Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/323830343a323032303a3a2f3332203d3e20323634343730.roa
File:                     323830343a323032303a3a2f3332203d3e20323634343730.roa (raw, json)
Hash identifier:          4PEmYYhXhot8vScHFGWDRyigkvEZN9hpZiflwO7mmtc=
Subject key identifier:   63:EB:1A:68:F0:68:DB:AF:AB:8A:76:10:63:2B:64:FC:0B:89:D3:A0
Certificate issuer:       /CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
Certificate serial:       2A0865BF9D96EA3C3E2A38E33BB3C7ED0F5B5939
Authority key identifier: 6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/323830343a323032303a3a2f3332203d3e20323634343730.roa
Signing time:             Thu 04 Apr 2024 04:00:59 +0000
ROA not before:           Thu 04 Apr 2024 03:55:59 +0000
ROA not after:            Thu 03 Apr 2025 04:00:59 +0000
asID:                     264470
IP address blocks:        2804:2020::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl
                          rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:08:65:bf:9d:96:ea:3c:3e:2a:38:e3:3b:b3:c7:ed:0f:5b:59:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
        Validity
            Not Before: Apr  4 03:55:59 2024 GMT
            Not After : Apr  3 04:00:59 2025 GMT
        Subject: CN=63EB1A68F068DBAFAB8A7610632B64FC0B89D3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:70:76:1c:84:9d:06:9c:ea:8d:cc:64:cc:4c:
                    56:ab:75:95:56:29:9a:2f:36:bb:50:6c:66:ea:33:
                    05:c6:72:f4:35:fd:85:65:c0:a4:7e:91:57:5d:14:
                    19:9c:05:9d:e7:06:18:1c:f9:4c:21:8b:2e:58:5d:
                    aa:84:2f:0d:b0:d8:1f:da:15:f6:c0:c4:22:30:57:
                    c4:47:03:b1:a7:5d:e3:2d:b8:82:11:94:25:74:e9:
                    72:cf:77:aa:a4:55:56:4a:8b:97:49:9d:fd:91:46:
                    b1:8f:26:66:7b:19:0d:78:d2:ed:f8:33:78:b6:e2:
                    ab:4d:30:96:2c:be:ec:47:4e:b2:ff:82:77:87:85:
                    b5:ce:08:2a:4e:ac:20:f6:9f:71:7a:82:a5:c6:4a:
                    34:bf:65:ad:57:66:7d:60:29:b3:06:34:a3:ef:25:
                    18:ea:53:9e:11:0c:26:10:cf:fd:a5:7e:46:10:d2:
                    f3:ce:6f:e5:98:c7:b1:6d:20:e4:cb:fc:3a:8d:de:
                    24:5a:41:e0:a6:49:e6:96:09:f6:f6:1b:b0:4a:81:
                    00:8e:eb:40:b6:62:66:f0:65:67:a1:9a:45:4d:06:
                    1d:6a:e6:21:6b:31:f5:52:7d:c5:ce:19:93:de:0d:
                    9a:17:36:7d:11:03:a0:8e:66:16:a1:eb:5c:b1:24:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:1A:68:F0:68:DB:AF:AB:8A:76:10:63:2B:64:FC:0B:89:D3:A0
            X509v3 Authority Key Identifier:
                keyid:6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/323830343a323032303a3a2f3332203d3e20323634343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2020::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:d6:d0:04:ce:85:0c:06:d5:69:12:81:9c:0c:af:ec:47:1d:
         45:5d:7b:a4:8d:b9:cb:1e:a1:97:2e:13:a2:be:7f:e6:87:bb:
         6f:a1:4a:0f:9a:8e:cb:ff:38:7f:f4:f1:36:eb:04:cb:3a:3c:
         31:d1:fa:09:4d:65:f1:4b:5e:a2:81:b5:62:ff:ba:40:88:60:
         14:d5:4a:1d:ff:3a:6f:10:fc:cf:03:13:75:3a:10:ff:07:73:
         0c:79:fd:e2:9f:db:0e:bd:90:1c:ba:53:16:36:00:a7:31:2a:
         cb:01:a6:82:1c:3e:5e:54:02:1e:53:2c:a7:4d:87:8c:0f:85:
         65:08:f5:ff:e9:18:b7:89:f4:47:fa:00:cc:c7:16:fc:dc:0f:
         c5:99:de:61:ba:fe:a0:8c:03:f0:c5:55:fb:73:11:c7:ab:1a:
         6e:92:ce:e0:db:93:80:d0:46:5f:fa:ef:05:ef:59:bf:00:b1:
         79:89:a5:4a:4a:04:8f:17:78:03:e4:77:79:0b:b8:c1:bc:39:
         a2:04:45:d3:43:ed:3d:0f:0e:cc:a5:03:72:0a:3f:0f:3a:47:
         43:5b:be:1b:b8:25:7c:a5:6e:a1:a8:20:a9:41:d0:ce:ec:ee:
         1e:2e:9f:f7:00:a8:68:63:38:69:69:3c:2d:90:0c:65:3b:5d:
         ef:14:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org