Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a3a2f33322d3332203d3e20323636343833.roa
File:                     323830343a333838343a3a2f33322d3332203d3e20323636343833.roa (raw, json)
Hash identifier:          EeaJogpbvufSrdH817tEhmvPis2qeiKAYUmChQAzQ9g=
Subject key identifier:   99:79:32:34:23:11:D1:59:58:78:E2:48:F1:67:5E:8B:8D:08:05:75
Certificate issuer:       /CN=045C70D44AB71632AB16AA37E88D48AC51F08992
Certificate serial:       4800533083E89518F034C03FFA519874E401BCF8
Authority key identifier: 04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a3a2f33322d3332203d3e20323636343833.roa
Signing time:             Mon 11 Nov 2024 12:22:40 +0000
ROA not before:           Mon 11 Nov 2024 12:17:40 +0000
ROA not after:            Mon 10 Nov 2025 12:22:40 +0000
asID:                     266483
IP address blocks:        2804:3884::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl
                          rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:00:53:30:83:e8:95:18:f0:34:c0:3f:fa:51:98:74:e4:01:bc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045C70D44AB71632AB16AA37E88D48AC51F08992
        Validity
            Not Before: Nov 11 12:17:40 2024 GMT
            Not After : Nov 10 12:22:40 2025 GMT
        Subject: CN=997932342311D1595878E248F1675E8B8D080575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:29:10:59:dc:72:f5:ee:85:59:6b:8e:2e:46:
                    3d:5a:f6:73:e2:e7:18:b9:1e:10:37:52:d3:db:43:
                    89:09:cc:9a:f3:90:f4:c1:ae:95:df:0d:6c:a3:ce:
                    65:28:7b:ef:91:2a:a2:61:c3:61:7a:d6:c4:a3:8b:
                    70:90:0a:d0:1c:3e:15:dc:16:34:7e:5d:f3:51:54:
                    78:43:f5:e7:38:b3:fa:73:c5:9a:cc:5a:e6:3f:c3:
                    1f:be:65:e9:41:47:f3:bd:7e:46:fa:d0:24:47:4f:
                    2c:25:07:e4:ca:60:e9:ea:48:84:b6:67:8e:a8:cc:
                    ca:e5:02:4d:2a:66:bc:2e:a6:d6:91:ba:f7:2a:ea:
                    9f:ab:17:76:f5:bc:4a:ec:39:a0:86:8f:e0:0b:b0:
                    4c:b3:39:dc:75:c9:0e:56:d2:3e:91:34:b5:07:b6:
                    dc:a0:81:7f:99:bd:43:87:cb:75:41:91:3c:91:e4:
                    d1:15:e4:a3:06:df:98:8a:fe:d2:6c:7e:f9:91:f2:
                    92:e2:38:80:75:5c:74:33:b4:dc:ab:4f:25:e2:ce:
                    c8:2a:7f:49:bf:54:ea:d0:3f:b8:7a:71:77:c7:b7:
                    df:8c:55:1e:8d:b8:ab:61:32:3f:8e:e1:59:f0:99:
                    d0:e4:fb:e1:84:88:3c:f0:6c:0f:21:8e:8b:a8:9f:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:32:34:23:11:D1:59:58:78:E2:48:F1:67:5E:8B:8D:08:05:75
            X509v3 Authority Key Identifier:
                keyid:04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/323830343a333838343a3a2f33322d3332203d3e20323636343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3884::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:60:0a:bb:e1:1f:69:2e:f5:39:8a:01:da:52:be:82:4e:
         6f:3a:88:a5:06:ee:ca:b9:40:07:f1:1d:57:a6:28:ec:8e:0c:
         d5:70:07:e7:46:0e:73:3f:ef:48:8d:25:37:42:6a:e1:74:c0:
         ee:4f:50:8b:91:cc:8f:aa:a4:aa:6f:51:6b:f6:63:55:83:e1:
         76:1b:59:10:23:19:cc:97:d7:72:10:2c:b8:e6:51:84:40:51:
         b5:fd:8d:9b:a4:76:a0:32:77:fd:d1:78:ba:8a:47:e0:ef:6c:
         08:ff:51:92:d9:a1:60:8e:17:97:53:b6:69:44:81:74:37:35:
         0d:55:66:c8:70:5e:04:85:1e:08:8b:9f:24:3f:5d:58:21:14:
         f5:fe:7c:ca:88:dd:a0:76:68:b4:86:b2:c8:b7:10:51:0f:ef:
         c8:e6:8f:24:c6:f5:f1:1b:20:7e:b4:f8:22:4d:a9:24:b2:81:
         27:cd:6b:8f:de:4c:e2:d5:2f:13:bc:b7:7b:08:8b:f0:ac:f0:
         8d:25:d5:b8:75:24:a9:9d:fd:51:4e:88:7b:14:05:d4:7c:ea:
         fd:37:2b:9d:24:f0:40:ee:cd:e9:96:43:18:ca:9f:36:37:02:
         13:4d:7c:e8:4f:4d:7c:45:ad:3d:dc:02:90:da:9b:df:96:71:
         f5:03:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org