Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373330303a3a2f34302d3430203d3e20323638343731.roa
File:                     323830343a353162343a373330303a3a2f34302d3430203d3e20323638343731.roa (raw, json)
Hash identifier:          i9/8ArZ3sVIRi5iIeHbtHCQnbiwS9wN4YLanaxXV5d4=
Subject key identifier:   F6:25:31:51:DC:0D:AB:AD:63:3E:A6:98:FD:52:1F:4E:AC:9F:51:FD
Certificate issuer:       /CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
Certificate serial:       14F1B0E881EFAE13E6C90E75263BC922A7663700
Authority key identifier: 04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373330303a3a2f34302d3430203d3e20323638343731.roa
Signing time:             Wed 20 Nov 2024 19:16:47 +0000
ROA not before:           Wed 20 Nov 2024 19:11:47 +0000
ROA not after:            Wed 19 Nov 2025 19:16:47 +0000
asID:                     268471
IP address blocks:        2804:51b4:7300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f1:b0:e8:81:ef:ae:13:e6:c9:0e:75:26:3b:c9:22:a7:66:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
        Validity
            Not Before: Nov 20 19:11:47 2024 GMT
            Not After : Nov 19 19:16:47 2025 GMT
        Subject: CN=F6253151DC0DABAD633EA698FD521F4EAC9F51FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:e7:b3:80:6a:2b:1a:af:5c:02:67:9d:27:
                    79:a9:e3:fa:80:d1:2e:11:a5:a5:ae:ea:25:34:da:
                    ab:0e:6e:69:58:fa:6b:ce:77:21:3d:78:c8:9a:03:
                    b6:c4:9e:e4:9b:8e:12:fa:f8:55:e8:cf:8b:37:89:
                    bf:79:f3:2e:b3:66:17:8f:a2:72:7a:42:40:d6:3e:
                    7a:8d:ce:26:3b:01:f6:1e:b3:5f:ba:4d:ad:51:45:
                    c9:17:ac:c9:2b:f1:1e:21:58:37:35:bb:a3:0b:c8:
                    fa:8e:42:82:9f:6c:6d:13:05:e4:48:df:13:88:28:
                    7e:ed:6b:03:da:1d:3e:2e:87:14:41:49:e4:75:a0:
                    4d:dd:82:ef:61:8b:1e:7c:69:7c:b7:2d:fc:9c:e0:
                    c2:38:e8:cd:8c:4b:0e:a9:0a:6f:21:cc:4a:92:0c:
                    3b:26:b1:37:47:85:28:3b:3f:d6:37:04:89:d4:75:
                    b4:1b:96:f6:40:4d:43:0c:c1:b8:42:33:69:b9:42:
                    07:69:5f:ff:57:fa:9a:8a:fb:4d:f7:fe:a2:e9:62:
                    c4:36:04:de:cc:2f:04:73:7e:94:bb:5f:a5:5f:a7:
                    a8:76:c4:7d:68:e1:75:c3:04:20:cb:4b:cf:56:3b:
                    b9:96:6b:d5:2e:ee:45:fa:66:97:96:ae:af:02:3f:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:31:51:DC:0D:AB:AD:63:3E:A6:98:FD:52:1F:4E:AC:9F:51:FD
            X509v3 Authority Key Identifier:
                keyid:04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373330303a3a2f34302d3430203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:7300::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:17:d7:e0:e5:a3:07:f0:38:da:fb:02:4c:58:a6:6b:26:b4:
         7a:89:a6:e3:e5:9d:63:b3:90:38:04:9c:e6:09:68:a8:a5:92:
         8c:05:0a:a6:d1:27:d0:44:cb:bb:a3:92:09:2c:f6:17:31:ab:
         75:d7:98:5e:3e:08:0c:8f:a2:52:84:8d:bf:c5:ac:63:f8:c0:
         5c:66:6e:c4:2c:17:af:6e:30:d8:90:76:69:a2:90:c3:cc:67:
         30:e8:cd:ae:4a:e7:de:d9:43:da:ab:86:0f:55:4d:1e:6f:71:
         d0:69:da:47:5d:e4:e0:1a:f5:9a:61:09:02:48:f9:8a:41:4b:
         f1:02:72:2e:f6:9d:2a:64:8c:cc:08:4b:64:fd:1e:56:cf:f9:
         15:1a:2f:89:9e:9c:07:10:d8:2b:eb:7a:c0:6f:0b:a7:73:5a:
         87:9b:51:57:34:16:18:48:51:a5:7d:7c:c6:4b:72:50:50:f1:
         84:b9:f3:58:8f:be:19:82:06:15:ff:a9:1e:d6:3e:c8:f0:80:
         85:85:f2:ac:81:99:37:77:c4:4c:3a:0a:79:6c:b9:33:88:2c:
         46:ce:fc:c0:60:47:20:ce:ac:66:2e:ea:7f:90:36:91:60:d9:
         79:09:9c:d4:62:36:e5:1d:78:33:cd:1f:55:5c:d9:91:f7:d2:
         4e:72:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org