Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa
File:                     323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa (raw, json)
Hash identifier:          mw2nUSnHYAG6nD3vtSFTYloVsWU4b81mxvQn5XscYR8=
Subject key identifier:   76:D7:6C:F8:30:D3:64:19:8E:70:CE:D3:22:EB:E4:25:08:94:DB:BA
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       4220107093EC517A84A2C2F5B3B9F5345B30F3D6
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa
Signing time:             Mon 30 Sep 2024 13:27:25 +0000
ROA not before:           Mon 30 Sep 2024 13:22:25 +0000
ROA not after:            Mon 29 Sep 2025 13:27:25 +0000
asID:                     263907
IP address blocks:        2804:2788:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:20:10:70:93:ec:51:7a:84:a2:c2:f5:b3:b9:f5:34:5b:30:f3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep 30 13:22:25 2024 GMT
            Not After : Sep 29 13:27:25 2025 GMT
        Subject: CN=76D76CF830D364198E70CED322EBE4250894DBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:1f:37:d6:f8:6b:eb:7c:0a:1c:3e:7a:27:
                    da:ed:e1:83:4b:39:cc:26:65:70:15:b0:1e:f0:a7:
                    e0:3c:83:8e:a7:1c:d0:c3:24:c1:17:e2:da:23:30:
                    0b:6c:0e:62:74:36:bf:00:57:5a:fe:1b:be:1e:49:
                    2b:d9:4c:6c:7a:a3:9e:b3:21:49:87:5d:6b:0c:c8:
                    18:1e:92:48:a4:94:45:33:27:2e:9c:84:ff:79:6b:
                    2b:a8:0f:09:e3:7d:43:39:3d:83:c1:2b:00:05:96:
                    ba:07:f5:f0:c0:63:1e:39:fb:e7:e9:ef:ba:c3:8d:
                    39:5c:2d:b9:5f:ea:2b:16:7f:a6:9e:4e:01:76:69:
                    f8:c5:26:de:3d:50:1e:5d:27:8c:1c:24:23:c4:5b:
                    f6:3d:c9:98:92:7d:12:f1:45:a6:a7:d6:cd:7b:ac:
                    f9:30:ae:bc:23:16:ad:75:8f:5b:d0:5a:70:c7:95:
                    57:a2:1a:68:a9:a2:3e:e8:f7:19:a4:9a:bd:fb:ca:
                    33:0d:15:98:50:ff:81:5e:a2:7e:dc:f7:18:da:5a:
                    52:f1:5b:7e:a7:95:d2:cb:70:a5:36:2d:b8:d0:fe:
                    3c:f1:0b:29:03:eb:e1:20:70:7f:28:ed:b4:05:24:
                    3c:89:7f:d2:b3:7e:2c:8e:18:3c:5a:05:a6:ad:f2:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:6C:F8:30:D3:64:19:8E:70:CE:D3:22:EB:E4:25:08:94:DB:BA
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:af:ba:02:3b:03:60:aa:70:94:e5:02:05:22:b5:dd:7c:71:
         1a:b8:50:42:0c:64:a7:a4:a7:fc:fe:d4:4e:da:85:2a:2f:4c:
         82:9a:1c:33:e4:73:3f:ae:b1:76:57:a8:a0:3f:86:e1:0f:c7:
         c4:1a:62:4c:75:7d:ac:c0:f0:58:7a:14:8a:41:b3:11:54:41:
         fe:24:36:73:45:8f:73:f1:82:fe:bf:e1:4e:1b:9b:f0:1a:55:
         3f:45:86:ca:1b:74:db:86:19:d1:4a:10:02:14:25:ae:38:ea:
         42:f3:33:b6:90:bd:09:2c:2a:9d:a0:8c:2d:c1:56:a7:34:bb:
         0d:b4:e2:90:8f:a3:6b:66:75:eb:62:b8:f4:11:24:65:40:34:
         09:e9:a1:56:4b:f5:57:f8:4e:5e:98:86:52:20:67:ab:27:e4:
         97:01:8d:a9:f3:58:a1:70:1f:dc:d8:9e:e9:46:c8:d7:1c:c4:
         4a:95:d8:ab:ad:97:e0:72:ef:46:70:db:c9:b5:42:63:8e:f4:
         5f:84:a8:09:60:dd:a4:6e:86:90:c8:64:a0:32:da:fe:00:4d:
         55:3f:4f:5b:38:87:cb:e3:cd:0a:21:a9:45:13:68:ef:2e:36:
         4b:70:5e:82:ca:3f:9c:4e:bc:8f:a0:7f:05:51:2f:a2:b8:ad:
         3d:e4:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:34 2024 by rpki-client on console-ams.rpki-client.org