Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa
File:                     323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier:          LcogDBF+THn6mEy67zxRdC3qMKlItwuZ0aDxeiKNAvI=
Subject key identifier:   45:D7:4E:46:84:E3:55:FC:76:9D:75:C5:44:3A:5D:CB:CC:30:D2:36
Certificate issuer:       /CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Certificate serial:       7D638B2D13256A73C0150BEBFD955F07C606D75C
Authority key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa
Signing time:             Tue 03 Sep 2024 18:32:39 +0000
ROA not before:           Tue 03 Sep 2024 18:27:39 +0000
ROA not after:            Tue 02 Sep 2025 18:32:39 +0000
asID:                     11097
IP address blocks:        2801:80:1400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:63:8b:2d:13:25:6a:73:c0:15:0b:eb:fd:95:5f:07:c6:06:d7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
        Validity
            Not Before: Sep  3 18:27:39 2024 GMT
            Not After : Sep  2 18:32:39 2025 GMT
        Subject: CN=45D74E4684E355FC769D75C5443A5DCBCC30D236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:51:bb:74:41:24:60:12:46:6e:fb:e8:74:e5:
                    6d:f2:9e:a2:2b:45:6a:eb:5e:9c:c0:aa:9b:42:49:
                    14:96:1c:f0:d3:97:d3:ab:2e:0c:e5:4e:fb:5c:e2:
                    a0:5f:d4:72:f8:32:b6:ab:49:84:05:91:68:23:1e:
                    30:2d:f5:15:df:c0:b4:a9:5d:8d:de:57:f4:0a:25:
                    a2:1e:4c:c5:43:91:6e:58:6d:21:dc:78:f0:7b:57:
                    9d:1f:81:cb:dd:86:05:0d:b0:f5:e4:de:64:24:ba:
                    94:30:ce:c4:c8:e0:5e:69:d4:3b:aa:77:e1:59:5b:
                    36:55:51:5f:c2:e5:35:e0:11:a6:65:51:d1:89:5f:
                    57:d9:fd:10:74:91:e5:18:1d:93:28:f4:48:11:55:
                    36:f5:03:0b:6f:fb:f6:eb:d7:e9:ad:35:b5:ef:5b:
                    cc:9b:e3:3c:f6:59:44:bb:ef:80:e0:f0:43:d2:ec:
                    1a:69:a1:0e:17:ce:02:da:89:3e:92:af:bb:34:76:
                    50:6a:a6:19:80:8f:c7:bd:87:1c:54:23:03:9e:46:
                    ae:42:9b:8e:71:06:54:9a:07:3c:e7:4e:8c:6c:03:
                    e6:a0:c5:0c:9e:8d:b4:68:d4:46:91:db:09:53:86:
                    87:2e:78:4c:b9:75:6f:9c:eb:fe:39:5f:18:1a:5d:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:4E:46:84:E3:55:FC:76:9D:75:C5:44:3A:5D:CB:CC:30:D2:36
            X509v3 Authority Key Identifier:
                keyid:BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:e3:30:fb:c5:db:15:50:2e:5c:4c:37:57:d1:01:84:27:ef:
         54:ce:17:fb:ca:77:2e:47:12:4b:59:b9:ec:de:43:3a:bf:cd:
         a9:26:29:91:72:4b:72:a9:e2:ae:b8:b6:76:5d:a9:4e:a3:6f:
         ca:0c:2f:0e:0a:aa:44:4a:0f:8c:aa:fe:6f:ac:96:c4:7f:0b:
         a0:78:33:c9:e0:a2:d2:bf:be:01:cc:88:ad:58:bc:46:19:df:
         de:05:97:92:6d:8c:db:23:6d:fb:c4:b3:51:0c:1c:78:33:bf:
         52:0c:1f:e5:9f:d5:31:5d:20:94:3c:57:e2:22:55:7a:3c:ab:
         e4:95:cd:82:8c:ad:11:78:1b:c8:51:af:a4:ea:2f:0f:40:52:
         95:42:c1:6b:cf:7f:c4:39:b5:04:72:7f:5a:9b:ee:c3:10:14:
         e1:e3:d4:28:d5:e5:a4:08:d9:2b:08:bc:0f:32:ea:0d:ee:b4:
         f5:d0:08:8b:9a:58:8a:97:ee:ba:b9:4e:e7:b6:33:78:03:10:
         e2:26:6a:e3:d0:89:66:c9:14:bb:4e:9b:ad:cb:cb:31:fa:bc:
         b6:10:1a:43:33:5e:02:95:2b:61:10:3c:fd:37:78:77:73:d1:
         8e:11:8d:b3:5f:80:e9:ce:fc:28:05:82:5f:66:1f:04:10:0e:
         55:ae:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:58 2024 by rpki-client on console-fra.rpki-client.org