Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          77kINdVci9OQ2nhdmLZgydYo8BPHXPaOPQUyTIvF24E=
Subject key identifier:   6B:6C:C9:4A:17:D0:7C:05:D2:7E:82:65:36:62:0D:8F:11:B5:36:C3
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       508A3D9F46071D456C2B908E3B76298F8149AC54
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:34 +0000
ROA not before:           Fri 30 Aug 2024 14:21:34 +0000
ROA not after:            Fri 29 Aug 2025 14:26:34 +0000
asID:                     272710
IP address blocks:        2804:8774:2e0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8a:3d:9f:46:07:1d:45:6c:2b:90:8e:3b:76:29:8f:81:49:ac:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:34 2024 GMT
            Not After : Aug 29 14:26:34 2025 GMT
        Subject: CN=6B6CC94A17D07C05D27E826536620D8F11B536C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:d4:ce:19:f8:bd:bd:e5:b1:71:ff:36:67:
                    e1:0d:bf:cc:03:aa:5d:2e:93:81:5d:b5:56:b6:39:
                    3e:9d:68:99:24:64:c9:49:58:82:cc:82:5c:63:f1:
                    b2:72:89:0c:13:45:9f:fd:7f:7b:34:99:44:f0:03:
                    96:67:6e:89:ff:cd:40:b8:77:b2:32:e7:13:ba:e1:
                    79:1e:41:c7:cc:1f:28:aa:89:70:64:32:3b:7e:f4:
                    95:fb:2b:f3:73:c7:a0:a2:ab:48:ad:8d:f9:f3:ba:
                    65:11:44:74:b9:c0:39:cd:aa:83:89:8c:26:28:ee:
                    34:c3:de:e2:36:e9:d1:55:ce:17:14:f2:e7:e0:6d:
                    7f:8c:da:c3:e7:95:ef:9c:7d:69:1e:3b:6c:77:69:
                    da:6e:f6:11:5c:4b:5f:17:50:55:45:6b:ad:a6:70:
                    23:48:29:87:e3:56:72:84:f8:17:0b:cc:a3:2b:88:
                    a4:35:a8:db:55:72:2a:79:19:00:d6:aa:e3:c6:55:
                    b6:ec:d8:bf:b6:2a:00:55:c1:56:95:f6:aa:13:90:
                    b9:3b:4f:1b:ec:d5:ac:79:f8:0d:2d:7a:92:74:12:
                    ac:52:1a:a1:63:fb:5a:cb:b9:27:a8:dc:89:c3:44:
                    3e:39:c7:3f:12:b6:30:28:23:56:c7:7d:05:d1:51:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:C9:4A:17:D0:7C:05:D2:7E:82:65:36:62:0D:8F:11:B5:36:C3
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3265303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:2e0::/45

    Signature Algorithm: sha256WithRSAEncryption
         30:31:a7:e2:7f:99:5f:a2:88:09:18:f3:34:32:04:52:1b:b8:
         92:ce:b8:de:b0:d2:c0:6c:71:16:fd:85:3f:d1:2b:6b:12:12:
         48:ec:f1:b0:2c:b4:c8:f9:5e:cb:2c:d0:92:10:bc:b4:67:1c:
         77:c5:bd:cc:40:94:17:a8:43:ba:e4:04:ba:53:f5:76:f4:3f:
         e8:03:a8:53:41:19:23:35:2d:3b:4a:b0:f4:95:eb:d6:a2:36:
         91:db:dc:88:72:48:da:c4:42:d6:e7:90:2d:ab:dd:17:45:b2:
         16:48:c3:40:ff:f9:47:0d:76:ce:9e:4d:31:a0:25:f4:9b:ff:
         a7:d4:73:59:a9:7e:7a:2b:3a:c0:c2:73:70:b2:4b:55:5d:9a:
         c8:7e:30:40:00:2c:bb:19:18:59:3c:a7:0f:de:e3:30:96:07:
         2b:ce:ed:00:97:96:10:0b:bb:19:da:7e:62:32:18:95:0a:e1:
         80:07:ba:a1:25:21:62:26:6b:69:3d:78:f5:af:45:9d:c1:cc:
         d4:2a:d0:53:3f:02:16:8c:5b:59:d2:b9:0d:a0:b4:f9:83:1b:
         b7:3c:86:20:81:59:59:cc:8a:b7:19:91:3d:bb:f1:54:9d:dc:
         d1:a9:d4:ba:a7:6b:f3:d5:b4:71:cd:81:df:17:53:48:10:80:
         6c:6a:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:36 2025 by rpki-client