Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d313238203d3e20323733343336.roa
File:                     323830343a386539383a3a2f33322d313238203d3e20323733343336.roa (raw, json)
Hash identifier:          37bsozeui74wJpTXpynOWfhjTCHLIUhzVKMPYRT5Wjs=
Subject key identifier:   F7:1D:1B:F9:1C:33:58:55:92:7B:80:17:D0:70:37:D9:FB:DE:7F:11
Certificate issuer:       /CN=07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75
Certificate serial:       46C1DE43A407D7077B2F587FF57781EED2A09BE5
Authority key identifier: 07:B6:A7:D4:D2:17:66:D2:E4:E9:47:4D:57:0F:8E:AC:FE:1D:BA:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d313238203d3e20323733343336.roa
Signing time:             Tue 22 Oct 2024 21:56:15 +0000
ROA not before:           Tue 22 Oct 2024 21:51:15 +0000
ROA not after:            Tue 21 Oct 2025 21:56:15 +0000
asID:                     273436
IP address blocks:        2804:8e98::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.crl
                          rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c1:de:43:a4:07:d7:07:7b:2f:58:7f:f5:77:81:ee:d2:a0:9b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75
        Validity
            Not Before: Oct 22 21:51:15 2024 GMT
            Not After : Oct 21 21:56:15 2025 GMT
        Subject: CN=F71D1BF91C335855927B8017D07037D9FBDE7F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:46:44:cf:08:49:c0:07:3a:e4:c8:90:bc:
                    ad:44:66:21:2b:e6:25:59:f3:2b:98:ba:5f:46:60:
                    38:3a:f3:df:c7:47:aa:4a:20:3e:bc:e5:0d:13:a9:
                    0c:bd:09:f6:e3:a1:42:e1:d6:c2:32:4d:5d:f9:ae:
                    8e:73:38:d8:ea:6b:f8:84:57:9c:12:d9:92:df:67:
                    90:6a:27:a6:56:95:4e:45:06:82:fa:92:4d:09:22:
                    46:fd:06:44:30:ad:0f:1e:a3:88:92:9e:ac:ec:0d:
                    47:2f:a3:76:43:d7:00:f8:3e:d5:80:c6:cf:43:4e:
                    0d:82:bc:11:73:ed:db:16:8c:28:b5:8f:ca:07:27:
                    2e:41:70:98:1d:e1:84:44:17:bd:d3:f4:cf:71:23:
                    90:42:a9:70:92:ba:6e:5f:3a:e8:2e:04:7e:da:92:
                    76:15:75:7b:3e:f6:e3:c1:c1:fa:66:7f:dc:ea:8f:
                    64:0e:f6:13:e9:03:69:1a:3d:83:ef:2c:0c:8a:0b:
                    48:57:12:4f:87:07:d4:74:4b:8d:a0:74:b5:db:23:
                    f9:9f:71:e1:3f:47:f2:1a:38:fe:0c:b9:21:4f:10:
                    f1:38:3e:b9:40:87:e7:9e:1b:9d:b4:df:36:64:a1:
                    00:7c:b0:7e:3c:11:c6:3b:f7:b1:81:71:42:d5:2b:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1D:1B:F9:1C:33:58:55:92:7B:80:17:D0:70:37:D9:FB:DE:7F:11
            X509v3 Authority Key Identifier:
                keyid:07:B6:A7:D4:D2:17:66:D2:E4:E9:47:4D:57:0F:8E:AC:FE:1D:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d313238203d3e20323733343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:fa:a9:81:d4:4b:45:3f:ef:05:64:d7:98:7f:0c:27:10:
         eb:ed:c6:5b:77:2c:66:26:ba:96:61:a8:7f:72:44:1c:04:0a:
         76:e0:cf:a0:77:e3:b2:58:b2:6a:34:84:73:f8:5b:e5:ac:22:
         7e:fd:ad:03:1e:58:53:9e:d8:a5:28:18:f4:72:c1:a2:5f:41:
         38:7c:13:71:de:d5:91:9f:a2:ea:6b:81:45:03:81:82:52:92:
         8d:a0:47:b8:1d:f1:dc:b0:9a:22:eb:a5:7e:d6:6d:36:c6:58:
         da:f1:5b:b1:7a:1b:ec:1f:31:67:50:7f:c9:45:8c:23:6e:89:
         18:a1:eb:30:c7:82:87:3f:cd:ab:0f:fc:7c:2f:d7:ae:1f:b6:
         1b:b0:4b:c6:16:d9:28:a4:42:1f:00:33:de:6d:40:b7:fb:15:
         a8:6e:b7:98:74:95:27:4c:50:2f:b9:6d:d1:d5:0e:e6:b6:2a:
         52:6f:d1:10:16:bc:2b:32:83:6f:e9:1d:ae:5c:01:8d:4d:38:
         b7:82:e4:a7:0a:fa:1e:9c:be:3f:41:23:75:03:42:28:3c:db:
         47:d7:bf:fe:3b:96:ac:91:bc:08:e0:fa:71:da:6e:ac:cc:f0:
         b3:df:53:14:35:b5:a8:1f:d8:85:7e:88:fb:de:b8:aa:9c:ac:
         55:d0:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:57 2024 by rpki-client on console-fra.rpki-client.org