Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3438203d3e203631383035.roa
File:                     323830343a313939383a3a2f33322d3438203d3e203631383035.roa (raw, json)
Hash identifier:          N4ADG7fUbE73Yy1iJF1t0Ipc+fixM5DRtuZLL/FXr4o=
Subject key identifier:   B4:6A:29:56:0E:94:85:85:D4:80:30:77:D3:51:BF:FF:C7:39:81:4F
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       06A5DE4BE1209B750663149F3D6B8515D0EECAEC
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3438203d3e203631383035.roa
Signing time:             Wed 05 Jun 2024 18:55:12 +0000
ROA not before:           Wed 05 Jun 2024 18:50:12 +0000
ROA not after:            Wed 04 Jun 2025 18:55:12 +0000
asID:                     61805
IP address blocks:        2804:1998::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a5:de:4b:e1:20:9b:75:06:63:14:9f:3d:6b:85:15:d0:ee:ca:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Jun  5 18:50:12 2024 GMT
            Not After : Jun  4 18:55:12 2025 GMT
        Subject: CN=B46A29560E948585D4803077D351BFFFC739814F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:64:dc:e8:33:fe:9e:30:e5:d9:4e:d7:95:
                    bf:76:8e:8f:43:fe:dc:c2:f4:8c:66:2d:04:62:66:
                    a6:f6:8e:9d:ab:a5:25:bf:7a:06:cd:9e:d9:c1:00:
                    ce:87:8c:a8:c2:b6:61:db:39:e3:e1:43:7e:11:d5:
                    b3:0c:46:39:c8:f3:58:cb:65:84:aa:e3:df:67:04:
                    95:2d:6f:6e:19:5d:1f:30:9e:4b:7d:4e:63:e1:14:
                    c4:ac:4e:98:96:8e:91:ab:0e:2d:04:7d:2d:95:98:
                    25:4c:91:eb:de:94:69:1f:ac:1d:f6:f0:43:58:83:
                    1d:95:ed:92:af:31:ed:d5:98:42:4f:b5:06:d1:03:
                    53:62:7a:4c:61:cd:41:83:d0:c1:74:9e:04:e5:57:
                    08:f9:8e:ad:a7:6c:d7:f0:a3:25:2f:26:29:3e:ce:
                    78:1c:a5:7e:d0:04:fd:9e:1b:34:33:17:e5:fb:90:
                    ff:fa:cb:72:13:e0:90:c5:14:08:5f:5d:2c:88:f5:
                    9a:47:e4:ff:30:73:bd:b5:fd:fb:62:f4:10:fd:4f:
                    6c:9b:ac:a6:27:b8:ad:35:cc:59:9e:54:ad:44:90:
                    d2:e8:56:a3:ca:25:0f:36:d1:b7:7b:34:94:dd:aa:
                    20:2b:9f:62:e5:1e:28:8c:3f:8a:36:e2:54:c3:d2:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6A:29:56:0E:94:85:85:D4:80:30:77:D3:51:BF:FF:C7:39:81:4F
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3438203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1998::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:96:76:7a:a2:86:19:58:42:d6:17:5f:2d:91:e9:35:db:95:
         73:2d:3d:d6:bb:79:55:5d:03:8f:9d:b2:41:d6:ca:1a:15:12:
         75:fc:a7:c6:ae:20:7a:5c:3d:d6:a1:91:98:5e:00:80:3d:64:
         62:fd:20:84:8e:f0:74:03:97:f8:b9:04:7d:6a:ec:3b:3c:42:
         12:d7:dd:c7:1c:f5:f4:8c:31:af:0d:37:32:cb:8a:78:ba:0a:
         22:ed:91:70:69:84:43:df:2b:53:6a:4e:fe:26:f1:e3:a5:27:
         61:e1:be:76:aa:86:73:4b:2e:3e:18:e2:aa:bc:45:f6:49:21:
         fb:a6:cb:ea:3f:5a:ef:c3:b7:2c:da:09:9a:0e:e2:70:a1:fb:
         6f:e2:cc:41:c4:ac:57:eb:a6:6e:80:7e:fb:9f:42:e6:3f:f0:
         98:f6:54:a1:d1:7f:d5:6c:ae:bb:98:8b:d5:4e:59:33:41:02:
         22:aa:49:be:3b:d1:ec:63:12:35:d5:fb:73:fc:ef:f1:cd:b6:
         9e:ac:73:b8:88:5e:a1:9d:50:d3:af:cc:1b:78:54:a1:ed:a5:
         e3:9b:b0:7e:94:30:49:05:21:9c:a3:ec:34:3e:78:b6:2d:90:
         fe:e5:af:45:e1:8b:a6:ab:dd:ae:e2:75:ed:aa:05:05:44:d5:
         2e:0f:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:49 2024 by rpki-client on console-ams.rpki-client.org