Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa
File:                     323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (raw, json)
Hash identifier:          ZfpSEhRRGMNglsjtqrvmmZCRyhIODWQTZ4UqU1zL3Lk=
Subject key identifier:   43:25:D2:1D:8F:98:06:1D:F9:F5:CB:CA:97:5B:DC:8C:7C:74:DC:A8
Certificate issuer:       /CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
Certificate serial:       68230DE5D8A47077A1E230585DC88A881DD94DEA
Authority key identifier: FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa
Signing time:             Tue 22 Oct 2024 21:08:46 +0000
ROA not before:           Tue 22 Oct 2024 21:03:46 +0000
ROA not after:            Tue 21 Oct 2025 21:08:46 +0000
asID:                     270577
IP address blocks:        2804:6e20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:0d:e5:d8:a4:70:77:a1:e2:30:58:5d:c8:8a:88:1d:d9:4d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
        Validity
            Not Before: Oct 22 21:03:46 2024 GMT
            Not After : Oct 21 21:08:46 2025 GMT
        Subject: CN=4325D21D8F98061DF9F5CBCA975BDC8C7C74DCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:de:79:4b:bc:3c:87:cf:e0:84:2e:39:1f:e9:
                    92:14:19:ab:63:67:f4:bf:08:eb:1f:ba:d1:6a:cf:
                    ac:ca:bc:ed:72:70:87:12:08:95:81:d5:6c:e3:f7:
                    2b:9c:de:a0:76:55:48:1b:19:76:36:4c:fd:40:9b:
                    52:1b:a6:b5:fb:ef:3d:c6:66:25:fc:b5:8c:57:4e:
                    29:74:31:20:6b:3d:a7:ca:b8:81:69:e9:8f:1b:23:
                    90:a8:f9:bf:2d:a2:5a:58:a5:96:2b:b6:fa:1e:8c:
                    da:85:69:44:a7:ae:37:2b:94:c8:09:5f:b1:cd:c2:
                    56:25:52:88:73:46:72:58:64:c0:a2:ad:89:c5:bf:
                    d2:28:f3:d8:54:3a:39:96:4b:80:9b:3a:e6:7c:e8:
                    57:2c:d1:fa:cb:b5:6e:8b:72:ac:53:69:91:63:8b:
                    3b:1b:e0:83:8e:8f:a8:e2:8e:26:a3:74:45:42:a0:
                    b0:62:4b:37:71:e5:f4:54:f6:d6:ae:09:7b:c5:6c:
                    28:fb:e4:56:ba:9b:87:d6:b7:6b:93:62:0e:5a:74:
                    00:e3:ee:42:e7:b5:26:5d:79:7a:66:11:0f:76:f2:
                    d6:fe:ca:5f:46:ce:db:07:26:55:e3:5b:87:da:09:
                    c8:c4:d4:f2:f1:6c:e6:55:18:91:cb:28:ef:d6:19:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:25:D2:1D:8F:98:06:1D:F9:F5:CB:CA:97:5B:DC:8C:7C:74:DC:A8
            X509v3 Authority Key Identifier:
                keyid:FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:29:9b:5d:cb:37:de:7c:1a:c4:77:7f:84:d5:42:be:b7:
         9a:e2:5c:49:cc:b9:57:07:8d:14:62:95:ce:39:2f:4e:2b:6c:
         01:97:2b:a1:7f:c0:3d:d6:4b:6d:ce:ea:b6:39:3e:1e:85:c2:
         33:04:11:2d:c2:73:f1:38:44:5b:4a:5e:39:05:2e:75:00:c0:
         83:ea:d6:93:54:39:f4:37:ff:92:c1:b8:bf:a4:e4:af:91:fe:
         0e:be:34:29:05:29:bb:9b:52:37:6c:d5:53:b7:a7:f1:6a:46:
         52:06:20:47:d5:9d:2c:e4:16:79:be:32:25:8e:bc:88:88:4d:
         11:ec:c9:c5:a7:4f:bf:8a:53:12:84:ff:03:f3:a8:1e:bd:59:
         2d:03:32:39:fc:2a:48:99:cf:cf:1b:2a:f5:c6:f0:3f:57:ba:
         a9:15:d0:78:98:67:98:fb:4d:13:a5:bb:47:0c:e6:27:40:b0:
         8b:15:70:82:26:6c:de:53:03:a9:c4:aa:73:32:89:59:11:d6:
         9d:44:47:2d:5e:15:f6:4c:cf:45:8e:9a:aa:de:26:a2:16:6f:
         60:76:c9:a1:6c:7d:8c:64:6f:de:02:cf:91:e3:6a:a2:12:fc:
         09:c1:02:15:2b:95:11:56:5a:cc:3e:80:1a:86:61:a9:47:fa:
         ac:59:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:32:00 2024 by rpki-client on console-fra.rpki-client.org