Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33352d3335203d3e203532373830.roa
File:                     323830343a326539343a3a2f33352d3335203d3e203532373830.roa (raw, json)
Hash identifier:          Z/LtwH2tdoRwxScBwKdRkqNtG1JZKNXECO3R/R/56jM=
Subject key identifier:   A6:A7:6D:B6:5F:8E:93:F3:FF:47:0A:F4:55:F6:76:44:5C:1A:FD:3F
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       2B04A1866D1AE85534A960D023FE32EA095AA4AB
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33352d3335203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:23 +0000
ROA not before:           Thu 04 Apr 2024 14:51:23 +0000
ROA not after:            Thu 03 Apr 2025 14:56:23 +0000
asID:                     52780
IP address blocks:        2804:2e94::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:a1:86:6d:1a:e8:55:34:a9:60:d0:23:fe:32:ea:09:5a:a4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:23 2024 GMT
            Not After : Apr  3 14:56:23 2025 GMT
        Subject: CN=A6A76DB65F8E93F3FF470AF455F676445C1AFD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:e5:05:6a:c3:14:39:ba:ac:96:94:8b:92:
                    4e:a2:95:e2:40:89:82:2a:4e:4f:3f:54:37:57:50:
                    e3:20:9f:16:54:13:f3:c8:ef:16:63:ce:64:e5:cb:
                    97:c7:55:c5:4f:b7:02:94:6f:ee:27:79:0e:83:44:
                    f8:a1:fb:5b:30:2b:73:57:40:d1:31:d1:bb:10:f9:
                    55:68:d2:81:a0:c4:48:0d:a8:11:fb:cd:2c:76:b7:
                    10:9a:03:a3:0c:91:b9:83:bf:19:1a:fa:2e:0e:de:
                    f6:69:a7:a1:7d:72:29:f6:31:f2:b0:ae:5d:6e:7d:
                    64:33:4b:00:c3:1f:2c:c2:98:cb:ae:12:e8:b4:40:
                    0d:b8:d6:d4:1f:66:ee:43:58:e6:71:8b:e4:4c:77:
                    36:24:37:27:7a:cc:44:ec:d7:60:1b:1f:cd:82:00:
                    d1:fc:e6:cc:8c:32:47:f0:3e:0a:83:e0:cc:8e:b9:
                    d3:e4:39:85:40:e4:2b:80:be:46:c8:98:55:74:7d:
                    f1:0c:a2:f5:f7:97:c7:3c:f0:3b:8b:01:1f:f3:f6:
                    54:82:53:9f:22:eb:3c:a2:76:18:cb:b1:d7:ab:7c:
                    d6:40:a1:be:ef:7c:1c:26:e1:20:f4:a1:5a:89:99:
                    ed:f7:dc:c8:cd:6b:1e:40:3c:0a:c2:0f:32:46:bc:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A7:6D:B6:5F:8E:93:F3:FF:47:0A:F4:55:F6:76:44:5C:1A:FD:3F
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33352d3335203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94::/35

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:f2:90:cd:bd:b0:15:90:c9:58:25:6b:4b:b5:69:42:c3:
         92:ee:69:b4:2c:d9:f0:51:73:c9:36:39:10:ec:34:6c:37:e0:
         62:e4:4c:d7:ed:ae:3c:cb:b6:88:24:4a:33:55:3d:61:7a:d6:
         ec:14:c4:4b:85:50:cf:9e:6d:fb:db:b0:4a:cf:aa:99:c8:04:
         f2:b7:99:cd:5a:5b:7a:db:1d:22:4a:8b:a4:10:45:64:9a:3a:
         25:b8:80:01:37:ea:57:4e:27:bd:62:92:2a:1f:7a:e7:3b:eb:
         63:bd:e2:e1:7e:20:ed:d9:89:20:1c:f7:43:a9:3e:98:a5:27:
         c9:e9:99:36:15:d5:e0:14:07:69:b9:d1:ad:34:f6:09:0c:c6:
         e8:13:4f:c2:6c:60:8c:63:24:b5:4d:47:69:b7:07:a3:a6:dd:
         f4:b5:0d:a9:12:9b:44:0d:e8:dc:0a:80:a9:0e:e3:3c:25:27:
         66:e3:45:ca:9d:41:40:25:d0:c4:1f:0e:12:5f:4b:e9:09:82:
         26:74:c2:20:43:1b:b5:9c:ec:c7:7d:1b:b4:bf:95:7b:0c:c8:
         ce:cf:9b:a8:d8:6a:98:70:fe:a6:e9:9c:36:15:c9:a3:27:97:
         61:25:52:b6:84:91:b7:7e:26:08:cf:de:81:d0:76:76:59:af:
         3d:60:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org