Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d3334203d3e20323732313633.roa
File:                     323830343a383265343a3a2f33322d3334203d3e20323732313633.roa (raw, json)
Hash identifier:          NTq52/R86waefLjzCdQm09eRB1qE54sDzctEmUPT2Dw=
Subject key identifier:   06:A8:CD:33:D5:D6:A9:74:F6:5A:4F:68:B9:7C:23:CE:01:71:61:C1
Certificate issuer:       /CN=5C19FED4C7252A581F1562DE10A3DF073AFFBC5C
Certificate serial:       3A43F32AADB21A0AFD9EC5DCBFBFE76BB67CDB05
Authority key identifier: 5C:19:FE:D4:C7:25:2A:58:1F:15:62:DE:10:A3:DF:07:3A:FF:BC:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C19FED4C7252A581F1562DE10A3DF073AFFBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d3334203d3e20323732313633.roa
Signing time:             Fri 13 Sep 2024 16:43:32 +0000
ROA not before:           Fri 13 Sep 2024 16:38:32 +0000
ROA not after:            Fri 12 Sep 2025 16:43:32 +0000
asID:                     272163
IP address blocks:        2804:82e4::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/5C19FED4C7252A581F1562DE10A3DF073AFFBC5C.crl
                          rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/5C19FED4C7252A581F1562DE10A3DF073AFFBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C19FED4C7252A581F1562DE10A3DF073AFFBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:43:f3:2a:ad:b2:1a:0a:fd:9e:c5:dc:bf:bf:e7:6b:b6:7c:db:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C19FED4C7252A581F1562DE10A3DF073AFFBC5C
        Validity
            Not Before: Sep 13 16:38:32 2024 GMT
            Not After : Sep 12 16:43:32 2025 GMT
        Subject: CN=06A8CD33D5D6A974F65A4F68B97C23CE017161C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:95:5c:bf:31:ee:6e:a3:29:bb:cc:f9:4d:
                    38:30:96:e7:52:5f:b5:7e:f8:86:a2:ba:72:ce:26:
                    f0:bd:58:83:af:a5:83:ca:46:4e:68:44:46:48:ec:
                    5a:77:66:5f:7d:e7:e3:8a:56:cf:5b:9b:93:99:cb:
                    3b:24:1f:d1:ec:b7:ab:9f:f0:32:4d:0a:23:1a:de:
                    9e:c6:e9:0b:b4:32:fa:e6:7b:79:88:bb:02:19:37:
                    4b:f8:de:92:23:9c:f6:b6:8b:67:1d:9c:0f:fe:7e:
                    17:be:b9:e7:24:37:3a:a1:57:86:38:c9:31:fb:5e:
                    c0:46:d3:d1:9c:37:4f:49:c1:06:e7:f8:60:59:95:
                    ab:55:f5:fa:d6:a3:3f:8e:3c:43:ea:d5:18:bf:53:
                    cd:d7:1a:e6:d7:4d:4a:b1:e7:c5:28:d6:40:fd:33:
                    82:c1:ec:29:56:5d:28:1b:9b:79:67:6a:4c:9a:56:
                    7e:f1:7b:fb:bb:98:85:e0:22:d5:4d:d6:f7:a4:53:
                    6c:41:87:9b:af:be:b9:82:74:5b:6a:7c:ae:5e:41:
                    0b:49:c3:78:bd:cb:2e:82:34:ef:a9:89:f2:67:65:
                    83:9c:56:a5:74:ea:6b:83:57:b8:8b:a8:7a:b8:93:
                    69:db:bf:59:e2:1b:44:f9:dc:7e:bc:54:fb:24:9c:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A8:CD:33:D5:D6:A9:74:F6:5A:4F:68:B9:7C:23:CE:01:71:61:C1
            X509v3 Authority Key Identifier:
                keyid:5C:19:FE:D4:C7:25:2A:58:1F:15:62:DE:10:A3:DF:07:3A:FF:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/5C19FED4C7252A581F1562DE10A3DF073AFFBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C19FED4C7252A581F1562DE10A3DF073AFFBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d3334203d3e20323732313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:47:22:92:42:45:bd:5b:c1:5a:3a:fd:ac:f3:a3:02:7d:3a:
         12:4d:54:04:dc:8d:13:11:02:d0:9d:f9:4d:04:55:6b:53:2e:
         a1:73:a1:df:bf:4e:c8:89:24:07:57:0f:a3:73:05:7b:5e:f0:
         a9:21:bf:f4:aa:a9:ad:d4:20:81:0f:0f:b7:89:d4:fc:2c:a6:
         e9:82:88:c4:b1:dc:72:2f:7d:9c:0f:cb:8a:83:bd:18:2d:5a:
         46:5f:09:7f:b0:3f:1b:7a:d6:0f:f0:7a:f5:71:6c:55:a9:b8:
         7d:58:e9:0b:89:e2:26:c5:be:80:4b:a7:66:d0:be:fb:14:8b:
         45:80:41:3b:e7:d0:b9:eb:03:6d:02:4b:60:a7:76:eb:f8:27:
         ce:a8:2c:c7:aa:b5:e7:a0:1e:64:32:c1:fe:f5:24:d7:3d:99:
         d6:64:cc:04:9f:a9:b5:d2:1c:14:b4:ae:86:58:8a:89:6b:12:
         a0:a8:0c:c9:ba:e7:7e:52:fc:c0:25:5c:0e:1e:00:d0:a1:1d:
         3d:2a:e6:8c:01:d8:f4:2a:fc:33:39:45:ae:5b:a6:b1:6d:0f:
         85:a9:f5:e9:2e:4d:f3:f7:7f:0a:d9:18:00:7a:42:26:17:6f:
         cd:f2:67:9f:a5:e2:d9:44:83:d9:14:10:e3:f2:ca:8a:b1:39:
         e1:c9:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:54 2024 by rpki-client on console-fra.rpki-client.org