67:17:92:7a:f2:84:de:97:
         2c:0d:d0:6d:84:98:7d:cd:9e:50:87:17:62:d2:6f:29:12:8c:
         ca:0c:06:fa:a8:77:aa:03:d3:2e:a7:30:8a:b1:d6:b0:a1:1c:
         aa:27:31:5a:27:b4:e4:7e:17:84:ca:0b:e1:62:02:4a:44:e2:
         65:37:46:b3:ca:b8:57:8d:6a:b0:52:0b:c1:95:74:a9:ab:1f:
         f3:b2:d8:5e:78:94:86:99:bf:75:43:66:6c:9a:0d:5f:0d:e4:
         29:cc:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org