Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa
File:                     323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa (raw, json)
Hash identifier:          j25cgXUJRWXrx4uVL+CZkGJFIV1q5uCVgyO79t7Ur0I=
Subject key identifier:   96:4B:8B:14:A3:53:0B:C0:91:1C:C7:9E:C4:C4:07:86:F4:3C:C6:11
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       0F3B0FD0F7F6F67AD9316851CDED69BD85EFABBB
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa
Signing time:             Fri 05 Apr 2024 01:17:18 +0000
ROA not before:           Fri 05 Apr 2024 01:12:18 +0000
ROA not after:            Fri 04 Apr 2025 01:17:18 +0000
asID:                     262441
IP address blocks:        2801:80:2800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3b:0f:d0:f7:f6:f6:7a:d9:31:68:51:cd:ed:69:bd:85:ef:ab:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Apr  5 01:12:18 2024 GMT
            Not After : Apr  4 01:17:18 2025 GMT
        Subject: CN=964B8B14A3530BC0911CC79EC4C40786F43CC611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:7c:05:b4:75:12:fc:6a:8f:b7:10:54:e0:
                    d2:90:0e:ad:18:60:55:a1:68:42:a8:0f:9c:a0:f4:
                    32:73:4e:3d:e9:7a:cc:d4:b0:dc:35:15:9a:28:6b:
                    f7:c3:f0:1c:3c:54:2f:5c:03:c1:fb:df:7a:79:17:
                    af:69:ce:f9:8b:97:5d:9b:ef:16:f4:38:2f:26:0a:
                    84:95:c9:52:a8:54:e9:be:3f:1c:d1:13:e7:d0:ac:
                    4a:b9:ff:c7:5d:cc:6e:5f:e7:1c:a2:6b:da:3e:22:
                    73:37:d8:4a:b1:b1:a9:6c:8d:f7:16:c7:27:ef:e2:
                    ca:fb:96:31:a2:8c:ff:88:d6:0c:bf:92:4a:73:49:
                    eb:c0:1c:9a:b5:fa:ed:85:1d:a2:c6:d5:30:a1:2d:
                    55:da:74:ad:d6:0a:2e:e8:dc:ef:e5:6b:97:b6:0a:
                    7e:a7:52:53:c1:cc:cd:44:d6:fa:c8:28:56:1a:08:
                    21:33:4b:47:34:ea:a5:fd:00:ac:56:66:c8:e9:88:
                    4d:75:97:8e:f9:97:7e:da:b0:f2:5e:07:7b:18:43:
                    3b:a5:2e:0a:a6:5c:c7:7d:4f:78:a1:0d:d1:c0:bf:
                    aa:eb:b5:f9:42:52:0b:67:7f:9c:ab:47:0d:91:31:
                    24:32:78:98:2e:50:96:3d:92:d1:39:bc:b4:73:cd:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4B:8B:14:A3:53:0B:C0:91:1C:C7:9E:C4:C4:07:86:F4:3C:C6:11
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:17:90:a4:70:38:0c:aa:1a:38:d4:cb:40:05:50:fc:a5:
         23:c7:4c:77:27:e0:e5:39:75:5e:6d:00:ae:02:ba:5a:7f:47:
         e1:9d:5e:c0:23:77:a0:78:90:9b:5f:a3:98:52:59:2c:af:e0:
         f0:b3:df:f3:8e:30:aa:e1:ba:be:cb:a1:c1:58:0b:1b:0c:3b:
         f9:c6:46:0e:ae:cd:c7:ca:35:9e:a4:22:d0:4f:52:5a:79:27:
         f8:1f:56:5a:66:5c:ca:be:83:19:88:04:3a:c1:4c:57:2f:a6:
         65:78:47:37:ad:01:c4:6b:fa:a6:15:a2:94:4c:56:98:06:92:
         a1:d6:81:21:f4:68:f1:7c:16:74:d0:c1:d1:c9:f1:28:75:8d:
         3f:b5:1b:7a:7c:f4:48:2b:d5:26:39:f4:86:51:aa:28:f0:66:
         f7:7d:cb:5d:90:1e:88:b2:9f:e1:56:dd:0d:8a:37:cc:0a:86:
         93:65:cd:5c:e8:a3:8e:d2:fc:f1:8b:76:ba:74:0b:a7:0d:3c:
         a2:bc:12:4b:aa:12:49:5e:dc:ba:5c:d1:14:58:f6:36:96:72:
         59:df:5b:b2:32:5b:8b:c5:54:4c:fc:ca:59:97:3f:ee:7a:a1:
         61:76:c5:ec:f4:7a:8c:70:d9:bb:a2:25:35:a6:f1:0b:d4:13:
         d1:55:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org