Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa
File:                     323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (raw, json)
Hash identifier:          p9wdw3IpalLTSYQmeAVo7+UtpBzlacyHo8jFFMWZSB4=
Subject key identifier:   A3:E0:1D:D2:C0:78:48:02:88:34:43:9F:FA:BD:EE:49:3E:72:48:DD
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       10B031E1D43F73C7509AFE5D139DD7EA0C8BE225
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa
Signing time:             Thu 04 Apr 2024 20:40:20 +0000
ROA not before:           Thu 04 Apr 2024 20:35:20 +0000
ROA not after:            Thu 03 Apr 2025 20:40:20 +0000
asID:                     262299
IP address blocks:        2804:a8c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 19:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b0:31:e1:d4:3f:73:c7:50:9a:fe:5d:13:9d:d7:ea:0c:8b:e2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Apr  4 20:35:20 2024 GMT
            Not After : Apr  3 20:40:20 2025 GMT
        Subject: CN=A3E01DD2C07848028834439FFABDEE493E7248DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:93:98:6a:6d:89:d2:ad:cc:fe:22:b2:6d:
                    69:2d:b5:1d:e7:3c:93:96:f1:fa:13:be:33:53:11:
                    c0:b4:01:81:50:13:9c:d0:30:fb:b1:6e:eb:7e:34:
                    25:54:b2:0d:41:5a:1d:16:81:33:85:6e:ae:5f:e5:
                    66:48:19:66:a3:f3:3e:8c:02:ba:e0:ed:46:ee:f8:
                    17:c0:48:21:84:f2:19:0f:22:0d:8c:ca:54:53:71:
                    88:40:b5:fe:41:e9:96:77:94:6a:00:bd:28:12:01:
                    71:3e:ee:ec:6a:8b:9a:0f:33:50:dd:2c:b8:3c:04:
                    56:4b:48:e0:62:56:71:0b:f4:f3:6d:ae:04:45:9d:
                    e2:fa:23:43:ca:22:b3:0d:2f:17:db:12:dd:af:e1:
                    ad:fa:f6:df:1e:38:d2:46:49:64:19:80:30:0f:43:
                    4c:ee:2b:f8:bc:ca:2e:aa:b4:06:ae:1e:c0:ad:2c:
                    dd:90:36:ac:54:aa:8c:07:6e:d7:cc:27:db:d5:f5:
                    7c:b5:90:74:37:86:e1:b1:1e:44:25:9c:82:57:95:
                    f8:b4:f6:8d:9a:e6:b8:53:43:5a:93:0d:e6:7a:d3:
                    bf:f5:68:ac:49:66:4d:36:ba:29:6f:55:d8:5f:c3:
                    70:cd:c0:f2:d0:be:59:4f:a2:da:a1:10:0d:d9:8b:
                    23:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:1D:D2:C0:78:48:02:88:34:43:9F:FA:BD:EE:49:3E:72:48:DD
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:4d:fc:b4:c3:a8:77:83:f0:2c:74:14:9d:e5:ad:02:5d:
         b0:63:af:cd:ba:ba:95:4d:93:f6:83:a0:bc:b0:aa:98:6d:f7:
         6a:ba:59:66:c2:aa:09:b9:ff:14:62:a3:1d:5b:1a:26:e0:bf:
         82:65:56:09:2b:88:b2:f5:d2:80:5b:ce:50:57:c1:6a:52:7e:
         ae:b3:02:cf:56:51:32:aa:96:0a:fd:a6:61:13:f0:d6:a0:fb:
         5e:77:70:db:0d:dc:74:34:c3:cb:cf:f0:58:73:21:cc:63:83:
         6c:5f:24:e6:ca:42:8d:2b:21:07:fe:8b:19:1e:31:5a:11:a8:
         41:11:9c:c9:77:ee:4f:39:aa:b1:61:79:c3:6d:d4:4f:60:5a:
         87:50:b7:bf:89:fb:05:6a:65:2d:0f:24:01:23:61:c7:92:b8:
         30:79:49:92:61:20:b5:17:a5:02:9a:c9:53:0b:72:f8:62:23:
         b1:5a:88:2f:cd:07:97:3c:74:cf:5e:d5:98:3f:e4:8a:83:e9:
         9e:c5:3c:1c:48:32:62:a8:c9:80:05:d6:d7:c4:cb:7a:c3:77:
         cf:6a:99:9d:4c:df:bc:d7:0e:da:8b:47:1d:df:6e:53:fb:34:
         85:9b:09:20:7e:0d:6f:93:9d:83:6a:81:79:93:06:22:f0:6e:
         68:1c:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:05:47 2024 by rpki-client on console-fra.rpki-client.org