Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/323830343a343532633a3a2f33322d313238203d3e20323632353239.roa
File:                     323830343a343532633a3a2f33322d313238203d3e20323632353239.roa (raw, json)
Hash identifier:          sEwGC+d/DxEq+Q6cBXbrT5+QokUg7MYUWsDZSCulSVA=
Subject key identifier:   D3:FF:6D:B5:55:6E:7A:30:9B:F8:B3:F1:8F:6B:7C:E6:E5:EC:A3:48
Certificate issuer:       /CN=46ABF77F47951897670C5BFDCAA35BE06D8F47F5
Certificate serial:       621CE95C7E6E73B9456AF3726F1A5DADC64811B2
Authority key identifier: 46:AB:F7:7F:47:95:18:97:67:0C:5B:FD:CA:A3:5B:E0:6D:8F:47:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/323830343a343532633a3a2f33322d313238203d3e20323632353239.roa
Signing time:             Fri 30 Aug 2024 20:58:51 +0000
ROA not before:           Fri 30 Aug 2024 20:53:51 +0000
ROA not after:            Fri 29 Aug 2025 20:58:51 +0000
asID:                     262529
IP address blocks:        2804:452c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.crl
                          rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1c:e9:5c:7e:6e:73:b9:45:6a:f3:72:6f:1a:5d:ad:c6:48:11:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ABF77F47951897670C5BFDCAA35BE06D8F47F5
        Validity
            Not Before: Aug 30 20:53:51 2024 GMT
            Not After : Aug 29 20:58:51 2025 GMT
        Subject: CN=D3FF6DB5556E7A309BF8B3F18F6B7CE6E5ECA348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:47:f7:b7:51:4f:22:19:71:b2:5f:6d:3e:
                    44:c3:eb:98:d9:59:4a:8e:57:74:f4:ea:37:1b:80:
                    cf:d7:1e:68:35:6c:65:69:9d:70:ff:9f:03:29:29:
                    54:06:ef:cd:30:8f:40:8c:39:8f:f9:4e:42:ac:fc:
                    63:7e:21:e2:77:b1:49:20:a3:8d:b7:0d:7b:5a:22:
                    4b:67:6c:b7:80:58:b0:16:43:a7:55:fc:8d:bc:35:
                    84:34:a2:12:23:d8:ff:38:36:f0:44:a0:f8:2e:50:
                    6d:c9:09:f7:84:bf:49:87:e4:91:6d:b1:16:44:bc:
                    38:f9:7b:e6:60:08:82:0b:13:92:17:a7:19:04:f3:
                    ae:23:d6:63:e9:4a:dd:db:f2:8e:b0:29:9c:d5:76:
                    3c:de:17:47:40:5e:97:ad:fe:15:e1:7a:a5:84:28:
                    89:6f:64:33:77:aa:23:ca:13:fc:f1:b8:81:2d:4d:
                    e3:bd:0f:6e:46:64:7c:a3:13:8a:44:ef:49:5d:42:
                    cb:7b:f1:f8:15:dd:0a:2c:e6:ea:5a:c9:fb:c5:4c:
                    e6:ee:d0:27:1e:6c:1d:1d:c6:57:48:2b:60:bc:df:
                    7e:03:59:73:02:98:0b:23:fe:cb:23:4f:b5:1c:6b:
                    fd:17:a9:5f:a9:8d:c9:45:30:fb:3d:4d:b2:a2:68:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FF:6D:B5:55:6E:7A:30:9B:F8:B3:F1:8F:6B:7C:E6:E5:EC:A3:48
            X509v3 Authority Key Identifier:
                keyid:46:AB:F7:7F:47:95:18:97:67:0C:5B:FD:CA:A3:5B:E0:6D:8F:47:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46ABF77F47951897670C5BFDCAA35BE06D8F47F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/323830343a343532633a3a2f33322d313238203d3e20323632353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:452c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:39:5d:9e:0c:f1:a0:3b:95:4b:72:f2:16:fc:16:3e:3d:f8:
         61:6b:d4:b1:2a:f3:55:92:61:53:15:19:77:31:90:c4:d4:59:
         01:9d:44:e6:20:d2:f5:8b:2b:28:20:a5:d5:01:2f:45:5c:3c:
         e0:08:3b:b0:37:33:a8:46:6b:db:23:ee:2c:e2:78:3a:f1:19:
         f6:9d:b7:ba:16:4d:ab:76:04:a9:c0:fe:b2:fc:53:e9:b4:a6:
         c6:67:6e:e3:e5:b3:67:7b:d4:be:13:b5:27:a9:d8:fc:9d:62:
         d7:65:9a:22:a7:23:70:9f:f0:7a:d0:a5:62:96:51:57:68:e7:
         ad:56:ce:c7:93:81:c1:b7:4c:dd:73:1a:f3:f1:d2:95:8a:fc:
         6c:00:3f:3f:eb:50:c9:df:e3:e6:8b:d5:0b:30:d6:a8:fb:f1:
         61:7b:49:46:17:15:82:83:2b:cd:3d:e0:38:d4:54:19:fe:4b:
         59:55:5c:26:88:4e:0c:b3:eb:32:da:81:46:23:e0:c5:d7:ff:
         ea:22:cb:40:88:d4:07:9e:8a:a6:a9:e0:c9:f7:29:b1:e4:8f:
         a9:64:ad:ab:84:3a:ec:ba:05:10:65:23:f2:7c:9e:c6:70:d6:
         55:4a:92:7c:d9:25:a5:a1:11:53:7c:8f:d9:29:e6:37:13:f7:
         0d:39:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:48 2024 by rpki-client on console-ams.rpki-client.org