Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3165383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3165383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          Rv+WWHVitHBOfgw9AdNO084hvLJiNMmHPDTNmV6RM3w=
Subject key identifier:   98:8B:70:A3:D5:70:70:ED:56:63:1B:38:9F:FF:73:B1:8B:45:63:C4
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       76705CA30B97F01FC5DF0CC9C727BABA0EED4097
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3165383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:37 +0000
ROA not before:           Fri 30 Aug 2024 14:21:37 +0000
ROA not after:            Fri 29 Aug 2025 14:26:37 +0000
asID:                     272710
IP address blocks:        2804:8774:1e8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:5c:a3:0b:97:f0:1f:c5:df:0c:c9:c7:27:ba:ba:0e:ed:40:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:37 2024 GMT
            Not After : Aug 29 14:26:37 2025 GMT
        Subject: CN=988B70A3D57070ED56631B389FFF73B18B4563C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:b6:f7:13:f6:2d:4e:34:11:6a:62:27:4b:
                    77:a7:57:6f:cc:80:53:6b:ed:f7:59:34:28:61:bc:
                    44:ce:c1:3c:34:c4:84:7a:d6:6c:cc:46:d7:e2:fa:
                    09:9c:03:a9:c1:48:40:2f:42:ac:65:9f:29:44:76:
                    ff:1c:48:b1:d1:22:59:6c:cc:c6:d6:b8:2c:3a:7d:
                    6a:fb:a0:8a:33:91:85:6a:e1:cb:5a:7e:38:a9:f0:
                    1a:de:9d:50:27:43:60:2d:68:9b:b5:f9:7a:2a:3b:
                    27:d4:5d:a6:6e:dc:ff:49:f9:0e:6f:73:8e:0d:64:
                    25:81:13:ec:3d:f1:75:55:e3:cd:54:bc:9a:57:35:
                    85:b5:85:d0:38:12:7e:86:ee:11:e4:19:72:1e:01:
                    7d:fb:ca:1b:c3:2c:ae:fb:20:ff:d3:c2:a7:9b:8d:
                    fa:d4:5e:24:50:7e:0d:75:eb:86:cc:d0:b3:d4:0e:
                    f9:57:91:e5:e6:3a:d5:bf:87:74:a7:a8:34:4d:7e:
                    6a:62:8a:00:f6:3f:cf:f4:e4:c5:80:86:d2:f4:7e:
                    a3:92:2c:51:f0:47:49:ff:af:6f:af:24:48:d6:6a:
                    fb:13:31:46:27:d9:e4:8b:56:ac:b3:b8:60:91:1c:
                    21:e7:99:31:31:6c:de:10:d4:65:e1:76:79:6f:24:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:70:A3:D5:70:70:ED:56:63:1B:38:9F:FF:73:B1:8B:45:63:C4
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3165383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:1e8::/45

    Signature Algorithm: sha256WithRSAEncryption
         1a:f1:7e:27:31:03:49:5c:3c:7b:33:ff:cf:d5:2e:16:b1:c1:
         ce:8e:f7:9f:42:33:70:9f:3e:bb:bf:f9:40:fb:5e:78:4b:fd:
         34:ce:76:16:f0:d2:5b:1b:ae:c3:56:1e:ed:0f:d3:57:db:91:
         33:b5:c5:14:db:87:61:b4:a5:92:dd:be:6e:34:17:18:77:02:
         f9:19:25:a8:c0:d8:61:32:c6:80:54:6e:44:63:44:5c:9b:a6:
         41:9d:b0:12:03:93:74:b4:72:92:3c:01:19:79:a4:ac:74:65:
         ca:4b:94:0e:4c:96:d2:44:3e:a4:d5:77:a7:a2:6a:cd:5d:7f:
         2d:8a:39:e3:2c:60:49:58:22:bc:b9:73:73:f8:5f:b4:21:fd:
         d3:8a:80:b1:e5:e0:6d:53:ec:69:3c:45:ca:b9:43:d2:28:68:
         95:1b:fc:54:92:0a:95:18:20:f1:7c:93:45:4f:c5:20:29:45:
         a4:f8:c7:23:50:19:0d:5e:d3:4d:3a:7b:7d:72:4d:7b:9c:75:
         0a:1b:b7:7f:42:4b:4f:6c:14:c6:31:b0:eb:2d:04:b4:bd:4d:
         92:aa:f6:58:a4:70:59:d7:ca:a5:b6:f2:bf:24:f6:0d:3a:58:
         2f:98:fb:9b:9c:94:f0:f8:51:bc:ea:40:be:49:92:de:5d:cf:
         0a:84:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org