Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa
File:                     323830343a343166633a3a2f33322d3334203d3e20323637343730.roa (raw, json)
Hash identifier:          WSFO1Irm3Rs95MMfNlDPQ21wk7nI4+VQ5QWLYmwiUkY=
Subject key identifier:   DA:6F:8E:77:BF:D1:28:09:1D:5D:65:17:53:BB:DB:F1:B8:13:B1:AF
Certificate issuer:       /CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
Certificate serial:       088FEE815392ADB11D6AA7908A31FF22B7D433E5
Authority key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa
Signing time:             Wed 03 Apr 2024 18:38:36 +0000
ROA not before:           Wed 03 Apr 2024 18:33:36 +0000
ROA not after:            Wed 02 Apr 2025 18:38:36 +0000
asID:                     267470
IP address blocks:        2804:41fc::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl
                          rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8f:ee:81:53:92:ad:b1:1d:6a:a7:90:8a:31:ff:22:b7:d4:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
        Validity
            Not Before: Apr  3 18:33:36 2024 GMT
            Not After : Apr  2 18:38:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:a8:96:40:a2:e2:51:11:4e:92:43:a3:e1:
                    a3:af:95:e2:97:d4:ed:55:23:1b:50:e0:a4:57:9d:
                    a6:95:dd:5c:a5:46:43:7a:58:0a:61:ac:85:2d:b9:
                    ec:3a:1b:39:06:ee:05:5a:39:e5:b1:32:99:52:51:
                    5f:04:19:1d:95:35:85:10:5f:28:9c:fb:8a:46:69:
                    12:51:8e:23:b1:3a:a1:57:97:30:fa:52:1f:74:e1:
                    56:d0:b3:40:8b:87:5c:75:39:90:0c:d6:41:0e:0d:
                    ea:9e:49:c6:bc:2b:85:95:d9:a6:97:58:d1:9e:85:
                    41:40:35:30:c8:fb:12:96:9e:c6:f6:9b:3b:f6:d0:
                    a6:59:7e:6f:a7:35:7b:30:3e:f4:f3:7a:04:28:e9:
                    bc:ec:0c:36:e8:32:a7:0e:c7:57:46:fd:7f:2f:29:
                    ca:0a:17:a3:9f:0b:16:09:05:5d:b4:7e:5a:ed:6a:
                    f6:fe:ec:23:6e:e7:bc:f5:e9:2f:02:c5:88:74:e3:
                    c9:22:8d:39:b3:0c:9c:30:fd:03:ec:81:87:41:3c:
                    5d:94:ba:46:23:ad:db:42:1a:9c:8c:ca:27:e3:90:
                    c1:37:e7:48:3e:98:58:e7:59:c8:f8:7e:c7:fb:90:
                    67:95:ba:c3:f8:60:aa:07:ff:69:fe:cc:9e:66:de:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:8E:77:BF:D1:28:09:1D:5D:65:17:53:BB:DB:F1:B8:13:B1:AF
            X509v3 Authority Key Identifier:
                keyid:BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e6:64:0a:37:98:85:6d:ae:c1:c7:57:d0:cf:6b:3b:eb:d6:
         42:43:75:e7:42:25:11:3c:3d:1d:fd:5c:5b:e6:e8:f4:e2:be:
         de:66:bc:40:2a:8b:52:ea:69:2f:e4:95:df:22:96:99:2c:cb:
         51:61:1a:0b:77:c3:7a:4a:22:ec:a5:a8:62:ec:77:08:ba:d9:
         ee:bf:b7:b6:5c:bc:fa:56:00:60:38:34:52:c3:d2:42:1f:46:
         09:cc:09:ec:fe:9d:8e:74:d3:dc:29:9f:70:05:09:51:c9:c2:
         55:d1:73:68:82:b2:f8:00:9b:c8:f1:8e:d6:9c:61:7f:f2:5b:
         5b:dc:5d:6d:57:10:ed:64:93:c9:57:33:c1:20:1f:d8:6f:d1:
         0b:b5:58:95:42:d6:f0:30:fc:ab:5a:8c:ab:bd:56:37:35:0d:
         77:ab:d3:11:ac:bd:18:98:f2:a8:ac:23:a5:85:cc:05:15:96:
         83:03:bc:84:bb:3e:2e:ff:5b:73:28:e0:86:1b:1e:bd:ed:59:
         53:77:71:00:dc:5a:2b:7b:b9:c3:6e:27:f7:de:a4:1e:c8:49:
         08:4c:11:6f:e6:c5:1f:1d:02:fa:d0:03:30:e1:44:b0:5b:e8:
         2d:a1:ee:0a:f7:7c:c1:b8:53:d7:d3:5e:74:00:e7:36:7d:0b:
         d2:9c:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org