Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa
File:                     323830343a383466343a3a2f33322d3431203d3e20323732353438.roa (raw, json)
Hash identifier:          Vpi0mUElRJod6vXUj4vQVws/ynf4Yo8gUGY6pKPu65k=
Subject key identifier:   BD:29:A8:6B:73:7C:48:E6:76:74:FD:41:2C:B2:35:19:0D:BE:C5:B9
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       770F5C5FADA4DD32E503FC5767CB25E97C25E157
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa
Signing time:             Thu 04 Apr 2024 15:29:40 +0000
ROA not before:           Thu 04 Apr 2024 15:24:40 +0000
ROA not after:            Thu 03 Apr 2025 15:29:40 +0000
asID:                     272548
IP address blocks:        2804:84f4::/32 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0f:5c:5f:ad:a4:dd:32:e5:03:fc:57:67:cb:25:e9:7c:25:e1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Apr  4 15:24:40 2024 GMT
            Not After : Apr  3 15:29:40 2025 GMT
        Subject: CN=BD29A86B737C48E67674FD412CB235190DBEC5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:64:41:96:41:2a:dd:e5:42:be:e9:46:c9:
                    ae:4b:2d:01:aa:cf:c2:1e:8e:13:67:54:ab:9c:d1:
                    0b:45:0c:df:2c:54:4a:9c:98:a4:dd:4e:72:c6:6d:
                    9d:b5:0c:eb:fc:21:19:a7:64:c0:bb:d8:c5:c3:c9:
                    25:ce:b6:4c:f0:23:ed:d2:34:68:fa:fa:75:b4:ea:
                    56:cb:82:59:37:d5:0b:79:87:0d:71:26:8a:34:fc:
                    f8:75:53:85:cc:0e:0e:1a:df:7a:2b:bf:2f:d6:1a:
                    b0:83:61:30:69:e2:bb:85:3b:e5:9d:45:41:3b:72:
                    aa:28:5d:6c:5b:df:28:00:98:ce:76:00:6a:4a:63:
                    32:d1:2a:c0:52:36:ec:43:b0:d2:b1:f6:0f:1c:df:
                    60:96:59:a1:44:77:3a:a3:d2:bf:ad:47:ee:a9:9e:
                    bc:0f:78:8d:00:6c:ae:f1:d7:4b:c2:5b:7f:94:46:
                    07:b3:9a:ad:45:9f:49:b0:e3:04:bc:6b:8e:47:e9:
                    2a:3e:d6:b1:60:16:08:f2:ec:22:ab:f7:27:95:cd:
                    c0:be:81:82:81:a5:b1:ec:f5:1c:b3:fa:31:5b:c5:
                    da:fe:d2:2f:49:9b:fa:f1:02:27:20:0d:f4:f4:dc:
                    56:fe:d5:d8:be:b7:3c:98:8d:ce:cf:8c:ef:23:26:
                    1c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:A8:6B:73:7C:48:E6:76:74:FD:41:2C:B2:35:19:0D:BE:C5:B9
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:87:91:bb:2d:16:04:b2:45:6c:bc:cd:49:b4:eb:1c:10:
         a6:4f:72:01:a5:06:70:25:8f:ed:bf:78:5a:cc:44:b4:d0:87:
         ba:f2:e7:eb:10:d0:54:97:b1:fe:72:61:12:a1:c0:2e:d6:e4:
         44:ec:f0:cd:22:1f:7b:75:65:53:2c:78:5a:6b:9a:38:81:77:
         ff:b4:1f:e8:2f:7c:13:63:8a:84:c6:e9:d1:e8:6e:6c:98:4f:
         38:ce:6a:ac:e5:44:52:51:25:17:d7:10:6d:5f:6f:2e:22:9d:
         0d:cc:77:d2:e2:5b:14:75:87:04:d8:99:6e:1e:ca:60:4c:1c:
         88:22:53:49:c9:1b:3f:85:37:a5:17:ce:72:21:4d:ef:9e:9e:
         33:39:36:1f:17:9d:2b:7f:d8:ae:84:f6:29:e0:36:0f:55:b4:
         38:02:51:fb:2a:2c:46:d0:2c:7f:b0:a2:af:2f:9f:74:6d:56:
         5f:f1:25:58:2d:e0:8d:32:71:45:cb:00:3d:c5:4b:a1:bb:88:
         c7:90:e5:4f:13:2a:f2:a2:da:27:24:e9:67:80:ea:0b:65:c7:
         b7:b8:9f:45:c9:4f:1f:82:e7:31:ea:a2:ed:0d:0b:b3:12:f8:
         14:11:0b:58:cf:27:02:7f:13:1b:63:7e:46:77:8a:28:2c:65:
         a4:ec:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org