Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa
File:                     323830343a383763343a3a2f33322d3438203d3e20323732373330.roa (raw, json)
Hash identifier:          Rwxn+GG7YKkf76gxwiD15KTrtTA4D04aP+dH+IaQAgE=
Subject key identifier:   AD:96:3C:94:E3:96:6C:33:92:98:67:7F:07:49:95:0A:2F:91:CA:1F
Certificate issuer:       /CN=C0DD64892A0C121799367350C68DE3D2965E859B
Certificate serial:       03938DA9857228A043D6D63DCF661D15D73FA9F5
Authority key identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa
Signing time:             Fri 18 Oct 2024 14:36:28 +0000
ROA not before:           Fri 18 Oct 2024 14:31:28 +0000
ROA not after:            Fri 17 Oct 2025 14:36:28 +0000
asID:                     272730
IP address blocks:        2804:87c4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl
                          rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:93:8d:a9:85:72:28:a0:43:d6:d6:3d:cf:66:1d:15:d7:3f:a9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DD64892A0C121799367350C68DE3D2965E859B
        Validity
            Not Before: Oct 18 14:31:28 2024 GMT
            Not After : Oct 17 14:36:28 2025 GMT
        Subject: CN=AD963C94E3966C339298677F0749950A2F91CA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:02:36:46:2a:41:a0:e3:04:a4:d0:83:79:
                    ac:67:d7:d7:2d:00:03:a8:01:63:bd:43:c4:03:b2:
                    de:9b:d3:f5:d4:33:9b:ff:87:6d:7f:ee:ff:43:1a:
                    26:12:0b:a0:9b:81:ae:d6:fd:e0:ac:c0:04:79:dc:
                    16:65:d3:f8:ef:dc:0d:b8:c5:b9:36:6e:04:87:00:
                    6b:f1:0d:f9:3c:69:9c:3f:ef:1b:d9:33:fa:83:ca:
                    fa:75:10:5a:2b:dd:ef:df:ee:03:1f:28:2e:00:12:
                    c7:bb:8c:7d:34:e4:9a:5b:7e:8e:dd:90:a8:99:72:
                    14:6f:3a:84:73:8c:31:f9:98:91:83:90:a0:23:51:
                    fc:f2:73:e5:70:2a:38:b4:b6:ea:c9:cb:5d:07:c2:
                    26:23:19:cc:4c:b1:63:e9:1f:a9:ca:e3:77:29:cf:
                    b4:4b:bb:c8:a8:d7:61:9b:de:55:43:53:e0:79:a1:
                    64:97:c6:68:92:4d:a9:6c:24:e8:f6:a1:e7:68:a9:
                    56:63:97:50:64:7a:32:39:4f:7f:0e:db:dc:fa:ca:
                    8f:47:b5:77:49:7a:1a:2f:ba:22:e6:85:e9:b9:b2:
                    3c:70:93:5e:07:2f:24:51:2d:1a:d1:f9:b3:9c:5b:
                    5d:5f:64:2e:37:5d:77:4b:8e:71:22:a0:b4:ad:f4:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:96:3C:94:E3:96:6C:33:92:98:67:7F:07:49:95:0A:2F:91:CA:1F
            X509v3 Authority Key Identifier:
                keyid:C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:4e:12:23:f6:8d:ec:1f:e6:b2:c4:24:b1:e0:fb:fa:f5:
         a8:15:b5:99:13:8a:ac:31:27:ab:2c:2e:26:80:d0:f3:8d:9b:
         59:6e:fa:ef:7e:82:52:5f:68:a2:1c:65:2d:33:15:cf:69:c0:
         5b:f4:f4:51:79:e4:77:57:4c:b3:11:ff:fc:0e:2f:57:5f:74:
         42:c3:d5:14:23:f8:02:dd:21:a6:da:6d:8b:83:39:81:cc:e8:
         06:2b:c4:e9:b9:ba:ad:b4:a5:65:3f:42:be:31:13:85:69:06:
         7b:61:32:5c:60:0d:11:e7:79:4e:c6:ed:61:59:d8:1a:c7:c8:
         9f:e8:54:e9:90:97:00:8c:20:25:4a:08:c6:31:a4:e1:72:ab:
         69:e2:1a:03:94:e0:c0:2f:bb:3e:80:ee:5a:73:3c:81:0a:18:
         0f:aa:52:02:be:f9:d6:d4:6b:e9:40:58:0c:f2:3a:53:90:e2:
         6a:6a:62:78:90:3b:11:f2:a3:be:07:63:7d:aa:5e:bd:fc:10:
         f5:b2:d1:84:78:42:db:a1:c6:a3:3f:e5:dc:47:13:a7:ed:af:
         ff:90:38:b0:1d:ba:f1:0a:03:18:ef:34:ad:a6:03:74:d2:3e:
         0f:e0:57:fc:fc:7e:8a:de:69:ed:40:20:b4:68:6f:88:9b:4c:
         fc:c0:ef:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:49:07 2024 by rpki-client on console-ams.rpki-client.org