Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/323830343a326534383a3a2f33322d3438203d3e20323635333336.roa
File:                     323830343a326534383a3a2f33322d3438203d3e20323635333336.roa (raw, json)
Hash identifier:          siTGKnt/1KWDdAqaI6Owyl7gmC1RQCyl0gmfaVIyMpI=
Subject key identifier:   71:5C:B5:9F:D7:AA:18:41:75:64:C9:CE:06:02:4B:44:AA:8D:02:9E
Certificate issuer:       /CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
Certificate serial:       6461AE862E491BF9F8108DC635B70F53498B4CF8
Authority key identifier: BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/323830343a326534383a3a2f33322d3438203d3e20323635333336.roa
Signing time:             Thu 04 Apr 2024 11:21:54 +0000
ROA not before:           Thu 04 Apr 2024 11:16:54 +0000
ROA not after:            Thu 03 Apr 2025 11:21:54 +0000
asID:                     265336
IP address blocks:        2804:2e48::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl
                          rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:61:ae:86:2e:49:1b:f9:f8:10:8d:c6:35:b7:0f:53:49:8b:4c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
        Validity
            Not Before: Apr  4 11:16:54 2024 GMT
            Not After : Apr  3 11:21:54 2025 GMT
        Subject: CN=715CB59FD7AA18417564C9CE06024B44AA8D029E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:bd:70:1b:fe:2f:89:8c:11:7d:b2:9b:b7:
                    9e:c1:07:b1:cd:56:d4:5e:21:21:10:cb:3b:b3:0b:
                    31:22:5d:8e:9a:c7:31:22:d4:b4:d9:9a:3a:ba:2c:
                    33:93:9f:4f:0b:f9:28:a7:c8:21:81:e9:24:0e:d6:
                    15:61:d5:05:a3:7c:b3:5e:f2:c8:00:5a:7e:28:11:
                    9b:8d:ac:26:41:76:19:5e:45:b4:cc:72:ab:32:90:
                    32:d6:b5:6a:e0:8d:64:1c:89:43:e7:4b:b4:88:fc:
                    9a:a5:c9:3d:2a:fc:72:c5:0f:43:d5:dc:5f:bd:3f:
                    07:c3:7c:9b:69:e1:be:ab:37:d4:c1:44:5e:c9:0c:
                    d9:00:fa:de:ea:0f:d1:6e:c0:b0:84:3c:dc:d4:4b:
                    c3:92:29:7d:1d:da:97:6e:56:0e:f3:fe:2c:33:0b:
                    e5:92:72:30:49:9b:cc:82:bb:a3:55:6e:e1:86:38:
                    31:12:84:39:a2:e2:b8:fc:3a:96:8b:aa:d2:1d:75:
                    3e:3a:df:13:46:5b:bc:84:ed:50:b9:fa:2b:86:72:
                    d6:5b:e1:59:f5:bb:56:23:54:8a:aa:51:3e:93:4e:
                    17:39:17:70:9c:ec:04:c9:27:85:b4:76:90:09:46:
                    6b:f3:6d:cc:9f:dc:b0:c6:6b:56:c2:76:0d:22:25:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5C:B5:9F:D7:AA:18:41:75:64:C9:CE:06:02:4B:44:AA:8D:02:9E
            X509v3 Authority Key Identifier:
                keyid:BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/323830343a326534383a3a2f33322d3438203d3e20323635333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:3a:0a:24:0d:d5:b6:b8:3f:fc:9a:23:af:17:b8:a7:98:
         73:d5:2e:fa:30:e0:73:0a:b1:e1:cc:fd:7d:8f:88:93:06:e4:
         cf:a2:d5:3b:f8:d1:f7:98:df:4f:be:1d:11:90:c7:d1:aa:ff:
         f0:77:ed:ee:39:d7:5e:96:af:74:2d:a4:32:27:c7:ef:05:30:
         3e:15:91:b9:62:9c:4c:73:78:75:5d:81:1a:7b:ce:4b:f1:bb:
         e9:8f:dc:fe:30:81:3d:49:c6:a6:3c:72:12:01:45:80:e8:cf:
         eb:bf:9b:0d:46:e5:17:0d:62:68:b2:5a:49:20:90:4c:ae:d0:
         d4:e9:81:8f:da:d0:bc:e2:ea:f4:a7:03:8e:f7:9c:15:47:1b:
         a3:6e:03:e4:54:d9:13:54:33:b0:c9:48:00:a3:34:59:50:db:
         26:e1:cd:b2:4d:78:be:09:15:4e:82:1c:b9:3f:16:b6:e7:03:
         06:6e:38:58:97:76:30:bb:5a:90:8f:d0:76:f9:2c:de:89:21:
         79:81:e1:3e:0e:89:a0:d3:18:4d:5e:ea:74:91:dc:67:0d:f8:
         35:b2:94:ee:85:0f:d0:75:23:89:88:44:06:fe:cc:26:db:e8:
         6b:0c:4e:54:ae:e1:56:5d:f5:0b:2a:11:24:a1:1b:06:63:e1:
         4f:8b:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:32 2024 by rpki-client on console-fra.rpki-client.org