Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373230303a3a2f34302d3430203d3e20323638343731.roa
File:                     323830343a353162343a373230303a3a2f34302d3430203d3e20323638343731.roa (raw, json)
Hash identifier:          dBUs1aqDDI5Mwks49rM7OFXhsm5+YuquQTvt055WAaQ=
Subject key identifier:   1B:C9:CF:86:AF:FD:39:8B:BB:28:7F:82:1D:3B:4E:F3:B7:3E:CB:F0
Certificate issuer:       /CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
Certificate serial:       727BBB6DB7E8748D5698D031061EBA1215204342
Authority key identifier: 04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373230303a3a2f34302d3430203d3e20323638343731.roa
Signing time:             Wed 20 Nov 2024 19:16:44 +0000
ROA not before:           Wed 20 Nov 2024 19:11:44 +0000
ROA not after:            Wed 19 Nov 2025 19:16:44 +0000
asID:                     268471
IP address blocks:        2804:51b4:7200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7b:bb:6d:b7:e8:74:8d:56:98:d0:31:06:1e:ba:12:15:20:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
        Validity
            Not Before: Nov 20 19:11:44 2024 GMT
            Not After : Nov 19 19:16:44 2025 GMT
        Subject: CN=1BC9CF86AFFD398BBB287F821D3B4EF3B73ECBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:ef:a4:f3:c9:9e:a0:6f:1e:4e:f8:21:d0:
                    18:0b:11:f0:ac:22:cd:32:60:a6:12:64:6a:f0:8f:
                    d9:dc:ca:df:2e:0d:47:8a:72:e8:19:f3:81:30:0e:
                    af:39:e3:0d:b1:45:ae:23:fb:49:70:13:5b:c4:95:
                    75:c7:bd:e4:df:b4:e2:f8:b6:05:5c:d2:34:57:83:
                    92:8e:fe:8c:6a:5a:dc:fd:30:c1:7f:a0:77:11:5d:
                    7b:73:fd:e0:cc:ba:a2:4d:2b:78:53:24:81:36:be:
                    fd:71:9c:b4:b7:77:05:cc:5b:0b:ff:30:f0:03:58:
                    aa:b6:48:c8:9f:6f:88:aa:43:d2:df:19:c7:46:b1:
                    f1:1b:cb:3b:cb:bf:9b:c7:40:c2:10:43:46:29:9a:
                    3d:02:8e:62:92:35:51:a5:00:8d:08:64:c7:e9:c4:
                    be:66:a3:9a:3e:85:bc:d3:02:32:c2:17:90:44:c8:
                    23:1e:61:54:80:78:c8:60:dc:ee:9b:97:97:79:82:
                    e0:b8:6d:37:f6:26:52:ad:31:c6:88:cb:c5:15:d9:
                    c2:24:2f:59:d6:d8:57:e3:bc:3f:ba:44:f1:c2:74:
                    99:37:04:39:3b:85:46:0b:15:88:a4:f7:44:32:74:
                    88:13:93:b4:96:8f:1e:b0:85:70:6c:b0:8b:06:84:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C9:CF:86:AF:FD:39:8B:BB:28:7F:82:1D:3B:4E:F3:B7:3E:CB:F0
            X509v3 Authority Key Identifier:
                keyid:04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373230303a3a2f34302d3430203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:7200::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:f7:1f:42:43:0e:f8:89:7b:34:20:76:51:c4:7a:cf:16:63:
         2e:b6:5f:4a:e0:f1:92:1b:1d:ea:ea:93:85:18:bc:ec:35:57:
         21:85:5b:6d:1c:67:4e:81:92:fb:57:66:05:04:59:8e:5a:6a:
         01:5d:0c:83:b4:30:a3:6d:51:8d:ba:c3:38:34:01:76:bb:1f:
         a0:87:dd:7b:47:bd:42:3c:69:db:b0:e8:ff:1f:fe:0c:bb:ce:
         68:31:84:5a:ea:88:ac:09:2b:93:07:57:e0:da:f7:d8:14:29:
         d9:00:ab:46:54:d6:74:89:b2:7b:50:8b:73:3b:0e:ed:f8:15:
         d7:b7:75:64:4c:18:f2:a7:5d:42:3d:85:0a:a9:1e:9c:0d:b4:
         61:40:c9:20:1f:5e:3f:27:63:e7:dd:7d:ae:19:25:fe:98:2a:
         8f:ce:43:e6:2e:82:b7:da:ca:20:d5:d1:37:8b:ea:7e:c0:4f:
         c3:54:97:2c:4e:9c:eb:cd:c9:41:e5:81:1a:b9:ce:b2:43:aa:
         57:05:f6:22:dc:9b:49:1d:19:1b:18:43:f8:5d:e8:27:e0:0e:
         65:1d:22:45:cd:bc:47:c7:09:90:4f:08:de:bd:53:1b:93:08:
         4c:dd:4a:a0:f6:04:8d:44:e0:87:09:ec:60:a4:82:bc:f2:b4:
         22:ee:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org