Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa
File:                     323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa (raw, json)
Hash identifier:          5pSSgEQ7DnArgj5VzE+PlKqQVKqfUlOn0+FSAC4nWIQ=
Subject key identifier:   4D:24:7A:3B:DD:F4:02:77:3C:97:68:22:92:58:A1:C5:B4:04:5C:07
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       2AFC3C70604516CC58994DE63D33BE2B302C4840
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa
Signing time:             Wed 03 Apr 2024 19:05:22 +0000
ROA not before:           Wed 03 Apr 2024 19:00:22 +0000
ROA not after:            Wed 02 Apr 2025 19:05:22 +0000
asID:                     263900
IP address blocks:        2804:276c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:3c:70:60:45:16:cc:58:99:4d:e6:3d:33:be:2b:30:2c:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Apr  3 19:00:22 2024 GMT
            Not After : Apr  2 19:05:22 2025 GMT
        Subject: CN=4D247A3BDDF402773C9768229258A1C5B4045C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:14:cf:b1:7e:02:52:62:3d:e1:4e:a3:35:c9:
                    57:e4:a1:47:b8:d4:e1:ef:94:9a:59:44:72:38:79:
                    4c:db:88:f2:29:b0:47:27:ee:a3:fb:28:4d:b1:07:
                    4b:a1:04:73:91:a9:be:b9:4c:1e:78:e9:de:13:e7:
                    c0:e4:27:78:7b:6b:b9:ab:62:de:e2:0d:5e:32:29:
                    2a:47:61:68:72:13:0c:2c:71:70:ab:dc:94:ae:ea:
                    9b:21:00:7d:0a:b9:d1:12:47:fe:fb:a7:88:c8:6a:
                    7d:54:9f:4f:1a:69:f4:59:a8:2a:f3:8a:13:db:09:
                    c8:b7:76:47:25:46:6f:f1:1b:a2:0a:cf:07:fa:69:
                    c4:19:cb:09:22:41:e5:ff:a1:b6:ea:9f:e6:f3:a4:
                    cd:5d:87:3d:d9:6c:04:55:9e:58:c7:0f:f3:f1:f3:
                    c6:b4:b4:1d:ce:1d:0a:54:10:d2:ad:85:05:85:fb:
                    a6:af:80:94:4c:f4:93:58:52:c7:69:bc:5b:14:fb:
                    76:6c:54:67:fb:63:1d:22:9e:92:94:c1:41:d3:d6:
                    39:7b:eb:ab:84:00:25:14:fa:f5:7f:51:3b:0c:8f:
                    2d:4d:ef:89:3b:cf:78:b9:a2:7e:60:73:82:08:b8:
                    7c:3d:47:04:e0:dd:e0:5b:56:75:08:80:51:db:bd:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:7A:3B:DD:F4:02:77:3C:97:68:22:92:58:A1:C5:B4:04:5C:07
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:cb:23:a3:4b:3e:8e:6f:da:a1:db:27:09:5a:94:f7:a2:
         09:8d:f7:d6:2c:53:f2:c3:64:c8:81:7e:12:df:7e:df:13:eb:
         0c:9e:87:e3:39:29:3f:64:d0:74:b9:75:a4:e2:d3:79:b2:90:
         85:d6:5d:12:55:3c:94:84:b6:b3:20:e2:63:cb:93:01:40:ee:
         77:83:cf:ce:6b:eb:13:35:38:90:a7:c6:d4:ad:0f:0c:0e:68:
         15:1b:1a:d3:eb:d5:86:6d:da:ff:5a:69:39:43:26:eb:0d:75:
         79:c8:94:89:2c:40:5b:69:a1:6d:d8:00:70:60:d3:29:7d:4a:
         82:16:67:dd:b6:c2:04:bd:ee:a3:c3:c7:6a:de:f6:5b:dd:5c:
         0d:18:9e:e1:7a:a1:13:ae:3d:9f:cb:14:c3:54:85:87:b7:df:
         55:c8:c7:62:7e:c3:b6:f1:b8:7a:9e:ca:3d:4c:1f:89:38:ef:
         61:b2:2a:50:76:60:0c:3e:47:68:62:8b:2e:f3:91:ae:e0:32:
         db:cb:7e:5e:e8:92:c7:64:ce:34:9a:19:6a:95:84:27:35:13:
         cd:3f:61:c7:23:36:6c:a9:44:80:ed:ab:11:ce:4e:86:50:f3:
         c4:cb:af:c7:44:20:65:3d:0b:c1:74:33:ee:56:8f:12:88:25:
         07:fd:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:18 2024 by rpki-client on console-ams.rpki-client.org