Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/323830343a346539633a3a2f33322d313238203d3e20323638323732.roa
File:                     323830343a346539633a3a2f33322d313238203d3e20323638323732.roa (raw, json)
Hash identifier:          anay98iDb/dDPESCFilYARNBGR8iPpFsKXJYp+vJINY=
Subject key identifier:   35:DE:F2:02:3D:D9:3A:9D:81:58:9E:51:A5:C8:66:E7:5E:40:91:00
Certificate issuer:       /CN=427D521F1FA6980F53ED5CF52B5FAFF3E4B55642
Certificate serial:       4D8FFED861735183C522CB70DD94E518DA9160BD
Authority key identifier: 42:7D:52:1F:1F:A6:98:0F:53:ED:5C:F5:2B:5F:AF:F3:E4:B5:56:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/323830343a346539633a3a2f33322d313238203d3e20323638323732.roa
Signing time:             Mon 05 Aug 2024 20:34:48 +0000
ROA not before:           Mon 05 Aug 2024 20:29:48 +0000
ROA not after:            Mon 04 Aug 2025 20:34:48 +0000
asID:                     268272
IP address blocks:        2804:4e9c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.crl
                          rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8f:fe:d8:61:73:51:83:c5:22:cb:70:dd:94:e5:18:da:91:60:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427D521F1FA6980F53ED5CF52B5FAFF3E4B55642
        Validity
            Not Before: Aug  5 20:29:48 2024 GMT
            Not After : Aug  4 20:34:48 2025 GMT
        Subject: CN=35DEF2023DD93A9D81589E51A5C866E75E409100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:b9:48:11:6f:85:e8:51:9d:e0:45:e4:fd:
                    52:ad:d2:a9:7c:f6:1e:4d:39:ea:17:aa:b1:31:4e:
                    dd:ce:fc:8e:ff:d1:46:7b:67:7f:94:31:13:14:f8:
                    79:9c:6b:da:c6:f5:37:af:be:10:58:d6:f5:a8:4d:
                    5b:97:02:ed:8d:6b:9b:7a:02:0e:bb:46:d4:d5:f7:
                    98:2a:34:96:e8:7f:95:b5:7b:61:09:93:6c:8a:a8:
                    62:5c:f5:42:fc:92:80:99:e5:8b:e9:0f:ed:2d:ff:
                    14:31:03:86:89:77:52:9e:c2:6a:22:6c:53:2f:de:
                    85:32:32:37:57:a8:fb:45:5c:62:f9:36:36:2f:cd:
                    a0:0f:be:7f:1b:f9:05:3d:73:10:db:0c:5c:ae:2e:
                    32:82:ff:c1:11:46:39:c0:15:54:ee:b8:c3:72:cc:
                    1a:2e:55:6e:8d:46:d1:00:12:56:56:6e:19:3f:a3:
                    9e:a6:be:3b:8a:2a:35:c6:c3:74:7d:29:d0:48:19:
                    05:2a:fc:01:76:2f:fa:b4:5e:15:79:4b:84:e9:0f:
                    c5:e4:06:c5:59:f0:51:63:fe:98:a0:e7:80:55:c5:
                    82:12:76:2f:61:58:e3:7f:3e:b5:f9:f6:4c:ca:05:
                    27:ad:71:58:2a:a4:e2:d7:85:35:92:85:70:ef:da:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DE:F2:02:3D:D9:3A:9D:81:58:9E:51:A5:C8:66:E7:5E:40:91:00
            X509v3 Authority Key Identifier:
                keyid:42:7D:52:1F:1F:A6:98:0F:53:ED:5C:F5:2B:5F:AF:F3:E4:B5:56:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/323830343a346539633a3a2f33322d313238203d3e20323638323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:39:50:ec:bf:4f:15:09:7c:59:29:16:d9:1f:70:08:d7:
         44:b5:28:82:55:79:70:5e:87:e8:76:d7:0b:4d:0a:65:6e:dd:
         08:c2:65:fe:28:45:11:31:bf:91:fb:a7:1a:69:63:b5:2d:e2:
         9e:22:18:6e:6c:97:a1:f9:5e:33:25:bd:19:0b:4f:f7:e0:87:
         ff:59:56:2d:ff:82:b7:40:51:44:ec:fa:14:7d:56:0c:9d:c0:
         20:d5:e0:1d:c5:92:f9:ea:3f:8c:15:88:05:9c:34:cb:af:60:
         74:57:cc:fe:a3:a7:5c:b7:c1:41:c2:1e:3b:44:b4:96:90:70:
         50:5f:5b:df:a8:d4:c6:61:1d:3c:c7:dc:83:d5:ed:28:ba:e2:
         c5:3f:67:5c:4c:7d:48:df:75:09:0d:64:a2:5e:4b:c4:e9:fd:
         3f:ed:69:0c:63:74:80:d0:cf:1b:a1:c8:26:ad:fe:a2:a8:88:
         14:eb:d5:29:e0:43:b0:04:2d:17:f6:c8:09:35:c7:f1:e5:66:
         e1:73:43:2b:3f:8d:67:26:4b:f2:3d:3a:60:2c:d0:c0:af:76:
         ac:9e:79:76:81:a1:88:ca:4a:40:58:4c:d5:0b:17:4b:ee:b0:
         01:73:ad:78:73:bc:e6:5b:84:02:8d:0f:01:51:7b:1a:23:af:
         09:53:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:59 2024 by rpki-client on console-fra.rpki-client.org