Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
File:                     323830343a336635343a3a2f33322d3332203d3e20323635383835.roa (raw, json)
Hash identifier:          lhobkuPSGpsRR38rV1KOITIJA6t10JcvfapY/FHFhHA=
Subject key identifier:   00:82:28:44:FD:6B:FD:43:DD:58:0E:FF:F3:CB:2F:EB:59:E4:FE:1F
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       7DADFB332B0B12E4BFF2363BA67E16AB1F246F11
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
Signing time:             Thu 04 Apr 2024 18:29:12 +0000
ROA not before:           Thu 04 Apr 2024 18:24:12 +0000
ROA not after:            Thu 03 Apr 2025 18:29:12 +0000
asID:                     265885
IP address blocks:        2804:3f54::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ad:fb:33:2b:0b:12:e4:bf:f2:36:3b:a6:7e:16:ab:1f:24:6f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Apr  4 18:24:12 2024 GMT
            Not After : Apr  3 18:29:12 2025 GMT
        Subject: CN=00822844FD6BFD43DD580EFFF3CB2FEB59E4FE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:54:76:14:19:ec:ad:b5:53:51:ad:14:7f:
                    7a:7b:58:65:ac:69:c4:34:74:dd:a3:10:78:1b:3a:
                    d9:04:61:3b:1b:4d:3e:81:17:41:38:74:a7:c6:7c:
                    b5:e8:ee:32:00:a6:e4:3e:c6:25:ef:96:3c:48:a5:
                    92:ac:14:4e:8c:ac:ef:4a:41:7d:52:2c:0c:90:b9:
                    be:90:9e:06:20:5f:3b:9f:71:99:de:33:2f:16:7b:
                    81:95:13:42:b0:43:fb:ab:01:cc:d0:fa:6a:52:8e:
                    ea:34:c7:f9:90:f4:0b:87:61:3e:28:6c:9c:9a:5b:
                    61:60:d4:2a:da:82:f8:6f:dc:38:4f:1a:a6:16:40:
                    da:fa:21:90:32:b9:e8:16:7e:59:f4:af:a2:cb:14:
                    93:15:2a:69:d7:02:8b:01:6e:bf:5d:94:5f:c7:64:
                    46:de:ff:cf:f4:e9:ca:0f:8c:03:f8:ee:da:52:bf:
                    a2:ab:f3:80:ed:56:be:8e:49:48:54:44:68:0b:c2:
                    19:9f:fd:12:f6:be:8f:4d:24:6d:ff:1e:88:14:28:
                    3c:ae:fa:b2:12:b4:93:14:99:b9:cb:57:08:19:f3:
                    ed:88:db:61:c3:e1:6b:f8:05:9b:ce:0e:e8:a9:d5:
                    ee:a5:af:b6:77:da:b1:6d:58:e2:35:4d:15:fa:8a:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:82:28:44:FD:6B:FD:43:DD:58:0E:FF:F3:CB:2F:EB:59:E4:FE:1F
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:41:32:79:91:af:e5:39:3c:b0:5c:5e:0f:54:ff:06:03:
         82:43:84:5c:1a:24:23:c1:23:89:ec:2d:a4:f9:4a:d0:22:b4:
         7b:1f:19:1a:0d:67:9c:c6:b9:6b:23:78:da:f2:85:1a:10:b8:
         30:7f:54:12:b2:e8:cc:0b:26:a7:1f:df:fe:d1:82:67:f5:cd:
         1d:e7:28:78:d2:c1:ac:33:2d:89:6b:ea:be:7c:6f:eb:c7:fc:
         16:92:14:15:85:08:3f:08:9b:b5:55:46:53:a9:3c:0e:13:0f:
         e7:8e:99:8b:40:03:37:0f:5b:a1:06:e7:05:14:ef:8e:4c:b8:
         13:59:f3:f1:d9:b0:8c:6c:50:64:2e:49:ac:9d:12:cf:f4:5d:
         56:fb:cd:ff:a7:5e:c9:e9:5d:bd:20:dd:9c:14:df:8f:23:b0:
         61:a9:e5:e3:0b:fd:e2:aa:ab:e5:a1:61:e2:39:ce:2f:21:33:
         cc:8e:49:c6:79:08:45:28:58:e0:56:3b:f2:ad:8d:a3:c4:0a:
         25:bb:89:b7:c4:32:44:ca:c4:ea:e4:d7:75:54:35:94:04:61:
         6a:dd:73:a5:df:f4:54:fd:55:8e:5f:77:5c:b7:ae:05:39:37:
         5d:77:36:96:77:62:7c:30:65:ff:15:e0:be:8b:5e:bd:5c:9d:
         5e:ad:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:33 2024 by rpki-client on console-fra.rpki-client.org