Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f34302d3430203d3e20323732373130.roa
File:                     323830343a383737343a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier:          dX5QJ2iu6B8dPaKKusK4s85lE384ihkEc1C0H1te/RA=
Subject key identifier:   13:C1:FE:CE:78:32:49:06:F9:F6:A2:A7:D6:07:2B:05:33:25:02:98
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4FC6982B37F103A680B49B58CC4A913A986ADA3A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f34302d3430203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c6:98:2b:37:f1:03:a6:80:b4:9b:58:cc:4a:91:3a:98:6a:da:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=13C1FECE78324906F9F6A2A7D6072B0533250298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:2a:b5:a9:3b:8d:17:30:f5:c8:ea:6f:71:
                    06:db:01:c1:29:56:d1:71:4c:a3:1c:75:4f:ef:f3:
                    81:fa:c0:1f:30:ac:a6:82:ad:7f:7c:f2:22:f6:71:
                    df:46:d5:92:84:7f:49:9d:7d:6a:1c:db:ef:b7:9a:
                    35:ff:95:bb:a0:f4:4b:3f:61:39:a1:65:b2:2a:ce:
                    a9:0e:24:dc:c6:1b:22:5d:56:2c:84:96:84:94:09:
                    9c:56:39:ec:f8:ea:2d:97:9c:59:da:8d:7a:fc:56:
                    78:70:80:d2:1d:7a:b8:d9:4a:ed:07:c7:e9:ba:64:
                    31:53:6b:61:5e:29:16:11:58:b6:4f:5c:50:a9:a5:
                    aa:c4:93:f8:8a:45:02:ef:e5:3b:c6:9b:bf:04:60:
                    db:26:1a:3a:d5:d1:5b:be:f1:68:69:ef:89:45:08:
                    58:4a:00:f3:47:8e:e5:44:4a:10:49:d5:44:dc:51:
                    03:5c:4c:c3:a7:80:83:74:d4:b3:30:a2:22:c4:24:
                    87:43:2c:0c:75:ef:64:47:78:18:15:88:45:ca:e6:
                    49:ec:04:8f:b1:c5:c3:94:48:2b:f9:e5:c6:95:c1:
                    1b:1b:a1:91:e0:61:ca:d2:92:32:2c:d4:36:fe:c8:
                    27:d6:5e:2e:be:1e:5e:d8:71:4b:e9:e0:54:81:69:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:FE:CE:78:32:49:06:F9:F6:A2:A7:D6:07:2B:05:33:25:02:98
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3a2f34302d3430203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:c9:2b:fb:d4:0f:c8:00:85:6c:68:2e:b9:12:d1:17:c4:65:
         1e:70:06:3d:f3:db:ae:2c:61:f7:1a:a4:f1:b6:b3:1a:06:5a:
         b5:0d:53:19:e5:ff:2f:17:d4:e8:75:c6:c6:b4:64:1b:77:36:
         87:45:24:fe:0f:ed:57:72:19:46:40:76:0b:3a:1d:a9:0a:79:
         f6:1c:e5:da:d8:55:8e:1e:f4:5e:a0:7f:ca:97:70:cc:a0:43:
         c5:6e:51:66:d3:98:23:20:4f:46:75:fb:7c:71:6e:f3:df:4a:
         c6:75:f4:51:45:33:2b:83:1f:35:8d:8b:10:26:9f:9f:2a:00:
         d7:27:6b:91:ac:f7:1d:42:bd:da:28:0f:be:94:f7:79:e8:19:
         b0:8c:41:88:3c:55:36:21:fe:01:03:ce:6b:87:d0:9d:c0:a4:
         d4:bf:0c:bb:33:cd:d1:e8:5f:62:58:3d:b0:f9:26:ac:06:0b:
         0e:48:a0:cd:e2:35:5f:c8:8a:ff:23:a5:e8:db:e7:43:93:53:
         67:cb:e0:29:88:27:f0:f6:7e:23:ed:5c:41:9a:7a:a2:a7:da:
         f9:75:6c:14:f1:65:15:4c:7d:c6:80:fe:60:b3:ee:db:61:f0:
         e8:7f:0a:8b:9d:d3:02:fb:dd:be:02:05:5c:07:7c:8a:eb:e0:
         1f:05:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:47 2024 by rpki-client on console-ams.rpki-client.org