Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33342d3334203d3e20323633393037.roa
File:                     323830343a323738383a3a2f33342d3334203d3e20323633393037.roa (raw, json)
Hash identifier:          sqXxHVIw3ald9xWPiEPLY15eEB+q/zpC8pDCA/V/2KA=
Subject key identifier:   50:F4:C4:8C:CA:E0:00:A2:89:C5:40:86:65:C3:C1:EF:5C:83:76:47
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       2934A2A52772B766F2E3559FD8D63ABAD0743A1C
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33342d3334203d3e20323633393037.roa
Signing time:             Mon 30 Sep 2024 13:27:21 +0000
ROA not before:           Mon 30 Sep 2024 13:22:21 +0000
ROA not after:            Mon 29 Sep 2025 13:27:21 +0000
asID:                     263907
IP address blocks:        2804:2788::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:34:a2:a5:27:72:b7:66:f2:e3:55:9f:d8:d6:3a:ba:d0:74:3a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep 30 13:22:21 2024 GMT
            Not After : Sep 29 13:27:21 2025 GMT
        Subject: CN=50F4C48CCAE000A289C5408665C3C1EF5C837647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2b:fd:13:24:ae:50:49:a1:0c:69:52:dd:d0:
                    be:83:92:79:6c:b1:2b:64:d4:c2:e1:8e:76:bc:9f:
                    11:84:5c:a8:11:69:63:e7:5b:db:7a:9b:a4:fe:65:
                    ff:7b:8a:c1:22:2f:bf:cc:ee:40:44:71:2e:d0:6c:
                    34:66:60:a0:69:06:42:55:6a:eb:7d:7e:45:1b:ca:
                    04:94:f9:c5:7a:7a:87:9f:ec:41:7c:08:63:b7:21:
                    2d:87:69:7f:05:cc:e0:e0:6a:51:6c:c1:32:f0:ff:
                    1f:33:74:4b:ac:b1:2e:80:3c:6a:e9:c1:0c:88:ee:
                    2e:e9:36:29:45:5d:38:3d:53:e9:5b:75:5a:f9:4d:
                    34:9a:83:00:e7:0a:f3:c8:1b:9e:9c:23:e3:e0:68:
                    8a:3c:33:c5:9a:37:46:76:24:c6:7a:78:cb:5f:33:
                    e5:07:c2:b5:46:0b:d1:aa:e3:64:95:f7:83:d1:0b:
                    d2:25:bb:87:4b:9e:1f:13:a9:07:ac:d5:cd:2a:6d:
                    5b:60:a8:f5:36:ed:15:dd:ee:5a:4d:d7:9e:f1:24:
                    3b:d4:4f:c8:ac:6c:4e:b5:ef:25:bf:79:dd:ee:40:
                    c5:de:c3:85:21:e7:9a:02:9a:d5:f2:5b:1a:f6:97:
                    e4:3f:24:cc:51:7b:4a:19:b9:1a:54:a7:1b:59:7a:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F4:C4:8C:CA:E0:00:A2:89:C5:40:86:65:C3:C1:EF:5C:83:76:47
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33342d3334203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:f0:18:14:c3:91:a4:be:6d:c1:58:58:e3:20:b8:e0:cc:35:
         48:6c:39:5f:c4:c7:40:63:06:2b:4f:12:20:48:02:82:66:07:
         e6:0d:8a:2a:31:bb:b7:7d:11:d7:27:49:d2:1f:f8:e2:79:d3:
         4e:7f:f0:72:e2:22:4f:6b:b3:39:3a:4f:e7:14:28:7e:7a:2a:
         87:e8:26:1d:cd:8d:31:68:3d:f2:4d:a9:87:91:57:63:5d:2f:
         13:00:f1:d2:5b:23:a5:93:32:a8:32:3d:b2:46:d6:e2:a6:cf:
         a2:da:0b:f9:99:27:0a:55:46:15:7c:9c:f1:54:87:ef:5d:6b:
         75:2c:d2:f4:7d:80:b7:62:60:c0:e3:fb:be:06:77:d9:3b:af:
         40:b0:ed:49:c0:13:45:13:dd:81:e2:d6:03:bc:02:af:a4:f5:
         ed:2a:94:9b:da:d4:15:a5:a2:bc:39:59:29:7d:cd:f2:3c:5c:
         10:79:35:16:29:73:82:c6:bc:b1:9c:c9:f7:ff:46:8a:e3:7c:
         45:de:81:09:e2:6a:ac:49:ab:ac:6a:26:ab:0a:68:97:84:25:
         e5:f7:44:32:c9:39:b1:fe:4d:5e:49:2d:d7:74:c4:17:bc:82:
         97:49:81:77:91:05:c4:b5:e3:8c:26:d1:ce:47:31:eb:81:78:
         d2:fc:d4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:11 2024 by rpki-client on console-fra.rpki-client.org