Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3334203d3e20323636343731.roa
File:                     323830343a333835383a3a2f33322d3334203d3e20323636343731.roa (raw, json)
Hash identifier:          KJSRkc0MtDSqU6UqMZ7StgKfSt04RnqzUbmRqnrpB3c=
Subject key identifier:   61:F0:18:E8:82:98:1F:3C:76:28:92:6B:B5:1D:CA:6B:8C:63:6B:0E
Certificate issuer:       /CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
Certificate serial:       778DD577FAA00F007C8E65410A77F79433B136C9
Authority key identifier: FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3334203d3e20323636343731.roa
Signing time:             Mon 18 Nov 2024 20:46:39 +0000
ROA not before:           Mon 18 Nov 2024 20:41:39 +0000
ROA not after:            Mon 17 Nov 2025 20:46:39 +0000
asID:                     266471
IP address blocks:        2804:3858::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 07:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8d:d5:77:fa:a0:0f:00:7c:8e:65:41:0a:77:f7:94:33:b1:36:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
        Validity
            Not Before: Nov 18 20:41:39 2024 GMT
            Not After : Nov 17 20:46:39 2025 GMT
        Subject: CN=61F018E882981F3C7628926BB51DCA6B8C636B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:53:6c:bb:29:fc:d9:b2:48:f3:75:34:1e:
                    15:35:a6:d7:f2:b7:70:f4:bc:d9:9b:3d:a2:05:4f:
                    f5:b0:e0:7b:a4:a5:2f:40:63:ba:b3:c6:89:a5:65:
                    25:01:34:54:f3:8d:c3:25:44:c8:01:12:83:03:04:
                    29:5c:04:62:db:3d:c3:31:dd:88:dd:97:5b:d5:83:
                    9a:57:32:7b:55:db:a5:34:c4:ce:c5:6a:70:58:97:
                    4a:46:98:a8:4a:13:eb:74:95:f2:7a:ee:37:ac:98:
                    a7:68:54:d3:f6:1a:91:de:32:3f:37:41:ec:e9:a1:
                    b4:65:4d:16:ce:ca:9b:a0:40:fc:89:3b:45:aa:0e:
                    af:d3:5b:e3:32:0c:30:13:cf:35:a2:45:67:21:b4:
                    63:9b:33:a2:f4:d3:8c:8d:46:61:33:a9:d8:c3:ab:
                    75:e0:3d:9a:0e:c9:09:e4:70:2c:d6:0e:4a:fd:32:
                    16:e0:f5:bd:86:58:db:69:86:48:96:e1:5e:2c:4f:
                    f7:f4:09:4c:7d:e8:73:8e:87:e8:e2:d4:da:e4:2b:
                    b8:7c:0d:ba:77:b6:05:9c:92:db:02:4f:c0:05:92:
                    36:43:1e:96:40:5b:75:4a:cc:69:ba:94:5d:05:4c:
                    db:ab:a5:7b:94:5d:d7:a9:bf:ce:16:14:9e:da:d5:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:18:E8:82:98:1F:3C:76:28:92:6B:B5:1D:CA:6B:8C:63:6B:0E
            X509v3 Authority Key Identifier:
                keyid:FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3334203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:bb:26:6d:d9:d2:24:84:f8:da:27:29:28:29:17:c4:b9:
         93:02:3e:0b:72:b0:75:5a:62:a4:c4:32:b5:48:0e:a5:d2:27:
         48:83:95:97:d4:82:e4:45:29:89:86:ea:36:4b:bd:59:66:f7:
         25:f0:8a:5f:07:c4:5f:4a:4d:e7:bf:89:43:5a:e0:1d:88:19:
         0c:53:fa:eb:af:2f:83:12:4f:af:64:52:87:b9:cb:31:38:5e:
         95:cd:a7:49:be:eb:41:4b:8c:1b:a2:f3:b7:07:39:5e:5a:0b:
         36:e8:10:ef:62:a6:6c:30:02:5e:f2:be:be:34:ec:97:31:3f:
         9f:c5:50:9a:42:8b:15:71:7d:e0:ae:ff:99:d5:f4:4b:3d:41:
         8b:a3:06:92:f0:cb:c2:51:5a:0f:47:dc:5c:67:df:0b:02:2b:
         14:7c:be:2d:f0:2b:6a:2f:8d:b0:c2:f4:a8:fe:a3:68:fe:d9:
         1f:1b:55:49:87:5b:9f:5b:b4:e8:82:d8:0c:7f:f8:8a:10:a9:
         39:41:36:88:0d:90:ca:72:9c:c5:5e:4d:d3:40:ae:88:06:65:
         cb:72:8e:e0:30:6b:89:de:74:2a:37:ab:68:08:cc:15:bb:73:
         16:78:2e:ca:18:33:02:43:d7:cf:92:eb:a9:17:3d:7a:85:3d:
         ff:02:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:27 2025 by rpki-client