Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa
File:                     323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (raw, json)
Hash identifier:          4QWY1aLvJu/ws0Bnig8vnO0ZgzcTXylARyQ9UmciUFE=
Subject key identifier:   B9:35:E3:EE:E5:87:6E:86:8D:E1:F3:6E:FB:9C:89:C4:4A:21:E3:78
Certificate issuer:       /CN=57D70E752697E99F4A1DD1DBCD525C92A57E6D29
Certificate serial:       670FA46A7188F771C9A2EAECF2B602468754995D
Authority key identifier: 57:D7:0E:75:26:97:E9:9F:4A:1D:D1:DB:CD:52:5C:92:A5:7E:6D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa
Signing time:             Thu 04 Apr 2024 04:43:46 +0000
ROA not before:           Thu 04 Apr 2024 04:38:46 +0000
ROA not after:            Thu 03 Apr 2025 04:43:46 +0000
asID:                     266534
IP address blocks:        2804:3d7c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.crl
                          rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0f:a4:6a:71:88:f7:71:c9:a2:ea:ec:f2:b6:02:46:87:54:99:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D70E752697E99F4A1DD1DBCD525C92A57E6D29
        Validity
            Not Before: Apr  4 04:38:46 2024 GMT
            Not After : Apr  3 04:43:46 2025 GMT
        Subject: CN=B935E3EEE5876E868DE1F36EFB9C89C44A21E378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:4d:88:d0:a2:d5:8d:20:71:b9:40:8c:69:
                    83:04:01:2f:62:92:95:1b:54:d8:61:24:c8:f7:45:
                    e4:ac:89:be:e4:36:37:a8:fe:a1:ef:3f:23:8a:d0:
                    c2:4c:44:8e:29:89:82:0c:2a:7f:bf:39:7d:e1:27:
                    84:ba:66:c4:26:03:6b:dc:a9:71:55:c3:e4:75:12:
                    2c:ae:bd:57:84:47:1d:fe:fb:9a:f4:22:0d:7f:d4:
                    fe:67:02:15:66:ce:d7:0f:6a:df:0f:9d:66:cb:6d:
                    9c:97:a9:b4:d5:05:09:79:73:5c:11:ba:b5:03:42:
                    15:f8:21:a6:4e:4f:4e:25:d2:ab:f4:61:b5:57:6d:
                    51:88:d3:c0:3e:83:d4:13:69:26:c7:c0:46:53:b2:
                    a7:c6:b8:34:a3:4c:77:5c:c4:8a:56:ff:b6:9e:c1:
                    44:96:33:ee:bd:73:87:3e:fa:e3:71:a2:2c:f0:bd:
                    59:b9:b2:c3:3a:7b:d6:77:1d:a3:a3:92:a2:93:9f:
                    8b:15:53:f5:72:1a:1b:29:85:d1:c0:26:61:4c:9e:
                    20:5b:63:56:8a:60:14:1a:6f:8c:1e:7a:c3:cd:d8:
                    80:b0:36:55:a2:9d:05:75:79:a7:f7:d4:4e:cd:b1:
                    d3:27:61:f7:05:cf:00:c7:7d:c0:65:2e:df:b3:f4:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:E3:EE:E5:87:6E:86:8D:E1:F3:6E:FB:9C:89:C4:4A:21:E3:78
            X509v3 Authority Key Identifier:
                keyid:57:D7:0E:75:26:97:E9:9F:4A:1D:D1:DB:CD:52:5C:92:A5:7E:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:95:26:9f:5d:c2:8c:52:53:10:c9:83:ef:1a:06:07:78:
         9a:3a:e4:9d:02:52:12:7f:72:06:aa:c0:aa:4e:92:9c:76:b4:
         66:10:99:dd:59:2e:d1:42:57:f6:5b:60:85:11:55:4a:24:b7:
         be:91:94:ed:0f:b2:a1:a8:3f:ea:46:7c:ef:77:dd:12:f8:09:
         2e:a3:cb:36:48:50:e0:c3:b1:84:fc:5c:fe:54:10:8f:be:91:
         e1:18:dc:c9:ee:5f:86:f3:dc:c6:ac:b9:16:aa:41:52:b5:e1:
         b5:5f:5d:b1:f0:9b:ce:be:56:a4:61:2d:01:ff:c2:83:fd:0c:
         47:e8:49:9b:c0:95:78:c3:18:b5:83:df:f3:8e:7c:c9:5f:2e:
         2f:2d:59:fb:e3:ac:62:26:e4:23:08:a1:6b:88:48:61:12:39:
         b4:cd:c4:7f:92:44:a7:31:1c:ba:e7:8f:3d:6f:01:bc:55:17:
         12:82:6a:6b:36:b5:9d:b8:ee:28:04:45:bc:c9:a2:7a:bf:80:
         2c:e5:e6:d6:65:71:4a:ec:ad:63:f1:29:3b:2a:f1:c1:51:73:
         2d:de:b3:4a:97:ee:c6:d1:25:a1:54:73:1d:1f:ff:40:72:72:
         11:a8:32:4f:ba:d6:e4:9a:4b:c8:23:41:10:5a:ad:aa:f6:51:
         ce:6c:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org