Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          Q6SMx2G37Sc/qhVCqNrGKh6oo7ZCr0sk/h7boNxEdw0=
Subject key identifier:   7B:37:AE:96:C0:61:C4:8F:13:F6:D3:78:AC:AC:48:F0:2B:6B:37:4F
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       33FDE243AE986FD066919CBCFCF2B4D00DBE8C3E
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:34 +0000
ROA not before:           Fri 30 Aug 2024 14:21:34 +0000
ROA not after:            Fri 29 Aug 2025 14:26:34 +0000
asID:                     272710
IP address blocks:        2804:8774:210::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fd:e2:43:ae:98:6f:d0:66:91:9c:bc:fc:f2:b4:d0:0d:be:8c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:34 2024 GMT
            Not After : Aug 29 14:26:34 2025 GMT
        Subject: CN=7B37AE96C061C48F13F6D378ACAC48F02B6B374F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:47:50:fd:c8:f4:ca:41:0e:0f:b2:eb:30:
                    66:13:e3:db:af:3c:1b:b3:4f:ee:b8:88:88:7e:9b:
                    53:17:19:48:f6:0e:ae:ca:9e:29:c3:62:62:e0:02:
                    17:05:06:12:bf:28:12:1c:e6:dd:3d:f4:48:24:05:
                    ed:79:e1:bf:ef:2f:d8:39:7a:2e:87:08:20:8e:22:
                    83:aa:38:6e:4b:1f:ef:e5:0e:03:30:45:3b:f8:40:
                    7e:d0:68:a8:2a:93:cf:6f:06:0e:91:f8:72:b6:66:
                    27:71:ac:ec:ad:23:7c:8e:f3:dd:47:c8:7d:a0:b7:
                    81:e3:79:6a:eb:d8:dc:64:80:10:ad:fd:20:5b:75:
                    5d:e1:04:8f:f8:bb:e3:55:d6:55:02:3a:af:ee:2d:
                    ed:09:e2:0e:e6:c1:1f:1e:4a:ea:dd:63:4e:cf:fc:
                    11:b3:ef:29:71:b9:a8:75:24:22:7c:7b:18:ac:2a:
                    5f:8c:9b:98:0b:1f:ed:94:ca:ce:2c:a9:7d:b6:90:
                    78:75:b4:2a:33:21:c1:09:88:28:fd:55:aa:2a:a5:
                    94:22:0e:0c:12:86:ed:4f:0e:9a:7a:9e:67:a6:d0:
                    56:04:fd:1d:db:33:f2:5d:cf:97:99:5c:6d:25:12:
                    17:fd:37:32:4d:4d:95:90:13:0d:ff:cf:f2:c4:4c:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:37:AE:96:C0:61:C4:8F:13:F6:D3:78:AC:AC:48:F0:2B:6B:37:4F
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3231303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:210::/45

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:6c:63:06:a7:74:9f:0b:07:b4:07:1b:d7:a3:bc:1e:d6:
         be:1e:ac:68:95:fe:f6:55:ce:4e:80:a1:62:62:b7:aa:4d:07:
         4e:0e:12:cd:17:38:8b:67:01:fd:f3:fd:e6:f5:a8:35:58:03:
         ce:34:03:5d:42:5a:e5:6e:e1:ad:77:4c:0b:ab:40:7d:be:c1:
         18:37:bb:33:21:fc:5d:86:e2:48:3c:eb:a7:aa:a9:d5:74:43:
         b7:2f:27:68:f5:38:f0:20:40:bc:08:65:95:f6:2a:cb:70:7c:
         42:85:6b:27:f1:47:b3:02:6d:30:94:fa:f0:0d:d8:aa:38:35:
         bd:41:e2:d4:d4:27:b0:08:b8:e5:9a:34:2b:33:66:d0:f3:5e:
         40:9e:f8:7b:86:33:f5:a2:8c:6c:05:f2:94:cd:d1:d4:67:1f:
         94:c2:e3:32:b8:e7:04:96:ce:e1:05:92:52:a5:04:be:b4:f9:
         af:d3:ac:38:08:24:23:de:0b:ac:e3:8e:07:0e:24:11:0a:ef:
         99:61:51:30:35:b5:f6:49:26:e6:c4:a7:b6:23:df:97:fd:0d:
         1c:85:c3:0a:40:32:ee:42:19:b8:c9:99:53:96:ae:c6:4a:70:
         63:0d:66:a5:81:20:13:68:79:e4:9e:3d:75:f7:03:3c:23:ee:
         ed:d8:8c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org