Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa
File:                     323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa (raw, json)
Hash identifier:          SaGVup0rq2HsFkaqvBu4maV1PH14Ei8bCmVz/w6LU4k=
Subject key identifier:   C3:2D:2E:86:FB:44:8B:43:D9:20:92:F8:66:C3:C3:22:9F:1F:D9:39
Certificate issuer:       /CN=A549402556B1273F8A3031E620C960AD6F9EF416
Certificate serial:       68BD85DB2F326A2229B1C3EABDF4FBDF33DF35BE
Authority key identifier: A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa
Signing time:             Wed 02 Oct 2024 15:02:48 +0000
ROA not before:           Wed 02 Oct 2024 14:57:48 +0000
ROA not after:            Wed 01 Oct 2025 15:02:48 +0000
asID:                     263887
IP address blocks:        2804:2740:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bd:85:db:2f:32:6a:22:29:b1:c3:ea:bd:f4:fb:df:33:df:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A549402556B1273F8A3031E620C960AD6F9EF416
        Validity
            Not Before: Oct  2 14:57:48 2024 GMT
            Not After : Oct  1 15:02:48 2025 GMT
        Subject: CN=C32D2E86FB448B43D92092F866C3C3229F1FD939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:da:92:58:d1:c9:0c:4a:25:71:5e:28:fd:2f:
                    da:a9:a2:b3:cf:7f:b5:d1:0d:2d:75:42:2e:cd:5f:
                    8c:f1:13:76:0f:5d:83:3e:e7:c0:fb:ad:3a:1b:f4:
                    e8:ce:0c:68:bd:52:a1:fa:53:e7:43:e8:83:b3:30:
                    95:e2:35:99:5c:39:f0:70:96:f6:64:1f:fb:9f:29:
                    05:4d:5e:53:3d:6b:32:5a:20:e6:e9:bb:ce:4a:41:
                    55:0e:39:79:b1:fb:85:9c:d0:1c:f2:67:9a:fa:bc:
                    69:59:30:2a:f3:18:da:61:77:c2:96:31:a9:ad:41:
                    a6:84:2a:02:eb:77:1f:91:71:40:b5:ee:90:ce:01:
                    d4:fe:da:99:e3:83:f9:a8:9f:4c:39:43:45:71:ad:
                    f3:f1:24:49:8d:fa:e2:58:8b:aa:f1:12:f4:f5:78:
                    8d:b0:c3:fa:e3:39:54:19:4e:f2:4e:65:63:59:6f:
                    50:97:64:21:4e:9b:ba:bc:7b:ae:ae:b4:50:d8:7c:
                    26:55:ff:55:63:02:7c:69:83:44:45:a7:63:4d:f9:
                    42:92:ba:34:96:88:e1:b3:4a:8d:4d:c3:f0:f7:db:
                    c9:b7:79:8e:ec:ca:c5:8c:a1:dc:2d:30:20:5d:9c:
                    2d:67:0b:bf:23:fb:77:b0:8c:fc:46:46:09:5d:bf:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2D:2E:86:FB:44:8B:43:D9:20:92:F8:66:C3:C3:22:9F:1F:D9:39
            X509v3 Authority Key Identifier:
                keyid:A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:63:53:30:5f:ae:7e:b6:62:89:b4:96:b5:77:dd:b8:a3:
         59:18:2a:d9:c5:19:44:e6:18:df:d0:13:9f:cc:3c:f3:07:55:
         63:4d:0a:74:b6:a4:fa:a1:4c:93:c3:68:6f:04:aa:14:9e:4d:
         7c:f8:70:4f:50:b5:10:f6:ec:07:d8:b9:33:60:cc:ef:0f:e8:
         7c:2e:8b:67:23:f4:a4:b5:dd:5f:a2:30:62:d1:e9:a0:01:84:
         80:2f:4a:a4:f2:c5:00:6b:9a:d9:04:13:41:92:8e:a6:85:25:
         3f:8f:74:a6:70:bb:7b:17:9d:e5:fa:35:a9:5d:ee:35:6d:aa:
         8b:f9:55:18:c8:d1:10:21:2c:7a:b8:b4:d8:93:27:67:e8:1a:
         17:6d:11:95:69:2d:10:40:86:42:6d:39:1b:48:1e:36:64:ae:
         f5:69:e6:62:16:8a:24:e0:82:b9:41:92:fb:68:cb:11:4e:db:
         2f:22:cd:0f:a4:ea:33:d0:a1:b7:92:2b:d6:a8:d6:7a:0e:cf:
         c1:fe:b6:09:b7:ee:90:18:5f:9b:60:fb:8e:0d:be:3e:42:20:
         3e:59:36:5e:cb:58:dc:a4:e4:db:cd:3f:59:a0:02:ad:8e:13:
         14:ed:65:72:80:83:a7:d8:2e:07:17:7a:84:66:86:2c:0b:85:
         9c:b4:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:26 2024 by rpki-client on console-ams.rpki-client.org