Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa
File:                     323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier:          dBjqhmKIbomYiPIWgYyKOkUNl22jSO3JlrZokFMOZgI=
Subject key identifier:   47:3B:F8:8D:37:04:51:D2:A0:98:81:6F:C2:05:EE:A7:E2:B6:AF:D0
Certificate issuer:       /CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Certificate serial:       500887FE8E46D4C5301847CA925CA8766E9410F3
Authority key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa
Signing time:             Tue 03 Sep 2024 18:32:40 +0000
ROA not before:           Tue 03 Sep 2024 18:27:40 +0000
ROA not after:            Tue 02 Sep 2025 18:32:40 +0000
asID:                     11097
IP address blocks:        2801:80:140c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:08:87:fe:8e:46:d4:c5:30:18:47:ca:92:5c:a8:76:6e:94:10:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
        Validity
            Not Before: Sep  3 18:27:40 2024 GMT
            Not After : Sep  2 18:32:40 2025 GMT
        Subject: CN=473BF88D370451D2A098816FC205EEA7E2B6AFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:5b:02:55:ed:4e:af:e1:84:4e:79:22:c0:
                    d7:e5:09:fd:8a:a3:31:fd:63:88:84:4a:5c:0d:a1:
                    b6:e2:9b:7a:60:e3:e1:22:10:cd:2a:62:4d:9b:90:
                    15:02:45:b1:53:a8:c6:87:f0:df:97:a2:88:d4:68:
                    b9:f1:7d:51:14:e8:07:75:3a:13:88:82:b5:af:79:
                    61:01:f0:4d:d9:d8:1f:6c:16:0a:8d:e2:18:f6:cd:
                    92:71:78:79:d8:f4:51:32:80:95:72:1d:f6:5b:d0:
                    6b:57:bc:f2:ff:c1:d8:4f:32:95:c4:d9:e5:04:b6:
                    09:4b:b1:48:04:63:e0:a3:80:ce:0a:9d:34:fa:a1:
                    bc:47:cd:12:7b:48:03:e7:39:1c:12:12:43:d7:a1:
                    18:f9:a2:26:b1:cb:35:0b:27:8c:87:60:47:74:01:
                    12:e8:91:6b:f2:b3:e0:99:75:e6:0b:de:a2:38:62:
                    dc:dc:6f:86:c0:38:91:54:58:bd:e1:8a:51:df:67:
                    41:c3:bc:ce:4c:b3:a8:65:6d:32:ed:24:cc:2e:4d:
                    f9:58:04:d9:0f:db:5c:79:bb:30:de:fd:ed:b9:34:
                    a7:1d:e1:98:9c:d9:39:fb:a4:a2:9d:8a:e2:bb:06:
                    d4:f3:c8:a6:34:bc:be:89:bb:cd:2d:2b:85:e8:fb:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3B:F8:8D:37:04:51:D2:A0:98:81:6F:C2:05:EE:A7:E2:B6:AF:D0
            X509v3 Authority Key Identifier:
                keyid:BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:140c::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:af:a2:9d:31:67:a7:35:e6:cc:43:bb:e2:d7:a8:d9:94:
         ab:02:aa:e0:6a:3e:77:9c:75:94:9b:01:0b:17:6c:65:a9:ab:
         76:26:21:8c:80:fb:65:66:30:b4:ff:d0:55:79:ff:5b:8b:b4:
         5d:f9:5f:d1:a6:75:0e:b2:a1:8e:f6:49:70:46:73:64:23:1e:
         aa:ab:fa:20:ee:ac:64:6b:ed:68:8c:f3:93:44:a5:4c:1c:b4:
         b8:53:7c:6d:b9:f5:22:95:fe:94:77:d3:1f:cd:53:1b:84:4e:
         2a:f9:76:56:42:d0:f0:23:f5:6e:e7:8d:2c:5d:15:7e:f0:e8:
         2b:76:9a:e1:82:7d:7a:5d:fc:92:46:81:17:b1:b2:30:be:f2:
         3f:da:a5:f2:05:d1:d9:f8:83:6b:3a:7f:ea:5c:36:6f:a6:c8:
         74:04:c8:60:02:0b:fd:19:e7:ca:97:44:cd:65:c4:8c:80:e5:
         1e:b2:56:3c:ca:63:76:be:9d:8b:96:10:dc:c9:18:91:a4:c4:
         14:ee:d2:c1:c7:84:c6:38:64:50:aa:25:5b:ef:6e:e7:a9:d9:
         c2:2b:4a:bb:8d:fe:ef:52:c9:bc:6b:00:49:94:5b:ea:35:ea:
         7e:18:7c:c6:4c:fe:d8:ab:97:ed:72:48:21:62:3f:d1:58:2d:
         1b:69:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:58 2024 by rpki-client on console-fra.rpki-client.org