Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f33322d3438203d3e20323732373130.roa
File:                     323830343a383737343a3a2f33322d3438203d3e20323732373130.roa (raw, json)
Hash identifier:          DB3G5cXx7lhp2E/ZTITaFJGuiyO7v0eE71/9wrwBsZI=
Subject key identifier:   EB:64:46:22:01:02:F0:72:76:93:BC:4F:DE:DD:89:EE:70:26:09:51
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       44B1A71E9B7582872C51CE52D115995A190840D3
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f33322d3438203d3e20323732373130.roa
Signing time:             Fri 20 Sep 2024 21:18:19 +0000
ROA not before:           Fri 20 Sep 2024 21:13:19 +0000
ROA not after:            Fri 19 Sep 2025 21:18:19 +0000
asID:                     272710
IP address blocks:        2804:8774::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b1:a7:1e:9b:75:82:87:2c:51:ce:52:d1:15:99:5a:19:08:40:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Sep 20 21:13:19 2024 GMT
            Not After : Sep 19 21:18:19 2025 GMT
        Subject: CN=EB6446220102F0727693BC4FDEDD89EE70260951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:a2:e7:45:55:f8:cc:d1:30:4d:92:09:57:
                    7d:74:e1:7b:87:01:c6:89:aa:cb:4f:a5:a9:3b:91:
                    1c:49:c0:1d:68:e9:53:59:fd:f5:b4:17:92:d4:43:
                    23:3f:9e:69:73:fe:26:08:1b:c2:f8:85:3b:db:a9:
                    3c:2a:ae:c3:16:c5:a9:ea:a1:c0:f6:cb:72:dd:f5:
                    2a:51:38:e3:c9:99:62:89:a9:04:95:77:b5:fb:fd:
                    a5:f7:a6:66:2c:5a:50:84:b7:80:b9:1d:08:8f:91:
                    1b:f6:de:e8:c6:21:a8:9e:9d:71:52:0c:ce:c9:bc:
                    4c:55:8f:17:9e:3d:3d:b8:88:1e:8d:52:b7:b3:32:
                    52:e4:78:9b:23:ba:09:1a:f5:93:82:0d:6e:75:fa:
                    35:a2:7f:b6:1a:08:e8:17:0e:f6:a8:ba:e9:38:3e:
                    4d:ab:0b:da:8f:2c:85:a9:f6:d7:df:83:ca:d9:4f:
                    dd:f6:7e:fc:38:08:81:c9:66:93:34:af:33:cf:94:
                    48:df:a4:46:93:73:1b:c4:b0:f1:51:94:40:ed:72:
                    3c:a4:5d:27:bd:93:1b:94:b1:b9:d9:95:6e:0b:16:
                    7d:f0:4d:ca:b1:f5:fd:30:bd:cc:2a:d7:a7:5e:ae:
                    09:0d:bb:1b:0d:be:e0:1e:dc:ed:7f:91:d8:a3:5e:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:64:46:22:01:02:F0:72:76:93:BC:4F:DE:DD:89:EE:70:26:09:51
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f33322d3438203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:17:e5:56:e3:87:cc:0f:6f:8c:1f:f3:d1:8b:5f:f0:4b:
         19:56:e2:4b:24:f7:6f:30:b4:01:01:48:fc:5e:fb:60:df:02:
         d9:fb:dd:c6:b6:cd:e5:6b:80:f0:12:10:be:c2:77:97:06:51:
         4d:a7:fe:f9:db:5c:d8:14:ab:c6:21:3c:41:d1:8d:c7:f1:aa:
         99:f6:e8:5e:fc:98:2a:40:4c:29:9b:f3:a5:68:e9:ea:55:52:
         4a:2b:c4:cb:41:90:a8:e7:9f:c4:83:21:d2:c4:28:e5:94:2d:
         22:de:36:07:89:f9:68:f2:4f:cd:a3:40:9c:fd:03:fd:98:9e:
         2d:aa:96:fd:a9:91:9e:6b:15:5c:9c:ee:34:99:59:a0:ca:31:
         63:39:af:62:40:97:6d:1b:c7:20:99:bd:75:78:e6:14:ce:fe:
         e7:53:d6:ad:34:52:b7:71:6a:4f:34:c3:a1:10:0c:ff:de:6c:
         35:b4:6f:ef:d0:10:da:5d:7e:c8:7b:d5:c8:91:c3:49:bc:97:
         68:90:aa:6a:07:bd:74:74:61:55:60:09:e8:7b:fa:49:88:52:
         52:17:83:71:1b:88:d7:02:25:cd:b3:fd:08:76:2b:68:70:b0:
         29:21:ff:71:ee:4f:1f:73:12:98:16:5b:fc:ae:6f:eb:3c:d8:
         01:8e:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org