Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/323830343a343630343a3a2f33322d3334203d3e20323636393632.roa
File:                     323830343a343630343a3a2f33322d3334203d3e20323636393632.roa (raw, json)
Hash identifier:          rCA5GTqMbUpfaw4z4ZQRRfgPowCtBlnJUDbeM5+tRZA=
Subject key identifier:   5E:B3:F7:70:AB:42:68:B5:A8:1C:36:CB:26:CF:80:0F:67:71:7F:10
Certificate issuer:       /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
Certificate serial:       2BBCD4DC7A72E81CDA6C46DFD1DC5D353F2BC290
Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/323830343a343630343a3a2f33322d3334203d3e20323636393632.roa
Signing time:             Wed 17 Apr 2024 14:09:39 +0000
ROA not before:           Wed 17 Apr 2024 14:04:39 +0000
ROA not after:            Wed 16 Apr 2025 14:09:39 +0000
asID:                     266962
IP address blocks:        2804:4604::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl
                          rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bc:d4:dc:7a:72:e8:1c:da:6c:46:df:d1:dc:5d:35:3f:2b:c2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
        Validity
            Not Before: Apr 17 14:04:39 2024 GMT
            Not After : Apr 16 14:09:39 2025 GMT
        Subject: CN=5EB3F770AB4268B5A81C36CB26CF800F67717F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:c7:14:82:21:15:08:2e:0b:ed:e1:89:8a:
                    f4:a9:30:b3:27:71:b4:82:31:08:3c:35:0e:77:f8:
                    37:47:38:81:b5:7e:03:af:7f:f9:4f:00:01:28:86:
                    d3:b3:99:ef:ac:b0:54:7b:4c:a0:34:35:dd:4b:7e:
                    b1:66:f8:d0:a8:33:f7:09:80:e4:aa:af:3c:59:c2:
                    77:e2:8d:43:bb:f6:04:15:e8:ba:60:75:60:14:24:
                    f1:2a:7f:d3:8b:2d:cc:27:f3:26:49:55:d1:d3:25:
                    e5:bc:c9:ef:09:c6:5c:dd:9b:c8:45:fc:05:73:d7:
                    b5:d8:6b:f1:a3:f1:7c:3f:e8:ba:6d:cf:de:1c:0c:
                    a4:0b:ad:67:d3:72:1b:31:ed:bf:1c:cb:db:87:3d:
                    a1:8c:b2:8d:18:43:2b:76:5f:fe:0f:93:29:fa:b3:
                    91:db:f2:a9:94:18:8d:1f:92:94:77:c7:4c:e0:80:
                    22:48:db:b9:f9:c0:24:2a:78:1f:01:21:57:37:08:
                    bc:6c:3b:88:bc:78:ea:24:90:2e:1d:f2:bd:f2:f2:
                    c4:44:19:ee:3c:82:f6:3d:25:05:66:c3:4f:6b:49:
                    05:3e:d7:2f:95:36:e3:ad:eb:67:bf:d8:d9:07:8b:
                    b2:c2:5d:10:59:6b:3d:c6:f1:9c:bf:ac:18:de:2e:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:F7:70:AB:42:68:B5:A8:1C:36:CB:26:CF:80:0F:67:71:7F:10
            X509v3 Authority Key Identifier:
                keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/323830343a343630343a3a2f33322d3334203d3e20323636393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4604::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:d6:f5:10:ef:7d:b3:70:d3:4d:dc:20:28:e7:81:9d:70:
         57:a0:df:92:d7:64:be:18:16:cf:83:e0:d3:82:e5:49:41:87:
         8b:57:83:92:72:25:1a:d0:69:c9:c7:d2:52:79:50:a0:46:9e:
         86:61:6c:c5:24:f7:d4:c1:09:d5:23:cd:17:1f:41:63:48:e4:
         e3:6c:1d:2f:63:15:d3:08:ea:8f:d7:f7:26:8c:9f:20:5a:63:
         95:5c:4e:e9:54:aa:5c:88:79:0a:60:57:33:25:8f:77:c3:f7:
         91:4a:44:31:6e:59:ec:a3:89:e9:9d:ef:ee:9a:81:d6:79:ea:
         79:ce:69:da:c9:f4:72:17:79:f0:50:dc:70:0b:75:55:a0:ca:
         0e:52:b6:66:6d:da:3a:50:ba:18:a0:c5:90:5a:d7:a2:00:ad:
         f6:31:99:f4:c1:63:5c:22:85:6f:98:df:04:20:ef:48:96:f2:
         19:af:d1:c1:7b:79:4d:51:fe:bf:28:c4:dc:98:64:da:42:79:
         83:7a:98:d5:aa:b5:df:50:7e:e3:62:e9:ee:2e:ee:e4:43:fa:
         de:d2:7e:85:b5:e6:00:f6:d4:c3:62:9c:f3:1d:76:7c:1d:a1:
         d8:cc:0a:ef:4e:13:09:3f:92:05:62:46:43:88:5c:a9:da:a5:
         ea:35:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:25 2024 by rpki-client on console-fra.rpki-client.org