Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a383030303a3a2f33342d3334203d3e20323731353239.roa
File:                     323830343a376366343a383030303a3a2f33342d3334203d3e20323731353239.roa (raw, json)
Hash identifier:          PYEdWJlu6RCSfDT6PkThfqx2EnPHQl6Hy8YlcudIiD8=
Subject key identifier:   FE:50:59:82:FF:EA:D0:C5:02:3F:95:CE:50:01:27:5A:A5:12:8E:98
Certificate issuer:       /CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
Certificate serial:       03BBDBF54A8775D9D5EF3AFF18B3EDD4564ECC85
Authority key identifier: D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a383030303a3a2f33342d3334203d3e20323731353239.roa
Signing time:             Thu 15 Aug 2024 20:01:35 +0000
ROA not before:           Thu 15 Aug 2024 19:56:35 +0000
ROA not after:            Thu 14 Aug 2025 20:01:35 +0000
asID:                     271529
IP address blocks:        2804:7cf4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl
                          rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bb:db:f5:4a:87:75:d9:d5:ef:3a:ff:18:b3:ed:d4:56:4e:cc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
        Validity
            Not Before: Aug 15 19:56:35 2024 GMT
            Not After : Aug 14 20:01:35 2025 GMT
        Subject: CN=FE505982FFEAD0C5023F95CE5001275AA5128E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:48:5c:2e:75:02:af:21:c1:44:4d:a7:d4:
                    5b:02:56:ca:ba:01:8d:b5:c6:f1:ee:de:2b:42:0c:
                    c1:f8:9a:e5:aa:d4:9d:72:08:92:1e:7a:74:ac:11:
                    36:a1:c5:3a:5b:d9:ef:ba:e5:c0:68:65:5a:0f:a4:
                    9d:df:b5:9f:fc:22:97:da:15:89:76:8f:19:95:ea:
                    d2:06:23:bb:14:7e:99:63:9f:1d:7f:15:68:d6:7c:
                    83:b4:e0:b1:39:3c:2a:2b:ac:9c:5b:69:5b:34:b2:
                    b8:aa:a2:bf:f1:9f:54:28:34:72:74:cb:bc:de:f0:
                    50:2d:9a:bf:55:f3:e2:99:d5:68:13:b7:40:fe:30:
                    43:6e:6a:ea:c6:27:27:2e:21:27:91:be:62:85:ec:
                    8e:e2:8d:80:61:92:4e:db:46:a8:92:61:d0:25:ee:
                    14:4c:ec:df:ce:fb:fb:dc:f2:48:c7:40:dd:f3:2f:
                    f1:c6:06:e3:d6:65:09:42:58:53:44:10:cb:70:1a:
                    64:f5:e9:83:67:c5:ea:b0:22:b0:40:16:9e:9d:62:
                    90:e5:99:ab:bd:95:1b:9a:44:f6:69:a0:55:1e:f4:
                    90:49:77:a3:2d:4b:14:02:1b:1d:bf:e2:0f:c7:bc:
                    a5:ec:61:e8:6d:32:48:f3:cd:58:b4:3d:1f:0d:0a:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:50:59:82:FF:EA:D0:C5:02:3F:95:CE:50:01:27:5A:A5:12:8E:98
            X509v3 Authority Key Identifier:
                keyid:D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a383030303a3a2f33342d3334203d3e20323731353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cf4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:17:16:60:a8:f4:53:16:2e:a0:ea:3d:02:e0:6d:3a:e5:
         71:44:a0:f9:b0:d7:29:a8:7d:77:f8:92:25:aa:92:74:08:01:
         4f:5f:61:ba:35:6f:c2:c6:04:de:23:f0:97:1e:69:95:c7:3a:
         b6:6f:b8:74:8e:d3:4a:9f:e4:6d:65:c7:7a:20:25:40:4c:66:
         b3:cb:9a:36:b2:63:2f:5d:d3:54:4a:81:a2:eb:76:45:69:4e:
         b6:d6:93:1b:7a:20:32:f2:0c:74:b9:cd:7d:ce:0d:f7:20:4c:
         d6:4a:3f:c2:a3:c5:84:40:fa:71:45:f4:a9:21:ad:44:89:06:
         cd:c6:13:5e:2a:60:3d:58:bf:0b:fe:76:3c:28:d2:f6:a1:50:
         a0:a4:06:0e:24:3f:73:00:3d:ac:e9:84:b4:cc:d4:6a:70:7f:
         f5:f7:04:87:39:47:72:19:d3:5e:b2:7b:63:97:98:10:7f:97:
         6f:8d:e2:d3:6d:0a:c2:73:9c:44:b8:08:b0:22:91:69:00:7b:
         62:e3:82:2e:3c:36:79:01:70:3f:a5:39:19:86:45:fb:ce:7b:
         21:76:1e:05:6c:f5:59:08:b3:b5:17:43:a1:db:4b:9e:17:b1:
         8a:cd:b2:f4:2d:c1:b1:43:e8:f4:cb:c3:9a:13:26:0d:bb:57:
         fc:70:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org