Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa
File:                     323830343a313164303a3a2f33322d313238203d3e20323633343431.roa (raw, json)
Hash identifier:          tzMQjxsRovsLbT4XSovbPUKGmrzFCnH3Uxz2SyO7U58=
Subject key identifier:   51:3E:6D:A0:73:76:92:F3:5B:4B:BC:20:AA:4C:3B:C4:94:F6:6E:5D
Certificate issuer:       /CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
Certificate serial:       65F1066A0D267C7AAACA6FA1511310284CB9036E
Authority key identifier: C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa
Signing time:             Fri 05 Apr 2024 03:20:40 +0000
ROA not before:           Fri 05 Apr 2024 03:15:40 +0000
ROA not after:            Fri 04 Apr 2025 03:20:40 +0000
asID:                     263441
IP address blocks:        2804:11d0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f1:06:6a:0d:26:7c:7a:aa:ca:6f:a1:51:13:10:28:4c:b9:03:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
        Validity
            Not Before: Apr  5 03:15:40 2024 GMT
            Not After : Apr  4 03:20:40 2025 GMT
        Subject: CN=513E6DA0737692F35B4BBC20AA4C3BC494F66E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:f7:59:af:9a:4e:1a:05:7d:11:b7:d0:6b:
                    70:98:41:12:4f:03:0c:5a:4e:64:db:c5:b2:40:d5:
                    77:4f:cf:c9:c0:f9:b0:ea:44:24:5d:5b:b4:22:b7:
                    86:31:12:34:5b:14:38:51:e3:87:1a:ae:27:0a:dd:
                    57:82:87:32:74:80:f8:28:80:0a:1d:bd:ff:fd:54:
                    54:f1:64:30:12:8c:ee:be:71:0f:19:26:4e:e5:29:
                    f2:a6:0b:7a:a5:dc:88:05:c9:92:f1:27:3c:31:3c:
                    8d:59:b1:ce:e5:d4:ac:66:c5:5b:44:19:35:ad:b5:
                    1f:6c:2b:82:f6:d6:20:ef:4d:a4:a1:21:76:24:81:
                    17:db:95:71:05:40:03:9b:9e:93:12:70:63:53:a9:
                    8f:08:14:e8:a4:e3:e3:5a:dd:d0:70:49:e8:3a:25:
                    07:65:76:4e:c9:bc:0c:18:c0:d0:58:2e:d8:0f:25:
                    93:37:1f:fc:db:8b:4e:4c:90:44:e0:f0:bf:30:7b:
                    12:3a:64:c2:10:d5:f4:cf:75:97:ae:16:ff:b1:1f:
                    52:82:a3:92:14:e9:0b:e2:a9:24:42:06:24:5d:cb:
                    43:15:de:3d:9a:6e:26:e1:fd:d2:7b:c7:19:d2:ba:
                    5e:62:a6:c0:af:3b:a2:50:5c:71:72:67:a6:c3:6f:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:6D:A0:73:76:92:F3:5B:4B:BC:20:AA:4C:3B:C4:94:F6:6E:5D
            X509v3 Authority Key Identifier:
                keyid:C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:07:3f:1e:ff:ea:23:02:42:77:2f:1e:a8:bc:a8:76:cb:
         f2:57:27:36:4a:36:4d:a8:1d:58:f9:12:a4:34:bd:ed:f0:f4:
         30:90:52:45:26:8b:fe:9d:eb:4a:8e:24:6b:0f:95:41:25:82:
         c3:05:ab:04:40:50:a4:66:e3:b4:3f:6d:06:cf:dd:0e:03:c2:
         3d:ef:10:83:33:12:b6:d6:5d:40:b6:56:a9:4e:a6:27:7a:42:
         23:c0:2e:b4:83:67:cc:62:9d:51:b8:8e:38:1f:d1:7f:19:ed:
         b6:f4:c9:77:84:3a:f2:79:e9:00:63:23:b7:bf:48:23:70:c1:
         f6:cb:71:33:0d:7f:55:f2:89:25:5e:23:c6:4f:14:4d:48:d6:
         ed:ff:9e:96:81:f0:8c:8c:75:2a:e6:05:3c:0d:85:08:cc:a0:
         71:7c:5a:4b:64:bd:28:4f:ac:09:ea:c7:02:8d:94:6e:54:49:
         1e:95:26:1f:60:59:7e:2d:76:41:46:e9:53:2b:f8:c0:be:25:
         2f:a1:e9:2d:c2:1b:d8:a6:e5:e6:01:bb:3e:f5:9c:35:c0:a3:
         8a:23:84:12:78:95:70:7c:0d:4a:54:01:36:ce:2f:c9:ed:ae:
         c3:e6:4b:54:a4:63:be:2c:95:ab:76:c8:8e:4f:c6:5f:a1:bd:
         89:70:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:28 2024 by rpki-client on console-fra.rpki-client.org