Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a64343a3a2f33322d313238203d3e203238313338.roa
File:                     323830343a64343a3a2f33322d313238203d3e203238313338.roa (raw, json)
Hash identifier:          O5Y8VfTseja7opjK1UNo97uEmji3oQTDexNxuY/azyU=
Subject key identifier:   45:0F:2C:48:70:2B:7F:FD:E1:F3:A6:F2:63:E9:2D:A6:FC:D7:FB:F0
Certificate issuer:       /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial:       1FB18A4FAEC1E2C129D705E552A11B2CC32F5A4E
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a64343a3a2f33322d313238203d3e203238313338.roa
Signing time:             Mon 15 Apr 2024 14:26:39 +0000
ROA not before:           Mon 15 Apr 2024 14:21:39 +0000
ROA not after:            Mon 14 Apr 2025 14:26:39 +0000
asID:                     28138
IP address blocks:        2804:d4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
                          rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b1:8a:4f:ae:c1:e2:c1:29:d7:05:e5:52:a1:1b:2c:c3:2f:5a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
        Validity
            Not Before: Apr 15 14:21:39 2024 GMT
            Not After : Apr 14 14:26:39 2025 GMT
        Subject: CN=450F2C48702B7FFDE1F3A6F263E92DA6FCD7FBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:71:87:c0:31:4a:fc:af:bc:19:b7:a3:31:
                    6d:67:0c:04:1e:82:ea:46:06:5e:a4:1d:a0:b8:cb:
                    1a:6e:73:8b:f1:60:64:82:37:3a:2a:76:f1:28:a7:
                    7f:72:6e:07:dd:54:2b:a3:1d:cd:41:cc:9a:23:78:
                    3a:11:d4:6a:c6:4f:31:0d:88:64:0a:40:fc:07:4e:
                    51:95:de:d7:84:2e:57:cf:44:40:29:02:94:f9:74:
                    30:21:58:64:b2:4f:3d:a7:91:a8:a8:4b:64:28:47:
                    d0:3b:15:19:be:c7:c2:5d:ea:b6:3f:43:86:f3:ad:
                    e5:28:b0:02:ae:eb:99:96:1b:fc:5a:a7:32:c7:76:
                    38:49:ed:7d:d9:83:1a:50:3b:2f:a3:3d:d8:bc:48:
                    dc:28:88:c5:a9:36:9c:ce:c3:9f:3f:51:0d:66:14:
                    56:0d:e1:f0:bc:bb:37:5a:ac:0c:cd:a5:80:0f:bc:
                    ad:30:ef:28:38:e9:13:0b:ea:4e:c4:f5:84:7d:56:
                    2a:d8:9b:15:6f:49:51:69:60:a9:88:5e:5d:3c:95:
                    d9:8e:6b:77:dd:0e:da:e3:4d:72:d7:c3:2e:95:8a:
                    f9:0f:74:42:c1:0d:89:47:c4:5a:5a:48:39:02:4c:
                    d6:5c:6f:16:f5:1c:77:1c:54:27:5d:d4:b6:9f:ab:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:2C:48:70:2B:7F:FD:E1:F3:A6:F2:63:E9:2D:A6:FC:D7:FB:F0
            X509v3 Authority Key Identifier:
                keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a64343a3a2f33322d313238203d3e203238313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:2f:97:70:38:4c:12:77:34:c1:cd:29:ae:69:53:8d:13:
         72:97:ef:e2:98:c3:3c:d5:79:35:a6:6d:a0:1e:a1:4f:0f:39:
         1a:3e:49:05:85:37:e8:e3:c3:83:2a:28:ae:3b:13:f8:42:ec:
         0a:a2:1b:d8:45:b8:bd:2e:f8:8f:10:d1:34:70:de:37:69:7f:
         0d:7c:f8:45:91:ac:5e:4e:73:d9:a9:c4:c8:63:16:ff:14:e7:
         69:2c:aa:b9:ba:f7:51:d6:fd:c5:46:02:13:0b:80:fa:bf:d4:
         b6:07:89:46:4b:1e:8c:59:af:57:2f:43:0e:0e:47:66:a6:86:
         74:c0:51:31:6e:7c:4c:ff:45:53:4e:6d:c4:72:d2:12:fe:79:
         85:73:b4:be:24:f6:ae:6e:a0:3f:c2:ad:d7:b0:2c:a6:b2:0d:
         57:8b:0a:e4:65:f5:b0:8f:81:45:9e:f3:e2:1a:da:07:69:44:
         01:8d:51:b4:2a:cc:f8:c8:db:2b:6d:ea:e7:12:5d:ba:be:4b:
         0e:f0:10:15:cb:b5:ae:59:4e:a2:0a:80:d4:04:45:55:ad:f6:
         7c:87:b0:76:db:58:75:a3:86:47:18:dc:d2:07:80:8e:6d:fb:
         fe:2d:88:72:2f:38:0a:8e:44:34:ae:c4:5f:b6:36:3a:4b:e5:
         44:0e:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org