Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3130303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          zWrun4Vv0LPnaRTgEomefp1tGnfbZo7gO+8ZHuWlq18=
Subject key identifier:   EF:84:96:B9:1A:00:26:36:60:F1:4B:42:0C:EB:9F:5D:63:D6:47:BF
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       1DEA2FB06E8D00770EF76517FC86D30ED41D6F10
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:37 +0000
ROA not before:           Fri 30 Aug 2024 14:21:37 +0000
ROA not after:            Fri 29 Aug 2025 14:26:37 +0000
asID:                     272710
IP address blocks:        2804:8774:100::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ea:2f:b0:6e:8d:00:77:0e:f7:65:17:fc:86:d3:0e:d4:1d:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:37 2024 GMT
            Not After : Aug 29 14:26:37 2025 GMT
        Subject: CN=EF8496B91A00263660F14B420CEB9F5D63D647BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:ad:18:d6:26:2b:e2:4d:7d:81:4c:cc:43:
                    a2:9e:a2:fd:25:ab:00:80:99:cd:53:fd:ca:2e:38:
                    d6:e2:cd:40:0a:a4:d8:75:9e:38:d4:b3:09:fd:db:
                    65:a7:de:4d:01:ad:dd:5a:1d:63:6e:3a:67:5c:8e:
                    15:3c:e8:ce:bc:11:d9:1d:52:06:70:12:e3:c2:2a:
                    c8:59:a7:42:94:45:7e:11:27:0e:87:dc:7b:6d:2e:
                    6f:14:43:85:61:98:81:d1:4b:81:e8:b2:3c:76:6c:
                    ad:94:72:2a:7c:87:f6:81:59:dc:af:ed:dc:7b:7a:
                    97:00:90:28:73:0c:fb:98:69:0b:f0:8c:22:f9:ab:
                    f9:74:71:e2:e2:21:de:a2:52:28:dc:c9:66:4a:2a:
                    00:b8:1d:da:e4:1b:6f:97:d5:ea:b1:b7:7a:fd:5a:
                    6e:4c:d0:7a:19:84:df:15:f9:68:f0:38:5e:8c:53:
                    57:56:7c:f0:87:b3:eb:41:38:63:9c:44:04:6e:04:
                    dc:c4:0f:7e:85:4f:37:98:68:f0:f9:5f:47:3c:04:
                    43:42:4d:db:58:38:c6:53:84:11:26:09:65:d6:40:
                    ea:2d:17:b9:d6:fb:58:68:9a:5c:e5:94:09:a0:02:
                    33:7e:72:99:37:a2:76:59:c2:cc:70:26:ce:17:94:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:96:B9:1A:00:26:36:60:F1:4B:42:0C:EB:9F:5D:63:D6:47:BF
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3130303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:100::/45

    Signature Algorithm: sha256WithRSAEncryption
         b5:71:4e:27:8c:1d:a1:d6:34:0a:d7:3b:fc:56:83:90:94:3e:
         4c:53:d3:a2:6a:da:ea:2a:65:9b:50:9e:21:58:45:56:e9:40:
         10:7d:4f:98:d1:8b:ca:c1:d7:10:7c:37:23:f0:75:12:d6:f1:
         91:16:ff:e8:d4:f5:9f:0c:06:c0:2c:d4:d6:95:0d:5a:c1:8d:
         7e:cf:ef:0c:c3:64:c0:72:11:1e:cd:85:76:17:8d:91:b1:4d:
         19:97:4a:fb:37:2f:3f:85:a3:8e:ce:34:ce:ac:49:14:2f:8e:
         5f:8d:54:d6:a0:4b:53:0d:52:d5:b1:f2:7b:10:41:c1:f0:e1:
         be:91:d2:cf:4c:e9:03:49:ef:38:bd:4e:47:07:a0:3b:43:31:
         af:a2:57:7a:ed:67:c6:b0:6e:c0:02:ef:cc:73:04:32:68:e8:
         3c:22:91:c7:9c:ed:3b:f2:ff:c9:41:11:d1:ef:62:68:1f:12:
         c4:1f:bd:da:08:09:1d:fb:4e:35:d8:ac:a6:02:ac:bf:73:58:
         e0:d8:d3:9d:0f:16:bc:e6:1c:7d:e2:2d:32:7f:ea:73:df:f8:
         4f:fa:3b:0f:6c:5d:84:61:de:62:f0:87:58:2b:9a:e1:48:52:
         8f:38:99:42:7d:85:d2:d7:ac:1a:5b:12:6e:9f:ab:bb:3a:c1:
         94:1c:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:46 2024 by rpki-client on console-ams.rpki-client.org