Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/323830343a323562303a3a2f33322d3334203d3e20323634323935.roa
File:                     323830343a323562303a3a2f33322d3334203d3e20323634323935.roa (raw, json)
Hash identifier:          v3famd510nHxJNLxfmhdzyL8Pst7YKw/CzFzjsj13+M=
Subject key identifier:   54:9D:37:12:CB:EB:DD:37:BF:5F:D5:ED:EB:11:68:87:85:FE:7C:BA
Certificate issuer:       /CN=FF378FCED112801045DB136F6CA069344BA08F50
Certificate serial:       0432F2C613AD914F4A908350166A95066E57A535
Authority key identifier: FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/323830343a323562303a3a2f33322d3334203d3e20323634323935.roa
Signing time:             Tue 02 Jul 2024 17:55:05 +0000
ROA not before:           Tue 02 Jul 2024 17:50:05 +0000
ROA not after:            Tue 01 Jul 2025 17:55:05 +0000
asID:                     264295
IP address blocks:        2804:25b0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:32:f2:c6:13:ad:91:4f:4a:90:83:50:16:6a:95:06:6e:57:a5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF378FCED112801045DB136F6CA069344BA08F50
        Validity
            Not Before: Jul  2 17:50:05 2024 GMT
            Not After : Jul  1 17:55:05 2025 GMT
        Subject: CN=549D3712CBEBDD37BF5FD5EDEB11688785FE7CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:6f:c0:17:28:e9:75:bc:65:2a:25:79:95:
                    47:63:f3:ed:84:80:0d:fc:e4:4c:30:05:4e:19:60:
                    7e:51:43:36:67:1b:c4:67:67:94:7f:10:96:4d:13:
                    cb:40:5d:fe:f4:c9:cd:f0:9e:eb:1f:90:49:26:4e:
                    c3:cd:2f:19:66:6e:0e:e2:44:d0:e1:28:cc:95:55:
                    98:b2:dd:27:19:69:89:6a:33:31:7a:51:92:6b:f8:
                    ee:b6:86:55:1a:c8:8a:fe:72:4a:02:69:eb:1d:73:
                    a6:d2:15:ee:26:c4:e9:fb:76:25:d0:f0:ca:fd:0a:
                    03:0e:bf:2e:e8:23:c3:2c:3a:fb:d2:08:0e:19:2c:
                    07:1a:c3:42:1b:91:a5:3e:e8:de:58:6e:90:46:39:
                    e6:d1:6b:89:f9:58:08:7d:fa:21:0d:ee:50:6b:c5:
                    40:95:26:5b:c5:c1:af:41:84:47:49:fd:00:8a:f2:
                    58:8c:73:d1:86:80:df:42:51:00:3a:e5:a9:dc:63:
                    7e:a2:6e:4c:f9:52:21:ed:5b:18:08:84:96:59:95:
                    24:0c:36:db:22:34:d1:56:2d:b1:a4:14:fa:ef:7a:
                    17:b7:f0:09:04:2b:52:39:f9:f2:4e:f5:d2:bd:f3:
                    ff:8c:ad:ef:7f:19:95:ea:05:16:e2:ff:9e:07:23:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9D:37:12:CB:EB:DD:37:BF:5F:D5:ED:EB:11:68:87:85:FE:7C:BA
            X509v3 Authority Key Identifier:
                keyid:FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/323830343a323562303a3a2f33322d3334203d3e20323634323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:36:6a:9b:ff:35:95:a9:cb:c6:3d:59:8a:83:6d:a6:47:
         68:29:e9:a2:1c:19:35:02:12:06:af:94:0c:7f:c0:59:45:02:
         11:03:cc:91:8d:d2:c7:43:79:cc:c3:a5:c0:d6:02:5a:50:42:
         0e:01:28:97:8b:83:f1:e6:14:45:15:1b:bb:2d:00:d7:dd:d0:
         5c:63:fd:60:81:e3:44:b4:1a:21:ef:67:81:b7:a9:59:d1:89:
         83:10:e0:a5:3e:0a:ae:59:5d:ce:4c:46:c0:20:05:5a:da:40:
         7d:70:bc:bc:3c:1f:bc:48:1b:f4:43:fd:01:aa:46:ed:b3:c3:
         c2:63:08:b8:82:20:03:c8:f6:2c:bc:9e:fd:61:3e:b5:96:03:
         87:61:b6:30:1d:5e:61:12:d4:86:2e:ec:53:d8:ad:03:c0:42:
         84:11:f2:89:cc:ba:21:f4:bf:56:e0:7c:bc:3b:89:e8:20:c9:
         61:3e:7c:0f:b7:93:f2:9c:3e:13:81:d2:62:22:c6:cb:4c:da:
         11:c8:85:08:9c:73:db:b6:00:bc:6a:a2:c0:06:58:8a:b1:71:
         58:f7:e2:6d:1b:73:79:35:1b:4a:e2:fa:ea:fa:61:71:ee:93:
         d1:b2:7c:39:01:eb:b3:1d:c3:1a:76:67:a4:b2:5b:18:bb:a2:
         40:a1:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:36:56 2024 by rpki-client on console-fra.rpki-client.org