Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          TYy+5+Jmma+Nj2vle3PPlbEFwu329CSHQ5AyZQzJfMA=
Subject key identifier:   5F:07:8B:45:4E:03:29:10:59:04:A5:55:6A:47:D8:25:65:82:15:E3
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       51292F00F23DAFC923AED36FA4431001D2F664DF
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:35 +0000
ROA not before:           Fri 30 Aug 2024 14:21:35 +0000
ROA not after:            Fri 29 Aug 2025 14:26:35 +0000
asID:                     272710
IP address blocks:        2804:8774:158::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 03:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:29:2f:00:f2:3d:af:c9:23:ae:d3:6f:a4:43:10:01:d2:f6:64:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:35 2024 GMT
            Not After : Aug 29 14:26:35 2025 GMT
        Subject: CN=5F078B454E0329105904A5556A47D825658215E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:ea:05:fe:00:36:a7:7c:ca:1a:ae:e4:5f:
                    f0:78:e1:23:fa:9c:81:be:58:62:ce:05:a1:bb:6e:
                    76:b0:ca:7c:b4:2c:d0:90:0e:ef:71:c8:7e:9e:58:
                    35:ac:52:db:2e:32:b9:79:53:b3:8a:7d:d6:b7:60:
                    26:f0:e2:20:23:b3:93:ee:a8:53:05:2f:e5:d7:dc:
                    01:41:42:a0:09:5f:2a:d2:7c:0b:c4:1e:b9:cb:ef:
                    8d:94:48:cb:cc:43:ad:16:c8:d1:74:80:9e:47:e2:
                    fb:60:54:c1:29:c3:aa:62:80:f7:61:75:97:40:9e:
                    6f:d6:7e:be:e5:16:b2:32:cc:41:9d:83:ca:80:36:
                    0e:a7:8c:0c:f2:f3:ca:e3:29:bf:73:c5:3b:f7:e2:
                    83:5b:c9:97:00:fb:02:dc:4e:b4:25:d9:53:d8:ba:
                    86:e8:d6:fc:5a:62:7d:d1:04:72:52:d0:f1:24:bb:
                    f6:ae:cc:51:d4:c8:a5:07:3b:70:5c:74:3d:f4:ff:
                    ff:52:55:15:8a:0a:5b:a9:7c:fd:5b:9e:31:f2:86:
                    ad:8c:a5:c0:ab:47:68:0d:c1:83:66:91:3c:2f:c9:
                    3f:e6:0d:ca:9e:ad:85:62:61:36:8a:a2:eb:5f:64:
                    63:7d:19:e5:20:d2:da:70:de:af:3c:59:59:44:b2:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:8B:45:4E:03:29:10:59:04:A5:55:6A:47:D8:25:65:82:15:E3
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3135383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:158::/45

    Signature Algorithm: sha256WithRSAEncryption
         39:02:41:95:2c:62:6c:e7:55:3c:e6:b9:89:d6:66:f0:de:76:
         1a:b9:ce:08:b5:09:a0:70:6e:b1:b0:7d:85:f7:6c:80:d5:dc:
         e4:95:d4:fd:c1:7b:fe:68:cf:3b:dd:11:62:5f:74:71:b1:9d:
         65:03:fb:20:32:91:e7:83:e3:cd:55:07:af:69:d0:15:7f:75:
         a9:3a:97:f9:36:ea:cc:61:fb:56:f2:12:94:db:8f:ad:e8:5a:
         9a:20:ef:ad:0f:dc:97:b4:a6:de:60:fc:3e:73:f7:70:48:f9:
         9d:2a:5e:01:a4:ce:41:5b:f2:f8:11:0a:45:b3:7e:a7:3e:db:
         f9:fb:ba:aa:ac:88:e2:c3:48:69:6b:89:5d:82:02:3a:bc:da:
         76:d8:a7:e1:f3:04:1b:6c:b9:c1:fd:e7:1d:96:f4:15:b6:d0:
         77:1f:01:fd:10:9f:4f:82:2d:71:88:d0:cc:2b:56:f7:42:62:
         21:57:f8:7d:fa:3c:bf:a5:14:9a:68:22:10:c7:be:49:2b:42:
         8d:69:de:94:38:02:44:b2:e9:1d:10:bf:31:c4:f0:2c:5b:0e:
         ca:e7:ed:1b:d7:f7:c9:35:be:ce:74:8f:03:60:fe:0c:c7:c1:
         c9:03:e3:93:35:a0:75:e6:9e:37:d4:88:08:f5:f0:88:2f:61:
         ba:d0:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:00 2025 by rpki-client