Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/323830343a323866303a3a2f33322d3438203d3e20323633393838.roa
File:                     323830343a323866303a3a2f33322d3438203d3e20323633393838.roa (raw, json)
Hash identifier:          CNSiPZGBlk65kH20c/vdEjZH9+zgo5TUnbuR7jonKnY=
Subject key identifier:   3E:BF:EE:80:68:69:B3:58:FC:1F:2C:B4:A9:02:0E:EC:7D:EC:7D:6B
Certificate issuer:       /CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
Certificate serial:       79D63AC183E022EB055F394D39FCC1B62310C96A
Authority key identifier: 44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/323830343a323866303a3a2f33322d3438203d3e20323633393838.roa
Signing time:             Tue 25 Jun 2024 12:48:14 +0000
ROA not before:           Tue 25 Jun 2024 12:43:14 +0000
ROA not after:            Tue 24 Jun 2025 12:48:14 +0000
asID:                     263988
IP address blocks:        2804:28f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl
                          rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d6:3a:c1:83:e0:22:eb:05:5f:39:4d:39:fc:c1:b6:23:10:c9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Validity
            Not Before: Jun 25 12:43:14 2024 GMT
            Not After : Jun 24 12:48:14 2025 GMT
        Subject: CN=3EBFEE806869B358FC1F2CB4A9020EEC7DEC7D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:ab:58:98:3d:e4:0d:16:21:29:32:19:60:
                    5d:71:68:2e:a8:d7:0e:8a:64:00:c4:5f:36:fe:af:
                    f5:79:7e:c5:3d:df:26:d6:41:0f:2d:e8:c6:3d:84:
                    c4:49:97:fe:36:3c:45:86:32:b7:1c:28:d4:47:f1:
                    1e:56:bd:bd:2a:eb:f5:9a:2b:76:88:5a:0d:d1:ff:
                    40:64:a2:b7:ad:f2:27:96:78:fe:b0:48:2c:ed:a9:
                    ad:07:73:94:43:ba:c3:83:e3:a3:11:f0:bb:11:2b:
                    e6:bf:5d:74:2c:92:57:85:b4:33:73:5b:c5:3e:d2:
                    13:44:4c:e1:53:44:cf:09:f1:44:02:e7:22:2e:4e:
                    2b:61:9d:f3:cf:76:db:4d:75:0e:63:b8:bc:f5:38:
                    99:13:d5:5e:cc:ac:ac:f7:a9:9a:f0:d2:80:89:b4:
                    33:80:30:a3:cb:96:ed:23:34:6a:91:1f:94:e5:f8:
                    3d:8b:3e:b9:fa:53:6e:2b:5a:f5:b3:fe:31:92:4d:
                    c6:52:d6:53:78:b1:45:96:3c:e2:89:6f:ed:70:43:
                    c4:d2:87:26:64:2b:84:dd:b3:d5:cf:40:1d:a5:40:
                    6b:c0:59:ae:2c:95:75:17:ba:f8:b2:e8:83:07:05:
                    75:cf:3a:d1:55:5a:de:bf:d9:52:df:75:84:a3:32:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BF:EE:80:68:69:B3:58:FC:1F:2C:B4:A9:02:0E:EC:7D:EC:7D:6B
            X509v3 Authority Key Identifier:
                keyid:44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/323830343a323866303a3a2f33322d3438203d3e20323633393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:47:56:c5:45:90:f8:c6:76:9f:e0:d9:45:76:a2:2b:98:6e:
         23:f5:7e:5c:44:67:f8:43:6f:5c:8c:3c:0a:fb:82:5c:e1:35:
         23:bc:b5:64:3c:bd:20:6e:e4:e0:4d:1d:7a:cb:2b:74:6d:1e:
         fb:30:fb:7b:13:40:15:0d:c9:ea:b7:00:b2:14:b9:2d:cd:32:
         b2:f4:28:02:c0:56:e1:41:92:c6:53:cb:c3:f1:95:0d:e0:0b:
         a4:1f:c7:13:57:51:e7:7b:ec:44:cb:45:40:c2:31:fe:d7:dc:
         5a:3d:84:bf:33:26:cc:31:52:41:fb:27:7d:b1:10:2c:70:4c:
         e5:8d:d9:f7:b4:5a:65:18:19:b1:5e:bc:48:f3:86:e9:5c:7c:
         3f:31:1f:42:f5:d8:ec:20:e0:1b:2d:1d:30:12:4c:4d:bc:10:
         61:eb:7e:02:26:3b:35:2e:26:40:81:cf:48:fd:a3:5e:a2:02:
         dd:a2:c2:4b:d0:e6:9f:48:a0:81:39:aa:8d:e8:35:f0:8a:61:
         66:42:1b:5b:d1:23:6d:3e:98:30:d3:66:a0:23:60:c5:ed:95:
         76:24:01:d3:9c:02:15:fd:f0:ae:d9:25:c3:09:6a:15:cd:13:
         cb:2f:5b:79:be:6e:c3:0d:2a:00:31:62:1e:b3:86:64:5c:8d:
         3f:ec:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:43:57 2024 by rpki-client on console-ams.rpki-client.org