Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/323830343a343931383a3a2f33322d3438203d3e20323637313634.roa
File:                     323830343a343931383a3a2f33322d3438203d3e20323637313634.roa (raw, json)
Hash identifier:          cTbLS0qf5y6ydgRPTFxn4XnVjEEeEUrKgDdVjvmYITA=
Subject key identifier:   CC:07:D0:D1:B6:0F:BA:6C:7C:19:61:24:B0:B2:7E:BE:47:44:5C:51
Certificate issuer:       /CN=81DD59DA77587B1BD0A14E971E442A926C1CFBAB
Certificate serial:       7A8A14B42439850471791E6ADA2DCA741F4541CD
Authority key identifier: 81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/323830343a343931383a3a2f33322d3438203d3e20323637313634.roa
Signing time:             Thu 04 Apr 2024 14:52:56 +0000
ROA not before:           Thu 04 Apr 2024 14:47:56 +0000
ROA not after:            Thu 03 Apr 2025 14:52:56 +0000
asID:                     267164
IP address blocks:        2804:4918::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.crl
                          rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8a:14:b4:24:39:85:04:71:79:1e:6a:da:2d:ca:74:1f:45:41:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DD59DA77587B1BD0A14E971E442A926C1CFBAB
        Validity
            Not Before: Apr  4 14:47:56 2024 GMT
            Not After : Apr  3 14:52:56 2025 GMT
        Subject: CN=CC07D0D1B60FBA6C7C196124B0B27EBE47445C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dd:5e:e8:7a:8e:0e:d7:97:bb:25:50:99:f9:
                    1c:8b:c3:45:62:43:d9:ee:25:7e:87:59:94:63:18:
                    a5:c8:d7:9d:3b:91:79:7a:0c:4c:3c:eb:fa:a0:d9:
                    6f:7c:5c:d5:69:ac:96:b3:90:ec:15:0e:1f:f4:ee:
                    1d:60:4d:ac:a7:a8:a9:37:7e:99:b3:bb:4b:ce:37:
                    60:dc:25:8d:2c:2f:91:38:e1:99:69:59:58:1f:db:
                    f0:ea:c6:8e:df:01:a9:bf:4a:52:9d:50:b0:18:39:
                    70:c2:19:92:ed:7f:57:89:24:f9:09:02:fa:c6:dd:
                    71:4a:6c:5a:db:ab:cd:4f:9b:08:bc:27:bb:db:b1:
                    8c:a0:6f:03:13:b7:50:58:19:91:ce:d4:e4:aa:28:
                    13:d2:9f:7e:a1:91:b0:f4:4c:97:73:6f:05:ee:af:
                    86:be:e2:4a:d0:37:60:76:1a:a7:b0:94:54:2c:a7:
                    3e:0d:12:3b:22:22:de:80:c8:03:5b:20:4a:70:df:
                    ca:f2:be:cc:ba:90:16:95:ce:ae:f5:b6:14:d7:be:
                    d9:c3:09:d4:1d:64:e6:3c:10:10:a8:70:ca:12:d1:
                    51:de:ef:a5:59:4d:13:89:95:99:9e:a8:61:67:59:
                    42:0b:9f:18:98:cb:36:72:1a:74:77:bc:26:46:e9:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:D0:D1:B6:0F:BA:6C:7C:19:61:24:B0:B2:7E:BE:47:44:5C:51
            X509v3 Authority Key Identifier:
                keyid:81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/323830343a343931383a3a2f33322d3438203d3e20323637313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4918::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:96:20:c5:a1:65:f4:f0:da:5a:74:33:63:38:47:40:20:4e:
         74:da:81:e8:99:5f:55:c4:b2:11:0f:9b:98:c8:ec:fd:3a:75:
         35:ff:89:0c:c9:c5:b0:e3:a5:f3:cb:b6:50:7d:c1:f9:8c:92:
         a4:c9:2d:c6:36:0b:db:a2:58:81:c1:fe:b0:e4:b7:5b:67:49:
         cf:81:7f:f8:c7:0d:6e:73:41:90:77:dd:f1:64:55:f4:ad:d7:
         f9:34:4a:c5:30:a8:49:2a:60:b5:93:6f:ac:ed:d7:fa:79:cf:
         70:a7:04:cc:5a:dc:86:48:13:1d:22:3d:e5:a9:33:4d:c6:26:
         61:10:82:3e:de:bd:9f:32:12:b6:6f:61:02:7c:67:5f:8d:5e:
         b4:a6:cd:a8:d3:a4:4f:6b:41:cd:26:04:92:6f:16:8f:51:92:
         86:3d:1f:57:30:dc:4b:1e:5a:3b:13:f2:b2:8a:f5:d2:31:0a:
         35:ad:4b:7a:64:9d:27:3e:c4:f7:f0:c5:05:fb:6b:f1:01:71:
         6a:22:33:44:2e:84:27:5b:81:dc:ee:0f:22:04:a9:3f:ab:a4:
         62:fd:ea:4a:d2:3b:12:31:2d:ac:fd:75:ff:f7:65:92:43:cc:
         86:82:4a:0b:dd:77:43:43:c2:47:e0:bb:a1:b3:06:d8:19:a7:
         81:cd:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org