Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/323830313a61343a3a2f33322d3335203d3e20323632373432.roa
File:                     323830313a61343a3a2f33322d3335203d3e20323632373432.roa (raw, json)
Hash identifier:          m0Z1xYH9oRwGTqO4JbE4FNJcU66v+uOSSRJmxDBCWbU=
Subject key identifier:   12:07:4E:CC:A0:25:B3:B5:DD:06:DC:9E:5A:90:0E:B9:52:B8:4E:11
Certificate issuer:       /CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
Certificate serial:       7D7B8EBD647B318236AF1D45B1407E038340CD6F
Authority key identifier: 0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/323830313a61343a3a2f33322d3335203d3e20323632373432.roa
Signing time:             Thu 04 Apr 2024 15:25:08 +0000
ROA not before:           Thu 04 Apr 2024 15:20:08 +0000
ROA not after:            Thu 03 Apr 2025 15:25:08 +0000
asID:                     262742
IP address blocks:        2801:a4::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.crl
                          rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7b:8e:bd:64:7b:31:82:36:af:1d:45:b1:40:7e:03:83:40:cd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
        Validity
            Not Before: Apr  4 15:20:08 2024 GMT
            Not After : Apr  3 15:25:08 2025 GMT
        Subject: CN=12074ECCA025B3B5DD06DC9E5A900EB952B84E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:a5:12:56:da:ad:37:f9:12:93:7b:98:39:
                    53:0e:86:c9:29:ce:13:06:b8:83:32:4a:79:23:e6:
                    5e:49:b9:28:3f:11:51:2a:dc:22:4c:27:bc:94:8e:
                    0d:aa:82:df:53:a3:96:23:df:3a:8d:5f:ce:46:98:
                    32:6d:6d:35:fd:99:ef:3b:12:28:aa:0a:04:8e:b3:
                    91:c1:5c:07:00:36:ef:ee:a4:7c:18:d1:b1:ea:96:
                    d6:5c:28:48:8a:6a:87:28:51:b6:1b:aa:92:13:13:
                    c4:24:4f:f6:85:88:65:00:cc:6b:a9:e2:94:82:3d:
                    2a:02:5c:40:30:c3:14:48:99:f7:9c:a9:2b:3a:e9:
                    67:4a:a6:6d:eb:eb:2d:92:5b:c0:c7:77:04:af:38:
                    07:db:55:96:af:9c:fa:92:cf:05:a7:ec:9e:b9:fe:
                    b4:22:42:3f:27:f4:d3:af:23:ee:cd:19:b5:d2:75:
                    b0:f0:13:71:9e:7a:17:2b:9e:b3:98:be:ff:33:c6:
                    4f:9e:8f:60:4a:eb:d2:64:ed:e1:2d:86:82:ac:10:
                    10:ba:bf:02:14:6c:b5:fd:33:0a:4d:70:0e:4f:1e:
                    38:b2:85:99:29:80:6a:2e:17:38:c6:60:e2:ba:1e:
                    0f:8d:2d:26:28:9f:ba:35:c7:42:2b:39:71:5f:d3:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:4E:CC:A0:25:B3:B5:DD:06:DC:9E:5A:90:0E:B9:52:B8:4E:11
            X509v3 Authority Key Identifier:
                keyid:0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/323830313a61343a3a2f33322d3335203d3e20323632373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:e4:57:21:3b:2a:65:88:9c:f6:4a:21:82:be:99:f0:0b:
         6f:0b:c2:86:a4:e0:c5:78:ac:bd:62:2f:c9:88:d1:cc:5a:bf:
         92:de:82:b2:8e:73:1d:e0:12:2d:d2:d8:02:84:0a:dd:14:ab:
         e4:49:ce:56:81:f2:f1:fc:ed:f6:21:f8:17:0e:96:93:7b:83:
         4d:b8:f9:9a:be:f9:87:0d:1d:b9:d6:a5:bb:3b:63:3b:71:32:
         c4:1a:37:2b:7d:59:94:5d:df:b6:44:31:cc:3b:6c:c3:dc:6c:
         2e:bc:3d:e5:5a:2c:f2:ab:95:e7:5e:3c:59:a7:ba:89:10:d9:
         a6:63:b5:dd:93:ce:a9:45:e7:14:b4:5e:b8:85:b6:73:2b:7b:
         55:4e:42:06:e5:4c:20:78:b1:c5:e8:90:23:69:bf:39:e3:e9:
         22:74:32:6d:53:73:f3:40:27:20:af:3d:e0:a8:ca:80:34:f8:
         89:3e:09:d2:30:80:01:d1:87:09:4b:46:11:ed:d3:f9:54:b6:
         10:31:54:c7:61:1b:9d:ff:d5:d1:ad:9a:77:e2:9e:41:3e:d2:
         62:ee:05:a8:be:0d:3a:0e:5a:6f:9a:0d:40:a7:94:9a:df:ec:
         e5:08:54:f6:47:96:5d:a4:0b:30:f8:46:77:03:7d:9b:f5:a9:
         30:70:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:00 2024 by rpki-client on console-ams.rpki-client.org