Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa
File:                     323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa (raw, json)
Hash identifier:          55d0QVH7gk6QZhSFR1Tb9iFY/zMtOkCPeS60Sr6Uz2w=
Subject key identifier:   50:BB:40:3B:27:34:41:04:66:D7:A3:68:EF:88:67:CF:42:5A:CE:19
Certificate issuer:       /CN=51F43471391884073640DD1CEA3309A015FDE379
Certificate serial:       7B305BC3ABAC6112F43BAE0928E2B196934A5610
Authority key identifier: 51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa
Signing time:             Thu 16 May 2024 17:26:53 +0000
ROA not before:           Thu 16 May 2024 17:21:53 +0000
ROA not after:            Thu 15 May 2025 17:26:53 +0000
asID:                     266166
IP address blocks:        2804:3bb4:c0::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.crl
                          rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 13:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:30:5b:c3:ab:ac:61:12:f4:3b:ae:09:28:e2:b1:96:93:4a:56:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F43471391884073640DD1CEA3309A015FDE379
        Validity
            Not Before: May 16 17:21:53 2024 GMT
            Not After : May 15 17:26:53 2025 GMT
        Subject: CN=50BB403B2734410466D7A368EF8867CF425ACE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:f7:d6:87:eb:aa:1e:c8:59:cd:94:c1:d4:
                    e9:e1:a0:31:0a:51:78:c8:04:a6:97:61:8a:d6:6e:
                    9f:59:54:ea:51:66:db:68:af:d4:e3:01:cc:54:1d:
                    87:97:6c:d1:fc:44:54:f9:30:32:a4:af:5f:49:3c:
                    86:ae:3c:fc:4e:94:73:de:b6:03:ff:2f:9d:21:aa:
                    c7:50:11:3d:35:a6:ad:e3:07:08:eb:b3:f8:cc:44:
                    ce:00:04:00:7a:c4:10:6d:b7:fb:27:29:4e:d5:79:
                    bd:39:d5:c0:f8:3b:cd:6d:0d:f3:7a:95:12:fa:4a:
                    85:8d:6a:c3:ae:5a:94:73:2e:de:9b:e7:b2:5d:cc:
                    62:cc:8a:56:fb:25:20:72:e3:7b:69:d3:7e:9f:23:
                    22:b6:ae:69:2e:2f:70:c6:9a:07:08:5b:c0:20:2b:
                    b2:1a:8e:e4:39:20:50:b3:36:8f:d1:a4:0d:24:34:
                    82:32:98:4e:bd:cf:6e:a0:46:11:c2:f5:80:9e:de:
                    e7:c2:2a:d2:1a:d2:e5:56:02:03:a4:3e:02:2c:d0:
                    a2:06:ee:d7:61:4a:90:ca:61:a3:77:28:c8:a6:1e:
                    ae:b7:e6:11:0b:81:15:18:c1:be:d4:36:e1:b6:49:
                    28:61:a9:b9:7e:03:ea:19:21:d3:3d:5f:da:28:02:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:40:3B:27:34:41:04:66:D7:A3:68:EF:88:67:CF:42:5A:CE:19
            X509v3 Authority Key Identifier:
                keyid:51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb4:c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         12:91:17:f4:bf:38:52:70:ec:12:06:70:32:59:da:e1:c9:6a:
         78:22:be:33:41:16:a8:8c:92:da:15:ef:bc:1e:1c:73:c6:c9:
         57:40:3d:56:ff:72:30:78:9c:d1:4c:11:5e:17:40:73:d3:d9:
         c6:e4:00:df:0f:d4:8e:c9:94:42:86:22:55:a8:eb:49:fc:2e:
         f4:7b:41:b5:70:2c:eb:44:d9:bb:9e:d0:9d:73:45:d9:e3:f7:
         fd:91:f5:cc:86:c3:81:55:96:ad:51:1b:cb:7c:ad:d5:f3:ed:
         f7:64:bc:3d:77:2d:ed:1c:29:e3:c3:ed:95:59:ae:9b:6c:04:
         f8:34:d7:97:68:c3:ff:49:08:bd:aa:33:a9:f1:4f:0d:97:7c:
         58:f4:f1:1b:17:ad:cb:b7:54:c6:67:e5:3e:77:b8:1d:4a:1d:
         76:a2:d6:d7:d3:45:c7:68:97:82:b7:ae:88:8c:cf:88:5a:3c:
         38:c4:49:9a:b9:39:46:14:01:2a:da:76:f4:2e:1c:ad:7f:57:
         c8:e2:75:98:53:f9:43:6f:47:8f:40:24:23:52:0a:2a:c0:e2:
         6e:47:50:79:72:0f:b9:6f:bf:f7:87:9e:15:d7:f1:78:71:f5:
         a0:a7:26:66:29:2f:41:85:cc:fc:7f:37:ce:3e:e4:6f:af:ba:
         5f:29:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 13:20:07 2024 by rpki-client on console-fra.rpki-client.org