Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3133303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3133303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          OOh3jguVKXKKVa5jDStgl7VT5IcNgSsELsZcgC0MUl0=
Subject key identifier:   AB:D3:6C:3C:44:6A:19:01:C1:4F:50:BD:49:9B:BD:11:FA:3C:34:06
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       6C886301A7F019FF4D8B66C4B2900E0832EE9488
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3133303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:34 +0000
ROA not before:           Fri 30 Aug 2024 14:21:34 +0000
ROA not after:            Fri 29 Aug 2025 14:26:34 +0000
asID:                     272710
IP address blocks:        2804:8774:130::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:88:63:01:a7:f0:19:ff:4d:8b:66:c4:b2:90:0e:08:32:ee:94:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:34 2024 GMT
            Not After : Aug 29 14:26:34 2025 GMT
        Subject: CN=ABD36C3C446A1901C14F50BD499BBD11FA3C3406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:54:08:11:75:23:34:30:3f:6a:6e:86:1f:
                    8b:2e:2e:14:4e:1b:1d:ac:b2:92:c3:4a:7d:95:25:
                    60:05:68:46:3f:d7:4e:fd:c3:0f:62:59:79:c5:e9:
                    1b:35:4b:f2:3b:9e:36:e9:0e:32:e9:3d:7d:2a:d9:
                    df:d1:9d:11:b2:33:3c:69:52:e3:65:60:5f:e6:d8:
                    45:42:b5:3a:f0:1d:0e:05:dc:57:1d:9e:5c:15:38:
                    7d:91:58:fc:b3:b5:eb:29:2f:ef:78:f6:b9:cc:ca:
                    df:47:81:d5:e0:52:0e:86:a8:2c:df:69:9b:9f:63:
                    de:d9:5e:6d:d2:d9:59:0f:c1:97:63:64:f1:51:8d:
                    9e:fa:c4:da:c0:2f:87:62:80:8e:e3:0d:bc:f5:33:
                    45:61:f2:87:7b:f3:d9:1b:f2:8e:d0:64:3c:a3:c4:
                    6d:d9:97:a2:30:4e:41:68:ae:de:34:81:0c:01:7a:
                    36:05:71:9b:c6:57:c0:dc:2b:52:a5:0a:69:01:1a:
                    67:f4:3e:41:5e:6d:41:b3:cb:02:21:b2:3a:14:c7:
                    75:fa:95:e1:df:8a:ce:30:89:36:d9:3e:51:77:fb:
                    c3:a7:f2:4a:85:c0:20:0e:66:14:1d:72:ed:13:0f:
                    97:42:cf:17:3a:42:54:a6:4a:10:3a:b2:3f:f0:9a:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D3:6C:3C:44:6A:19:01:C1:4F:50:BD:49:9B:BD:11:FA:3C:34:06
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3133303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:130::/45

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:ac:d2:79:f4:68:4e:f7:25:e5:a8:8d:ef:61:7f:d6:a6:
         8c:c1:27:ee:48:85:92:e1:58:0a:29:13:1c:a2:0c:cc:5b:00:
         26:1d:8a:d4:f6:42:d5:15:f3:06:3a:fa:c1:60:83:1a:bb:39:
         57:c1:69:7c:f9:d2:c7:b4:e4:a3:25:d3:fd:73:8b:3b:b2:a1:
         57:68:ea:45:a8:44:8e:e6:c8:fc:29:eb:fb:96:26:99:17:48:
         ba:0f:cb:60:a0:29:aa:f8:bc:7b:ee:5f:1f:10:50:fd:5b:82:
         a9:0e:16:79:31:88:fd:61:02:51:0a:5c:61:56:93:98:04:3d:
         07:90:69:bc:25:34:11:ae:e1:a0:c7:97:54:e5:b1:dc:1a:04:
         cd:b1:bd:9b:cf:96:49:c1:23:2e:30:ed:e8:d7:97:fa:c0:cd:
         e4:98:18:b9:75:5f:86:26:03:5a:e5:d3:18:d4:bf:af:85:9d:
         ad:9d:be:95:d6:d0:d1:64:e2:95:1e:1c:18:70:10:2c:20:d7:
         8d:d2:ff:56:9a:75:57:2e:e2:ec:01:e4:40:d9:95:7b:c7:56:
         08:22:1f:aa:32:d7:f4:50:ed:59:b1:43:4b:5a:2f:1f:71:57:
         3a:76:b0:96:11:f7:9c:49:41:ff:fe:99:c7:ca:e3:74:ff:73:
         bf:7e:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:44 2024 by rpki-client on console-fra.rpki-client.org