Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/1/323830343a363635633a3a2f33322d3336203d3e20323639353533.roa
File:                     323830343a363635633a3a2f33322d3336203d3e20323639353533.roa (raw, json)
Hash identifier:          FD5tQyPrKhePl2S8ipSzaQzIxbdpNwETJTAJ3W7D7Uc=
Subject key identifier:   A1:8D:82:97:F4:0C:1C:A8:8B:1C:58:87:11:5A:F8:15:62:DA:FA:B5
Certificate issuer:       /CN=81A6ACE31A221F209466E7C362AE03B8BCB2BF34
Certificate serial:       2298A89C6237DBF60E0B126A7D53491D58C2049D
Authority key identifier: 81:A6:AC:E3:1A:22:1F:20:94:66:E7:C3:62:AE:03:B8:BC:B2:BF:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81A6ACE31A221F209466E7C362AE03B8BCB2BF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/1/323830343a363635633a3a2f33322d3336203d3e20323639353533.roa
Signing time:             Wed 03 Apr 2024 18:31:25 +0000
ROA not before:           Wed 03 Apr 2024 18:26:25 +0000
ROA not after:            Wed 02 Apr 2025 18:31:25 +0000
asID:                     269553
IP address blocks:        2804:665c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/1/81A6ACE31A221F209466E7C362AE03B8BCB2BF34.crl
                          rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/1/81A6ACE31A221F209466E7C362AE03B8BCB2BF34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81A6ACE31A221F209466E7C362AE03B8BCB2BF34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:98:a8:9c:62:37:db:f6:0e:0b:12:6a:7d:53:49:1d:58:c2:04:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81A6ACE31A221F209466E7C362AE03B8BCB2BF34
        Validity
            Not Before: Apr  3 18:26:25 2024 GMT
            Not After : Apr  2 18:31:25 2025 GMT
        Subject: CN=A18D8297F40C1CA88B1C5887115AF81562DAFAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:9f:0e:e4:f6:a4:2a:29:73:99:9a:58:dc:
                    79:b5:6f:ee:1f:60:1f:53:a7:10:71:6d:0d:61:4e:
                    84:b7:ae:cd:72:ff:b2:67:4d:0a:21:61:c3:b1:10:
                    2e:8c:67:ac:10:13:86:c6:54:98:ec:5a:f8:f0:47:
                    25:07:5d:41:bf:f4:ab:ef:0a:9a:5a:41:de:7e:ea:
                    6d:60:0a:86:a7:e7:f9:9d:95:89:fe:3c:e2:27:dd:
                    a4:60:fd:16:32:81:d1:46:3b:ef:03:52:70:8a:54:
                    e8:0c:cf:53:0c:b8:78:1f:b8:1a:e6:63:83:39:fd:
                    1b:d5:8b:f1:86:6e:81:92:52:19:0f:ff:2b:4d:b5:
                    21:fe:87:cd:6d:8f:f8:38:20:d4:c5:28:18:fb:2f:
                    e4:97:29:c3:76:1b:9f:39:e2:36:0e:7e:f2:bb:2e:
                    e5:1f:05:d4:d7:06:8f:00:2e:30:b4:e0:d6:8e:ea:
                    ef:d1:0b:b7:91:7a:8c:a9:50:5a:45:7c:1c:8d:18:
                    73:14:f4:7d:dd:ce:41:f5:99:7a:e2:93:dd:46:8c:
                    47:f1:0f:3a:ea:b0:47:dc:1b:25:8c:a4:24:89:da:
                    19:e4:87:9b:e4:d3:db:61:9b:99:46:b7:44:22:2e:
                    a3:47:1d:6a:06:9d:e0:96:b0:e2:99:01:14:66:74:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:82:97:F4:0C:1C:A8:8B:1C:58:87:11:5A:F8:15:62:DA:FA:B5
            X509v3 Authority Key Identifier:
                keyid:81:A6:AC:E3:1A:22:1F:20:94:66:E7:C3:62:AE:03:B8:BC:B2:BF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/1/81A6ACE31A221F209466E7C362AE03B8BCB2BF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81A6ACE31A221F209466E7C362AE03B8BCB2BF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/1/323830343a363635633a3a2f33322d3336203d3e20323639353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:665c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:20:66:fc:c6:b1:de:61:27:35:57:a4:9c:8c:bf:e7:34:bb:
         92:16:96:18:3f:5c:2d:3d:e4:33:39:2a:ff:bb:5d:52:23:f3:
         e1:d0:5a:81:a2:28:5d:b2:fa:a1:6e:18:0a:60:21:5a:8c:85:
         b7:47:32:5f:4e:ff:a1:77:49:4b:07:42:58:61:98:18:c7:6b:
         fa:59:22:1e:1a:e1:d1:25:55:81:0d:d0:c2:31:21:08:c5:3c:
         49:a4:fe:c5:5e:1d:df:6f:21:d7:b7:c1:c8:aa:2d:18:ca:12:
         c3:af:1a:26:33:19:17:bd:3e:58:92:66:36:38:02:8e:b1:f1:
         ec:c9:39:c4:ef:d1:bc:f5:58:4a:67:cd:1c:11:fd:2c:41:66:
         ba:9a:f2:b4:5e:a9:9c:21:cf:ce:11:95:3c:26:9b:16:64:6c:
         8a:d6:c0:0a:a4:01:f0:6d:1c:ba:f8:10:a8:31:02:f7:db:b5:
         1b:18:30:b3:ec:11:b8:46:2e:e7:61:e2:2b:ad:27:fb:93:51:
         70:e0:33:06:ed:7f:c1:9f:97:f1:c2:63:56:bb:b2:00:b8:1f:
         5b:09:64:bb:16:c7:da:97:57:0f:bc:1f:f8:94:fc:72:4c:d1:
         17:71:83:df:79:c6:52:16:5d:fb:da:48:ae:0c:9f:c7:d1:30:
         07:d8:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org