Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/323830343a386264383a3a2f33322d313238203d3e20323733373633.roa
File:                     323830343a386264383a3a2f33322d313238203d3e20323733373633.roa (raw, json)
Hash identifier:          QK0zB3Vz8LI4t8yuzQQMKvW23MjqtyByVSzSlW8hv1k=
Subject key identifier:   EA:A6:88:D0:0F:4D:51:99:5A:AD:09:AE:6A:E0:12:6B:03:58:D6:64
Certificate issuer:       /CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Certificate serial:       01F9E9E550C07F69C37FFF6BF21EB81732023193
Authority key identifier: FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/323830343a386264383a3a2f33322d313238203d3e20323733373633.roa
Signing time:             Thu 04 Apr 2024 15:49:33 +0000
ROA not before:           Thu 04 Apr 2024 15:44:33 +0000
ROA not after:            Thu 03 Apr 2025 15:49:33 +0000
asID:                     273763
IP address blocks:        2804:8bd8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
                          rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:e9:e5:50:c0:7f:69:c3:7f:ff:6b:f2:1e:b8:17:32:02:31:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
        Validity
            Not Before: Apr  4 15:44:33 2024 GMT
            Not After : Apr  3 15:49:33 2025 GMT
        Subject: CN=EAA688D00F4D51995AAD09AE6AE0126B0358D664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:91:7a:d9:e5:00:d0:56:ff:bb:27:bf:28:
                    5e:e9:9e:fd:db:61:e1:ef:73:14:cd:57:24:e9:fd:
                    7d:a6:ee:99:81:44:ae:5c:b1:1e:bd:89:a7:33:de:
                    e2:ea:12:5d:1b:77:8d:27:b4:01:22:fd:25:84:9a:
                    8e:6d:8e:30:53:77:7d:fd:8c:8d:ae:17:6e:28:37:
                    17:98:d2:6d:5d:76:11:8c:6f:47:c7:47:28:8e:97:
                    23:b9:0b:f0:fa:d7:87:c5:4d:90:15:b9:30:d1:2f:
                    49:9f:ea:d8:69:2c:ed:bc:10:6e:6c:d3:62:b3:4c:
                    8a:e9:d0:00:08:7c:07:8c:b0:e6:fc:c4:dd:df:b2:
                    96:26:b2:3b:e7:83:b4:a5:a3:19:9e:8e:fd:79:8c:
                    ed:fe:69:91:13:99:67:c3:7e:d2:15:a3:19:22:53:
                    6f:79:f7:74:d3:8d:80:b3:e1:0f:fc:38:36:51:c3:
                    24:35:ed:75:07:81:47:07:7d:d9:2b:0b:fa:90:58:
                    cf:3f:fb:1d:1d:e2:cb:98:a7:cd:ae:25:28:24:4b:
                    0b:59:6d:6f:a1:23:7f:a3:dc:3c:d6:12:26:08:87:
                    ff:4d:54:cc:7d:7d:3b:78:36:aa:01:eb:8a:49:c0:
                    33:8d:ab:da:8d:fc:66:73:60:fb:91:8b:aa:8e:32:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A6:88:D0:0F:4D:51:99:5A:AD:09:AE:6A:E0:12:6B:03:58:D6:64
            X509v3 Authority Key Identifier:
                keyid:FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/323830343a386264383a3a2f33322d313238203d3e20323733373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:34:5c:7a:56:76:d1:81:02:62:6f:49:59:9b:c4:cf:24:55:
         9b:fa:06:81:07:e0:f2:09:b1:93:99:77:09:28:6b:53:dc:44:
         fd:9f:10:a5:7d:1f:11:09:3c:33:48:0b:1c:f4:7e:40:69:e6:
         6c:72:d7:24:e1:3c:d6:d9:32:d5:cd:e5:15:5f:fe:da:1d:43:
         d1:00:61:9e:b4:03:38:a1:c9:c3:e9:c8:0b:8a:92:76:fa:cf:
         3a:db:39:c9:bf:ad:c0:1e:7d:4e:27:99:8c:93:e5:10:20:ab:
         2d:d8:5f:e9:85:89:75:a4:80:ae:41:c9:2e:96:c7:d5:cc:7e:
         95:fd:b0:bc:27:d5:7e:6c:4d:11:19:9d:f2:ac:c7:15:e1:75:
         15:9c:1f:3e:c6:6e:8e:a0:4c:b9:b7:7a:5e:dd:09:30:51:4d:
         c0:71:99:32:fe:3e:8b:f9:da:c7:ad:d7:b0:36:42:e3:e2:d5:
         3a:a8:d7:95:9b:92:e5:af:4c:55:f3:72:b2:5e:1a:06:9d:e9:
         1a:77:16:26:c3:10:f2:3d:02:02:8b:1a:2d:9c:cd:f6:53:1b:
         9e:8c:71:08:32:02:bc:8b:fe:16:ac:41:c4:e4:90:f8:3b:59:
         9d:68:5c:12:e9:54:f3:6e:18:5e:f8:2b:89:1e:14:d7:ed:a4:
         30:bd:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org