Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa
File:                     323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa (raw, json)
Hash identifier:          gm427+WBlod+SUEXyz9V4hrazrDbhXpwuR5mggdLLEc=
Subject key identifier:   82:39:AF:04:8E:DC:FF:FF:F9:34:8D:5E:95:43:1B:BF:6D:4C:72:2B
Certificate issuer:       /CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Certificate serial:       0A3712E279C6D834478E943D839B650BB4AA6326
Authority key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa
Signing time:             Tue 03 Sep 2024 18:32:41 +0000
ROA not before:           Tue 03 Sep 2024 18:27:41 +0000
ROA not after:            Tue 02 Sep 2025 18:32:41 +0000
asID:                     11097
IP address blocks:        2801:80:14e0::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:12:e2:79:c6:d8:34:47:8e:94:3d:83:9b:65:0b:b4:aa:63:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
        Validity
            Not Before: Sep  3 18:27:41 2024 GMT
            Not After : Sep  2 18:32:41 2025 GMT
        Subject: CN=8239AF048EDCFFFFF9348D5E95431BBF6D4C722B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:83:09:53:fb:97:3a:e6:69:59:60:51:d6:
                    9b:31:64:dc:50:7f:d7:81:fd:1d:e6:26:bd:ef:89:
                    df:3a:b9:71:dc:37:0d:cf:4a:fb:95:40:59:56:db:
                    3c:52:6b:58:89:e9:86:51:d1:a9:da:fd:b6:96:c4:
                    01:94:4d:5e:bd:51:ac:66:68:16:1e:e2:44:15:93:
                    83:37:3b:d4:60:9c:d0:91:12:67:10:3e:fc:f7:5b:
                    92:d4:70:2d:eb:13:e7:1b:aa:c3:4d:af:3f:cc:66:
                    0e:65:c3:3e:70:84:b9:ef:a6:be:93:19:85:90:41:
                    c7:2c:12:0c:ab:cf:93:41:94:73:d2:a3:17:a6:e3:
                    2b:d6:57:32:3d:3a:ab:78:06:c3:6a:9e:7c:0c:c3:
                    cd:ed:c9:21:b5:56:ee:95:a5:51:b8:9c:52:ce:9b:
                    98:57:b1:3b:77:e6:df:98:32:5e:2b:3c:a3:11:81:
                    20:e4:92:b8:1f:01:18:54:c3:1d:6d:d4:4b:eb:11:
                    5c:1c:d3:f1:d3:99:39:5d:e9:63:c4:02:a9:f9:eb:
                    62:6e:5f:15:76:0d:fc:01:56:bf:26:34:b4:bf:20:
                    01:1b:8e:8c:93:ce:6b:08:03:8d:94:29:95:f5:cf:
                    d0:89:2f:e5:cd:bf:54:f2:82:b9:b4:51:e4:2f:27:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:39:AF:04:8E:DC:FF:FF:F9:34:8D:5E:95:43:1B:BF:6D:4C:72:2B
            X509v3 Authority Key Identifier:
                keyid:BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:14e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b2:75:98:0f:3a:50:80:17:2f:3f:d0:48:15:06:20:3a:e9:83:
         f1:94:b7:2f:a8:1b:69:84:42:12:51:38:f5:ca:d8:83:76:27:
         1b:1c:ce:f2:0a:f8:12:12:49:80:c4:d7:d9:a5:26:d9:0a:4c:
         78:dd:90:3e:4a:1e:36:bd:96:4e:ac:5e:9e:4e:d6:9f:fa:24:
         15:25:e7:89:7e:ab:3d:44:84:3c:45:79:2f:94:9c:e0:d3:cd:
         3b:fe:18:49:80:fb:8f:5f:7a:91:48:9c:a6:42:74:36:41:f3:
         20:85:80:e8:c8:22:75:e6:d1:66:f5:ab:90:a2:42:92:4c:c4:
         fc:10:90:7f:b1:1e:4b:a7:c2:85:43:3c:5e:ad:43:59:ee:fd:
         2e:a2:07:d8:04:bc:14:d5:f5:a0:fd:bc:26:70:ed:ec:5a:42:
         d2:7f:a8:6b:1b:7a:9c:61:4a:9c:38:cf:9a:fc:f4:95:26:a5:
         0d:cd:cf:16:83:1d:fe:62:e9:1d:6e:0a:67:34:2e:ce:ff:28:
         86:9f:84:f9:72:73:c5:46:27:ef:89:9e:f8:95:5f:24:9c:15:
         71:8e:ec:07:cc:47:c5:49:fd:23:24:32:47:e9:9d:98:c5:ee:
         ab:fc:b0:26:8c:2c:9b:be:66:ce:1b:f6:37:b3:fb:06:0d:84:
         16:c6:d8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:31 2024 by rpki-client on console-ams.rpki-client.org