Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa
File:                     323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa (raw, json)
Hash identifier:          5EXcffJrN7IW8XCYgLDw6RcDSO2+8y22AiCRTkNZYNw=
Subject key identifier:   BF:58:B5:9D:50:72:86:44:18:F2:4B:B6:B5:CE:FB:58:CC:C6:1A:B3
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       1D4BE16B749E56A22DD3EDDEC7E47F88A9236BD8
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa
Signing time:             Wed 29 May 2024 12:21:18 +0000
ROA not before:           Wed 29 May 2024 12:16:18 +0000
ROA not after:            Wed 28 May 2025 12:21:18 +0000
asID:                     52540
IP address blocks:        2804:e10:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4b:e1:6b:74:9e:56:a2:2d:d3:ed:de:c7:e4:7f:88:a9:23:6b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: May 29 12:16:18 2024 GMT
            Not After : May 28 12:21:18 2025 GMT
        Subject: CN=BF58B59D5072864418F24BB6B5CEFB58CCC61AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:bb:26:ca:13:e0:82:c2:94:65:85:b4:41:
                    56:a3:c4:31:f9:8d:3c:a5:3c:22:f8:a1:46:60:49:
                    fe:80:36:17:eb:aa:65:75:7f:eb:93:5f:1f:44:e0:
                    65:8f:b6:ea:fb:52:c5:57:9e:1e:50:cc:53:ce:76:
                    e5:4f:53:5b:8a:04:81:6f:4f:57:ce:23:32:35:2e:
                    ae:46:5d:42:60:0f:1d:cf:96:2c:48:37:16:f1:c9:
                    09:ee:17:b9:71:af:c4:7c:f6:ca:a1:16:12:19:d1:
                    7b:e9:24:03:ad:e1:bc:62:86:6a:fa:d2:ae:6d:ae:
                    c1:1a:e7:51:b2:37:6f:90:56:79:af:5a:58:0a:fb:
                    a2:f2:cb:8a:01:9c:f0:10:5f:9d:e3:11:1d:c3:89:
                    27:e0:ba:ec:25:04:70:0e:de:74:cb:b9:24:9e:0f:
                    f2:f1:aa:05:70:81:b5:06:15:bd:74:69:1a:75:76:
                    3b:43:76:7e:d4:99:80:0c:a6:bf:64:54:58:86:52:
                    8d:95:af:f8:41:f0:39:c0:bb:e3:f9:54:7e:77:95:
                    b3:f5:40:1d:69:e5:11:99:86:b1:fd:c2:84:7a:10:
                    46:a3:67:de:e8:2f:ee:22:48:8e:8a:28:81:6c:f2:
                    0f:12:cb:cf:5e:e5:10:2e:5e:72:c5:70:33:51:fc:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:B5:9D:50:72:86:44:18:F2:4B:B6:B5:CE:FB:58:CC:C6:1A:B3
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:eb:5b:57:31:8c:0c:68:f7:d9:45:cb:37:42:34:5a:89:
         5e:9d:c8:f1:8c:ef:e5:44:1f:b7:a3:c4:7a:6d:98:62:74:76:
         ee:0d:ba:12:d4:6a:c8:5c:db:7f:0f:3a:1a:0f:43:d4:21:09:
         af:28:b1:b0:14:a3:19:df:28:3d:2c:9f:7d:ba:d7:66:47:31:
         99:8d:f8:25:53:83:f2:a4:71:27:e5:21:36:00:19:c1:85:7f:
         95:f3:33:df:d2:e9:f3:d2:be:d9:b7:ab:bd:c2:c3:30:c3:08:
         f8:dd:52:55:0f:a7:e3:0f:e0:d3:c4:f3:d0:36:be:f4:d8:dd:
         b6:a4:3a:d0:df:6b:f6:82:4d:e0:6d:17:13:ca:fc:23:88:96:
         52:22:53:e8:fb:88:fa:09:7c:f1:b2:23:17:9e:0b:63:09:be:
         eb:6d:6e:e0:7d:19:82:42:82:91:1c:17:0b:fb:3e:8e:01:9e:
         9d:68:42:c7:f5:d4:67:2a:69:d4:a9:81:ee:64:9e:6f:1f:8c:
         1e:09:77:7b:1b:f0:50:96:49:0a:e2:0e:18:cd:d4:fd:d0:4b:
         a0:37:d9:c3:63:e4:af:92:a5:31:ac:ba:c6:0b:cb:ce:b5:e1:
         a7:f0:8e:f5:d7:b2:97:f6:f0:e4:cc:7a:21:b3:18:8d:fc:f1:
         1e:e5:f9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org