Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          rKqt+x51jC5E2yS2ko4eHQJW1AAftrpD88j9nJeni6A=
Subject key identifier:   9D:14:79:9E:8C:F7:69:F6:02:23:8F:A5:59:54:7A:1C:26:CF:C7:62
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       1CBB049C88196DBA3BEE0B210A4157A3DC36969C
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:200::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:bb:04:9c:88:19:6d:ba:3b:ee:0b:21:0a:41:57:a3:dc:36:96:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=9D14799E8CF769F602238FA559547A1C26CFC762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:25:27:8c:66:cb:55:06:9c:c1:41:ff:83:
                    92:44:67:0c:f7:58:3c:89:96:df:6d:8f:a1:c4:ac:
                    ef:75:e0:da:29:67:c8:42:12:bd:09:7d:68:f8:03:
                    60:76:42:38:b9:eb:55:2d:b1:45:df:a9:56:36:76:
                    bc:25:15:65:66:a5:48:23:b6:3f:2d:72:f8:a7:dd:
                    18:ea:15:bd:cb:32:d1:be:5a:e5:49:a7:09:ab:d3:
                    03:5a:7a:e1:0e:84:cc:36:e0:0d:17:e0:8e:a0:7f:
                    33:a1:48:cf:d2:0b:e9:0f:d5:60:d3:38:1a:e7:4d:
                    a9:d6:4c:32:a2:51:1e:ed:5b:ff:69:a0:f4:0c:bd:
                    8a:a6:d7:2f:a4:4d:90:ac:30:40:12:17:72:34:52:
                    67:c6:6b:15:ea:29:23:85:b0:89:0b:61:56:ba:f4:
                    b8:c8:3c:1e:6c:77:9c:8f:c3:75:ff:c4:16:eb:b2:
                    49:99:f5:e1:6d:bc:3c:0f:ce:ec:ff:15:0a:54:45:
                    13:4f:37:48:3c:f7:dd:c6:c7:2e:93:68:35:7f:4b:
                    f4:5e:03:75:ed:ac:41:36:a4:4c:56:04:b9:26:fa:
                    16:10:27:1a:2f:8c:e0:a7:7b:6f:5a:42:16:8e:34:
                    7c:c4:fa:31:16:b1:95:d9:ee:41:c4:f2:07:35:cb:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:14:79:9E:8C:F7:69:F6:02:23:8F:A5:59:54:7A:1C:26:CF:C7:62
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:200::/45

    Signature Algorithm: sha256WithRSAEncryption
         72:be:b5:a8:ec:ed:21:09:f5:89:08:8a:74:c0:7c:07:86:bd:
         88:32:09:29:30:b6:df:f4:d4:7e:9b:d6:12:cc:8a:2b:73:53:
         07:29:4c:de:ba:c2:56:ab:60:e7:49:57:ea:31:1d:2b:9a:87:
         a6:b7:ed:4d:bf:7c:26:b2:fd:5e:47:97:f0:b8:d6:2f:b9:fd:
         e4:3b:c6:e8:13:92:81:31:0b:ca:ca:75:8e:82:a7:06:66:7c:
         b3:49:f3:8c:3d:30:9a:8d:67:b6:85:49:f7:81:e0:a6:dc:58:
         98:3c:45:e1:5f:53:39:a6:99:83:37:68:a8:70:3b:e0:8d:11:
         33:8c:26:0c:6d:bd:9b:00:fd:f5:e8:72:73:6e:85:fd:66:00:
         e3:02:8c:8e:a5:cc:d3:f9:b0:5a:ab:8d:93:8f:ec:43:fa:1f:
         cd:36:a7:6b:f5:d4:88:9d:39:a1:e6:5d:bf:84:6f:83:e7:bd:
         ee:42:17:f5:bb:ad:7e:af:2b:9b:b9:e9:d7:4f:eb:f2:e9:db:
         f2:c1:51:01:1b:ff:b3:03:27:6d:60:83:dd:df:4b:37:f6:71:
         4a:5c:15:f8:d2:e0:72:09:34:ed:c3:5e:04:91:9a:37:53:85:
         d3:b6:f1:09:ab:af:e9:c9:c8:81:62:ac:62:2d:5f:47:a3:c6:
         e8:c6:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:44 2024 by rpki-client on console-fra.rpki-client.org