Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e36342e302f32302d3332203d3e203238363334.roa
File:                     3230312e36322e36342e302f32302d3332203d3e203238363334.roa (raw, json)
Hash identifier:          t3d7C+nwvnxA+HYknv/ZFKBTz32TixgkR3It3vB/dbo=
Subject key identifier:   FE:FA:A0:4B:B8:6E:54:40:C1:63:45:7A:B8:AC:68:C0:7F:FE:7D:E6
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       208EE7F0FD09C7364D46D0BABFAD67FD3A228C71
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e36342e302f32302d3332203d3e203238363334.roa
Signing time:             Thu 04 Apr 2024 08:02:13 +0000
ROA not before:           Thu 04 Apr 2024 07:57:13 +0000
ROA not after:            Thu 03 Apr 2025 08:02:13 +0000
asID:                     28634
IP address blocks:        201.62.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8e:e7:f0:fd:09:c7:36:4d:46:d0:ba:bf:ad:67:fd:3a:22:8c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Apr  4 07:57:13 2024 GMT
            Not After : Apr  3 08:02:13 2025 GMT
        Subject: CN=FEFAA04BB86E5440C163457AB8AC68C07FFE7DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:28:dd:3d:c5:83:eb:b6:75:c9:f3:4c:3a:
                    f0:8f:8f:33:a1:59:80:62:0e:0c:ad:51:7f:1f:53:
                    98:d1:72:4f:52:6b:1b:eb:7e:4b:22:86:c3:71:a8:
                    3c:22:57:3f:19:71:fd:9c:02:c7:ed:45:ab:b3:40:
                    a8:e8:97:fd:f9:9f:0e:43:57:c5:54:93:ea:9e:24:
                    eb:8b:0c:f8:92:af:92:34:78:65:b9:5e:69:d5:3d:
                    00:d1:80:1b:85:4e:28:b1:c5:c8:49:57:1d:77:ff:
                    dd:3b:d0:f0:bb:4d:08:0f:ab:0e:c3:4a:d5:16:72:
                    07:49:74:ee:7e:ba:5f:27:ca:1c:6d:a9:fb:1c:7c:
                    6a:e3:10:ab:7d:91:27:74:f4:8b:35:cb:02:e3:06:
                    2f:59:79:7f:53:61:b6:88:dc:79:f1:41:6b:e1:0a:
                    33:f6:c6:c8:84:00:54:de:63:71:47:1c:ee:d9:1b:
                    f9:d3:f2:b9:87:90:0f:75:3b:8b:c5:3e:93:ba:d6:
                    10:e9:1e:0a:3a:22:eb:66:7b:3c:30:e7:dd:48:56:
                    57:54:5c:77:81:a7:e2:ef:30:ff:bf:62:10:9b:91:
                    b4:92:b6:de:88:ce:6f:ac:5a:92:dd:5e:e5:db:9e:
                    fd:f1:a6:c0:83:50:03:a7:f7:ad:ec:78:26:e8:e8:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:A0:4B:B8:6E:54:40:C1:63:45:7A:B8:AC:68:C0:7F:FE:7D:E6
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e36342e302f32302d3332203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:d7:bf:d0:9d:2e:15:0c:d6:e9:3a:0e:dd:a0:1a:ab:0a:05:
         d6:de:c3:c0:bb:05:61:c2:32:53:8f:75:e3:8c:e5:36:6c:94:
         cc:e5:64:49:9c:de:41:e6:b7:fd:ef:89:f5:2b:6e:a1:06:65:
         b5:54:5a:9a:dc:48:b0:5d:78:50:b0:07:fb:89:df:a2:fa:69:
         a8:be:b8:72:96:91:15:89:f0:ba:75:9d:a1:17:2f:f0:3b:33:
         8c:1a:a0:90:47:04:d6:8e:cf:1c:ca:16:f6:50:b5:89:11:d3:
         eb:99:88:58:17:71:95:ee:bb:c4:7f:9a:75:a9:ac:49:66:70:
         d6:ed:7d:3e:28:11:d8:65:32:ae:ae:0e:cd:58:ad:e8:58:3a:
         e6:f2:bf:63:ad:da:5d:8c:80:c1:2f:d5:c8:87:e6:c1:20:8a:
         c7:ae:9e:9f:dc:c5:ff:a0:33:f4:b1:3a:ec:52:13:97:89:97:
         e4:4e:f7:b3:94:96:65:6a:02:7a:b6:dc:0b:70:20:96:7b:1b:
         dc:c3:1a:92:83:58:33:05:6b:b9:6d:9f:ce:25:1c:bb:7d:72:
         15:2a:db:ec:97:8b:1e:b5:70:d5:a3:8b:40:a5:a9:82:2b:f8:
         f9:10:c9:94:1b:30:f5:ac:b2:2a:31:95:6d:1c:61:68:49:b7:
         ff:b4:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org