Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/323830343a343034303a3a2f33322d3438203d3e20323635393437.roa
File:                     323830343a343034303a3a2f33322d3438203d3e20323635393437.roa (raw, json)
Hash identifier:          XgHt0p4eozxvGxAlDHYEvgPFqR1SeUuUZEge73XxWRo=
Subject key identifier:   77:98:8F:82:0D:6C:C7:00:41:80:02:81:5D:A6:18:D5:95:5E:A9:E2
Certificate issuer:       /CN=F76DDFD3F263B77FCC46881FF32B898A5B379036
Certificate serial:       1E1216E1866A5A87D01EE8367645A683BFCCCA64
Authority key identifier: F7:6D:DF:D3:F2:63:B7:7F:CC:46:88:1F:F3:2B:89:8A:5B:37:90:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F76DDFD3F263B77FCC46881FF32B898A5B379036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/323830343a343034303a3a2f33322d3438203d3e20323635393437.roa
Signing time:             Tue 23 Jul 2024 15:10:08 +0000
ROA not before:           Tue 23 Jul 2024 15:05:08 +0000
ROA not after:            Tue 22 Jul 2025 15:10:08 +0000
asID:                     265947
IP address blocks:        2804:4040::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F76DDFD3F263B77FCC46881FF32B898A5B379036.crl
                          rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F76DDFD3F263B77FCC46881FF32B898A5B379036.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F76DDFD3F263B77FCC46881FF32B898A5B379036.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:12:16:e1:86:6a:5a:87:d0:1e:e8:36:76:45:a6:83:bf:cc:ca:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F76DDFD3F263B77FCC46881FF32B898A5B379036
        Validity
            Not Before: Jul 23 15:05:08 2024 GMT
            Not After : Jul 22 15:10:08 2025 GMT
        Subject: CN=77988F820D6CC700418002815DA618D5955EA9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:7a:1a:4c:4a:f5:f5:42:6c:22:1c:fe:22:
                    24:68:34:2f:6b:f5:be:46:13:49:8d:29:8b:dd:89:
                    cd:7f:62:00:ab:22:02:5e:1e:62:b2:24:99:09:b0:
                    09:fd:65:b3:62:6d:4a:65:18:ac:8c:19:0a:0f:65:
                    84:e4:a1:3f:46:9b:7b:2e:c1:2f:15:52:77:4d:b1:
                    8e:f7:1c:1c:ea:10:27:b4:0b:fd:0d:39:27:a2:b9:
                    b8:d2:f0:ee:6e:86:55:5c:e5:b8:1c:8e:89:32:d6:
                    0b:4f:13:37:7a:1d:9b:ee:f4:c1:d7:dd:27:68:6b:
                    78:d4:28:6a:60:23:87:ca:20:c3:e1:82:a3:ba:12:
                    70:ce:d4:29:68:01:27:2f:05:e0:5d:92:5f:83:0e:
                    4c:06:75:56:97:b4:69:18:9d:94:41:76:2b:75:5c:
                    8e:ce:6f:94:31:99:63:ae:6f:0e:4f:81:92:6f:3a:
                    4b:d8:86:a5:e9:77:fb:e2:c5:b5:23:3f:2d:44:a1:
                    30:4b:a1:cb:40:e7:42:94:32:ea:d1:59:38:92:a6:
                    8d:46:5f:5e:51:52:07:af:9e:74:a9:f7:3d:cd:07:
                    19:14:de:4a:62:cf:95:25:46:25:6c:b9:4f:ce:eb:
                    35:76:2e:71:68:12:e9:c0:4a:3e:f7:c9:30:fd:16:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:98:8F:82:0D:6C:C7:00:41:80:02:81:5D:A6:18:D5:95:5E:A9:E2
            X509v3 Authority Key Identifier:
                keyid:F7:6D:DF:D3:F2:63:B7:7F:CC:46:88:1F:F3:2B:89:8A:5B:37:90:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F76DDFD3F263B77FCC46881FF32B898A5B379036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F76DDFD3F263B77FCC46881FF32B898A5B379036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/323830343a343034303a3a2f33322d3438203d3e20323635393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4040::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:12:07:ed:a9:54:8e:c4:16:55:50:3a:ef:29:f6:39:a7:
         64:22:d1:2b:ab:92:20:8b:ec:30:cd:9d:d9:f0:7f:a7:12:91:
         e2:09:96:b9:2b:88:58:4d:f3:e0:3a:85:bc:9e:78:b3:2a:e5:
         f4:83:c7:a0:49:ba:ad:87:fa:14:3a:0c:30:5e:7c:7b:14:51:
         fc:37:4a:b1:7c:96:cd:0e:92:c2:33:b0:b3:61:b3:24:de:2e:
         0d:26:ae:40:11:86:67:7e:1a:5e:e4:03:1b:8a:4c:fb:50:18:
         ca:37:86:18:79:d7:84:d6:db:9e:7d:96:32:a1:ef:37:42:e0:
         42:73:06:19:4e:06:53:28:25:86:16:92:63:c0:b2:c4:eb:d4:
         16:dd:d2:7f:6a:0b:76:1a:f3:62:63:af:e8:b1:93:52:de:88:
         dc:7c:c0:6a:6b:61:b2:cd:95:e4:44:58:11:43:14:ce:ac:7b:
         e0:37:bb:a6:b4:d4:60:c6:71:53:ed:54:f1:c0:de:58:f3:73:
         4e:55:81:cb:57:52:85:b2:6e:64:ab:49:9f:30:3b:d1:78:ad:
         74:d3:fa:77:2f:5b:26:77:65:70:cc:a2:c1:b4:5a:15:0a:82:
         66:c2:8f:a6:22:c3:a3:e2:36:37:0b:1e:18:ab:51:fc:7c:1a:
         07:55:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:02:08 2024 by rpki-client on console-ams.rpki-client.org