Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa
File:                     323830343a373636633a3a2f33322d3332203d3e20323731313131.roa (raw, json)
Hash identifier:          PAPKMQLuNrXCeX+7Q+vLIcFRrD7gPoDetn/9+sZITwg=
Subject key identifier:   67:C2:10:00:1F:6B:8A:93:2E:B5:11:A1:33:48:47:E5:26:6B:24:2C
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       3B51B8A3A7D8EC81AA4BA007294D35FC1591C797
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa
Signing time:             Thu 04 Apr 2024 18:36:33 +0000
ROA not before:           Thu 04 Apr 2024 18:31:33 +0000
ROA not after:            Thu 03 Apr 2025 18:36:33 +0000
asID:                     271111
IP address blocks:        2804:766c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:51:b8:a3:a7:d8:ec:81:aa:4b:a0:07:29:4d:35:fc:15:91:c7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Apr  4 18:31:33 2024 GMT
            Not After : Apr  3 18:36:33 2025 GMT
        Subject: CN=67C210001F6B8A932EB511A1334847E5266B242C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:1c:66:8e:53:4d:17:00:f9:b4:92:21:f5:
                    aa:a2:8b:6f:ff:9c:96:df:a6:44:da:ff:c2:71:e6:
                    e1:2d:7f:da:06:4f:9d:6f:5f:e4:9f:cf:ae:2a:59:
                    d4:19:34:80:28:80:a4:29:72:9d:44:82:ac:5f:59:
                    85:8b:33:f3:75:b1:68:23:c4:17:4c:15:06:e5:6f:
                    1d:b6:23:f3:a3:7c:65:97:cc:d6:6b:8a:de:b5:8f:
                    b7:63:36:7f:35:2b:7e:9d:3c:8a:5e:68:7e:f1:68:
                    e7:47:77:a5:51:9a:9d:be:0d:8b:d1:83:ba:b7:c9:
                    73:d7:85:86:e1:17:6e:3e:33:e8:64:47:a8:6f:38:
                    7b:d1:c1:8c:3a:a6:f5:8c:33:a1:03:ac:7e:02:52:
                    9c:95:22:bc:05:0c:29:c0:8d:a4:b0:88:1a:f5:ab:
                    e0:38:12:b0:9d:b0:35:3f:e5:0c:6d:af:2b:95:e5:
                    cb:89:d6:2e:5a:55:5b:13:1f:a8:c8:c8:7c:76:22:
                    72:5a:e9:83:2f:35:53:72:02:41:60:61:80:d3:2c:
                    e0:37:98:1a:9e:b2:22:cc:09:fa:5d:b1:12:98:5e:
                    21:57:b9:08:13:d9:66:72:0d:25:66:f7:eb:a8:1b:
                    8a:1a:ea:09:19:60:2c:74:11:b4:ef:95:92:3d:30:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C2:10:00:1F:6B:8A:93:2E:B5:11:A1:33:48:47:E5:26:6B:24:2C
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:65:ba:60:55:1d:2e:a6:a8:c2:58:c2:b1:45:46:c3:1d:
         58:e8:61:99:a0:9c:d4:b4:6c:e3:c1:98:f2:6b:a9:ae:d7:f6:
         ef:45:6b:fc:f3:bb:2b:04:59:15:fa:c3:fa:37:a0:46:e0:5f:
         57:47:20:db:7b:f1:37:7b:c6:1f:b4:62:0f:0e:1d:73:cf:56:
         2e:59:5d:51:18:d8:61:f9:83:96:21:3f:ed:86:66:45:df:4e:
         e6:76:70:68:0a:f7:33:ec:19:e9:a1:8e:05:5c:c5:1b:81:7f:
         03:24:06:f9:18:ee:dc:63:0d:e0:24:ac:dd:8c:5f:b1:a6:06:
         a8:e1:63:7a:a2:d8:20:f8:8d:73:bd:e7:ec:dd:12:40:d0:a5:
         fe:0d:91:74:fa:34:52:74:eb:8b:d5:4c:a8:d0:72:1f:31:42:
         5d:1c:3d:64:a1:38:92:e6:8d:ce:51:3d:ac:08:29:25:36:aa:
         78:29:eb:10:5e:49:32:17:c0:70:db:b8:b8:df:ad:11:17:5e:
         4b:71:48:f2:47:25:6c:f2:90:be:fa:3a:c3:1b:b3:aa:d4:1a:
         b7:90:1e:12:16:ed:7d:c9:e3:29:39:3f:5b:52:61:21:eb:c6:
         a5:6c:a1:01:2c:bf:f6:eb:aa:a4:13:6a:f1:eb:51:a0:1c:8f:
         ce:14:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:44 2024 by rpki-client on console-ams.rpki-client.org