Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a383730303a3a2f34302d3430203d3e20323636343833.roa
File:                     323830343a333838343a383730303a3a2f34302d3430203d3e20323636343833.roa (raw, json)
Hash identifier:          RxZfGqoPKHYQ4mPiBOgy5xuAuPvpjkaA5bYs933N+Dc=
Subject key identifier:   EE:10:0C:DE:DA:39:9B:92:B8:D9:A0:4B:14:DD:37:5D:E6:76:3F:D6
Certificate issuer:       /CN=045C70D44AB71632AB16AA37E88D48AC51F08992
Certificate serial:       725B2A122285B2127C1D2073E87BDA1D71DC5A54
Authority key identifier: 04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a383730303a3a2f34302d3430203d3e20323636343833.roa
Signing time:             Mon 11 Nov 2024 12:22:40 +0000
ROA not before:           Mon 11 Nov 2024 12:17:40 +0000
ROA not after:            Mon 10 Nov 2025 12:22:40 +0000
asID:                     266483
IP address blocks:        2804:3884:8700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl
                          rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5b:2a:12:22:85:b2:12:7c:1d:20:73:e8:7b:da:1d:71:dc:5a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045C70D44AB71632AB16AA37E88D48AC51F08992
        Validity
            Not Before: Nov 11 12:17:40 2024 GMT
            Not After : Nov 10 12:22:40 2025 GMT
        Subject: CN=EE100CDEDA399B92B8D9A04B14DD375DE6763FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:2a:1b:89:5b:52:b6:31:9a:52:55:5c:8f:
                    68:11:1d:1c:4f:cb:4d:3a:39:95:83:f0:44:5c:41:
                    fb:dd:22:cc:c7:4d:73:89:b3:1a:45:db:d1:a5:c3:
                    ad:c0:07:17:8f:0a:a8:72:32:ab:c3:1f:c5:6b:15:
                    a9:5c:43:e9:5f:fd:2a:bc:ef:46:85:00:46:76:a8:
                    4c:bb:64:b9:51:6e:54:9f:6b:f3:5c:e5:b4:31:36:
                    8e:01:09:4b:33:91:15:49:18:1f:72:50:03:ca:6e:
                    b0:d8:13:ac:03:ea:5b:45:6a:9b:ef:46:1c:9b:57:
                    73:cf:62:a9:24:a4:f4:b0:3b:80:dc:f2:6a:f8:7f:
                    0e:55:da:85:1d:51:0e:a5:94:d8:9a:2f:a4:40:6b:
                    40:12:47:90:92:64:6c:c0:ef:21:23:7b:54:41:94:
                    43:1c:df:fb:5f:ad:de:2e:78:02:cb:48:8b:86:6f:
                    8a:93:aa:f7:fe:7c:64:3d:16:0a:c7:28:44:34:8b:
                    2c:71:f0:19:2a:25:2a:19:b9:88:41:ef:da:d6:3c:
                    56:19:2e:bb:31:ac:cb:5a:5e:1c:70:61:3f:99:91:
                    8b:12:41:1e:51:1f:46:60:e3:dc:0b:bf:0f:29:e8:
                    0b:34:6f:9a:df:5c:5c:48:e8:c8:f5:df:79:49:e3:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:0C:DE:DA:39:9B:92:B8:D9:A0:4B:14:DD:37:5D:E6:76:3F:D6
            X509v3 Authority Key Identifier:
                keyid:04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a383730303a3a2f34302d3430203d3e20323636343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3884:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:04:66:90:2e:f0:3d:10:3f:9f:ed:c9:1e:94:13:5d:27:
         a8:28:df:cb:30:96:88:e7:3a:35:93:18:b6:f6:d5:84:9e:0b:
         fa:64:de:b9:46:75:65:93:95:e2:3b:53:27:14:dc:da:5e:80:
         48:04:4a:24:a5:ea:7e:00:44:7b:ba:eb:59:e3:09:44:7a:50:
         7c:56:a0:57:98:10:8f:e9:62:3f:2c:36:f3:21:6b:20:cb:eb:
         81:15:c5:7b:55:1c:94:eb:4d:1e:71:19:59:a0:57:d2:3a:cc:
         a3:f6:8a:de:02:f0:d8:69:1e:46:c3:b8:83:28:09:34:5a:2b:
         22:b5:14:63:dc:e7:87:c4:c2:d0:5e:be:a5:db:f2:9a:f9:3f:
         c5:5c:b6:0d:6c:03:61:0e:79:35:01:df:94:99:ad:cf:67:8b:
         90:a6:e6:b4:8e:a5:d8:32:a6:52:df:8b:8f:64:95:7c:8c:41:
         34:86:9e:1f:d2:fe:fa:41:44:ea:2a:da:b3:e8:16:99:3e:54:
         4d:ae:b5:a3:4e:c3:30:bf:fd:e0:92:6b:17:a4:1a:f1:47:cd:
         18:e8:fd:e1:38:d0:48:d2:a8:73:47:db:bf:cd:44:aa:4f:b5:
         9f:0c:33:72:1b:9a:14:35:6f:a1:b7:41:cd:e0:79:f1:46:fb:
         a8:b1:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org