Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa
File:                     323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa (raw, json)
Hash identifier:          8KTUOKxuKiKp/+H9v7IDsliWhhbAynHP/nYvwLKCszc=
Subject key identifier:   BE:6A:6C:8C:F2:53:18:19:9E:BE:F5:89:5A:28:79:EB:95:19:94:72
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       1B2A7AAF80E3E36418C5B4AAB63C1E5A7B44DE07
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa
Signing time:             Thu 04 Apr 2024 07:48:35 +0000
ROA not before:           Thu 04 Apr 2024 07:43:35 +0000
ROA not after:            Thu 03 Apr 2025 07:48:35 +0000
asID:                     262354
IP address blocks:        2804:828:90::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2a:7a:af:80:e3:e3:64:18:c5:b4:aa:b6:3c:1e:5a:7b:44:de:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Apr  4 07:43:35 2024 GMT
            Not After : Apr  3 07:48:35 2025 GMT
        Subject: CN=BE6A6C8CF25318199EBEF5895A2879EB95199472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:fb:f0:4a:58:63:3e:64:52:f3:80:d2:f1:
                    5f:3a:83:ba:36:96:53:39:c1:f5:44:a2:ba:20:93:
                    e3:fd:9b:ff:00:f7:d4:ae:5d:3b:6e:42:fa:94:30:
                    dc:05:e0:65:33:76:f7:54:db:dd:31:ff:43:35:05:
                    27:ff:46:26:cb:eb:a1:bf:17:d0:9e:18:3f:b0:86:
                    2a:0c:51:de:4b:1f:fa:75:8a:a1:af:44:69:8f:62:
                    e7:0f:a7:e7:9d:2d:ea:18:48:17:5e:2c:31:9d:a4:
                    09:11:b0:78:2c:65:3a:30:e1:3a:32:90:65:53:6a:
                    d6:2e:4f:7d:c7:9c:7e:d1:d8:92:29:5b:c0:93:e7:
                    8a:ee:fd:46:b2:18:00:8f:0c:d3:f5:5f:89:41:38:
                    22:57:6d:ca:f3:14:49:e5:46:1f:63:7e:fd:f2:df:
                    c6:5f:fd:aa:5d:54:e5:e1:85:a5:b5:11:bc:c0:3c:
                    7c:60:61:96:d2:ee:ee:9b:82:4d:e7:37:cd:8d:50:
                    fc:2a:6f:99:b9:ff:de:80:1d:b6:e1:67:37:79:c1:
                    57:f5:d8:43:b8:60:0c:97:7e:5a:c3:94:22:b9:98:
                    49:59:40:23:50:9f:c1:52:c0:f5:a5:8a:05:b4:c6:
                    d3:f4:c4:65:ea:72:b1:f5:bc:d8:26:b9:ff:54:71:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6A:6C:8C:F2:53:18:19:9E:BE:F5:89:5A:28:79:EB:95:19:94:72
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a39303a3a2f34382d3438203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:51:3c:1c:c6:e1:2b:37:3d:f7:90:d8:97:8a:0c:73:e0:
         ce:70:25:d6:9c:c5:6a:fc:3c:d7:f6:79:46:44:60:be:22:98:
         b3:bc:c9:4c:9a:5e:4b:1d:84:2a:5c:ac:4a:ae:32:78:a6:99:
         64:1c:00:87:d3:7b:3b:05:5b:9d:51:4a:a3:46:c5:9a:07:05:
         8c:86:e6:20:b9:f7:2c:6e:69:2f:1f:b8:9f:67:31:99:80:7d:
         d2:12:bf:87:23:c9:42:d7:cb:1e:f5:ed:21:54:4b:ed:c5:a9:
         e9:bb:23:7b:17:1a:4a:d3:c3:33:22:82:81:c8:ba:ac:32:8a:
         74:2a:d7:90:62:64:06:a2:9a:cc:c3:08:f6:c3:f3:aa:41:68:
         d6:eb:89:a8:56:8e:6b:76:12:f1:5e:b9:ba:fe:d2:a4:34:6b:
         ce:5f:8f:a0:e8:54:de:e4:3c:80:7b:54:09:7c:5a:3e:93:d5:
         98:81:04:3b:1e:09:ff:2d:1d:47:e6:c3:36:23:45:94:bf:27:
         44:88:0d:c0:33:01:e4:5c:62:2a:fc:25:d1:0e:cd:69:f1:9d:
         5d:61:73:f6:20:a5:ce:cf:3f:59:f6:46:11:1f:c7:e0:41:a3:
         e3:64:34:e1:8a:f1:75:ad:66:f5:b0:18:55:0f:44:8d:63:af:
         3f:fd:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org