Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          M9DJeIeeNgxJjkr8a6rreRJgsSY5n1ausndzrpBWDpw=
Subject key identifier:   0C:00:3F:FA:E1:31:50:2C:D4:FE:A7:02:CB:B6:09:8C:69:3B:86:BB
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       38C5F5AB9D8106A6CD7C69AC79F4B788260F5CA0
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:37 +0000
ROA not before:           Fri 30 Aug 2024 14:21:37 +0000
ROA not after:            Fri 29 Aug 2025 14:26:37 +0000
asID:                     272710
IP address blocks:        2804:8774:1f8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c5:f5:ab:9d:81:06:a6:cd:7c:69:ac:79:f4:b7:88:26:0f:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:37 2024 GMT
            Not After : Aug 29 14:26:37 2025 GMT
        Subject: CN=0C003FFAE131502CD4FEA702CBB6098C693B86BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:25:20:9c:3e:0a:c5:68:98:17:13:4c:b8:
                    2b:42:b3:02:3b:c9:0c:6e:67:04:0c:fc:33:78:78:
                    8d:06:fd:7c:6e:41:2c:be:df:f9:5e:eb:27:ef:0e:
                    ac:52:5c:e3:ac:e4:b7:d7:54:6f:62:f5:8f:21:e3:
                    cc:24:c6:33:34:c1:90:43:ae:43:45:1d:45:8f:da:
                    f3:1c:3c:33:ea:ad:c6:d0:32:13:3d:77:98:4e:ad:
                    54:8d:0b:a9:a1:90:cd:8a:3f:0f:fa:2a:29:9e:8f:
                    29:fc:62:8b:42:2f:1b:61:a7:ed:42:bc:24:9a:a4:
                    1a:85:be:7d:9d:cd:05:0a:4d:e5:b4:e0:ab:82:ae:
                    30:ef:e6:24:48:9f:1f:36:45:98:bc:1c:d1:48:23:
                    78:0f:8d:66:f4:62:32:cb:10:ed:87:01:1a:db:35:
                    ec:37:92:eb:31:1a:f0:0b:a4:a3:e0:0e:fd:58:b5:
                    47:fa:c1:f8:93:3a:cd:9f:d7:4a:ca:62:93:15:48:
                    18:4f:bb:dc:ed:57:c4:f9:fe:a7:20:47:21:a7:cc:
                    2f:d0:0d:46:6f:d7:d9:e0:07:9d:8f:81:82:50:54:
                    1d:2c:af:72:76:6d:84:9f:0b:e0:41:6e:88:da:e5:
                    b8:89:78:9a:51:ca:2a:42:f6:2a:9b:a7:cb:20:f8:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:3F:FA:E1:31:50:2C:D4:FE:A7:02:CB:B6:09:8C:69:3B:86:BB
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:1f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:72:4d:48:15:64:80:f4:a6:63:d7:62:18:45:27:08:14:
         9d:e1:37:3b:fd:c3:5c:0c:d8:24:75:0f:9f:c1:ee:dd:89:4d:
         f4:84:1e:78:42:76:ab:97:63:d8:31:7c:38:f6:a7:21:84:c1:
         28:e9:e4:5e:0c:00:cb:49:6d:c1:78:2e:cc:29:9a:85:c7:8b:
         96:c3:f3:32:97:ea:be:84:2b:18:57:ad:1a:6b:1b:7a:e1:e8:
         86:25:58:0b:68:b0:38:fb:16:df:43:e9:71:ed:7e:ba:72:21:
         0d:d7:d0:80:b9:53:28:bd:75:8e:95:ae:4b:35:78:f1:2b:c0:
         2f:48:da:14:2c:57:2c:af:dc:72:47:35:0f:33:32:22:12:40:
         49:1f:82:6d:ee:1c:a4:47:fa:3b:ee:a6:bf:e6:54:60:6c:0c:
         12:f4:35:2e:08:bb:60:08:56:39:f6:72:e6:30:f1:96:31:ef:
         22:1b:05:6f:ee:65:71:64:6e:cf:bd:b7:1b:d0:96:51:e3:64:
         1c:1b:58:6d:5f:28:ff:c1:44:4e:d4:72:70:65:c0:54:e2:81:
         88:5b:4a:fb:af:87:91:c1:42:db:79:c6:1b:71:03:23:7d:cd:
         99:6b:91:66:0b:c6:fb:33:5a:e8:3c:87:cf:ef:a6:4c:23:3e:
         88:87:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org