Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/323830343a6132633a3a2f33322d313238203d3e20323633303238.roa
File:                     323830343a6132633a3a2f33322d313238203d3e20323633303238.roa (raw, json)
Hash identifier:          TDgqmmrEWmksCQlPrfRdSN4qGvJlOmoPARj40bvZFiU=
Subject key identifier:   8D:4D:FB:FE:27:A4:47:41:09:D0:12:95:28:F3:A3:8D:46:17:F0:ED
Certificate issuer:       /CN=BCB67FAEE70CAE205D5105EC24B4E2684D1791FE
Certificate serial:       0ED508EF3AA74332FA9D999C01B741CFAB77C8CF
Authority key identifier: BC:B6:7F:AE:E7:0C:AE:20:5D:51:05:EC:24:B4:E2:68:4D:17:91:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/323830343a6132633a3a2f33322d313238203d3e20323633303238.roa
Signing time:             Thu 16 May 2024 12:19:30 +0000
ROA not before:           Thu 16 May 2024 12:14:30 +0000
ROA not after:            Thu 15 May 2025 12:19:30 +0000
asID:                     263028
IP address blocks:        2804:a2c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.crl
                          rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d5:08:ef:3a:a7:43:32:fa:9d:99:9c:01:b7:41:cf:ab:77:c8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB67FAEE70CAE205D5105EC24B4E2684D1791FE
        Validity
            Not Before: May 16 12:14:30 2024 GMT
            Not After : May 15 12:19:30 2025 GMT
        Subject: CN=8D4DFBFE27A4474109D0129528F3A38D4617F0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:e4:82:0f:08:97:c8:cf:5f:3c:8c:07:4d:
                    0f:df:41:12:e1:51:5b:16:45:a4:cf:12:3a:78:55:
                    2e:6b:2a:37:57:ac:93:b8:4e:a1:bd:3b:88:a5:1c:
                    90:f3:72:bc:b9:77:31:3c:4b:21:fd:e8:4e:31:22:
                    78:08:a0:56:a9:cc:d7:3c:bf:95:bf:35:1a:50:6e:
                    90:78:5c:b7:d6:dc:e2:ca:44:c2:bb:8a:f2:ad:f1:
                    25:6d:4b:b4:2e:0e:42:a9:2d:6f:a5:99:22:a0:fc:
                    13:1e:10:61:b0:b7:19:7a:e0:4e:92:00:87:6e:ec:
                    2e:93:5d:ad:61:3a:64:25:bf:e6:aa:a4:a1:84:99:
                    03:fa:57:fc:f1:58:e4:38:91:8d:b1:69:55:ed:47:
                    31:0e:c2:fa:c2:4a:e8:fa:63:bb:c3:d0:62:cf:d0:
                    78:a5:39:a5:c8:bd:73:9a:ba:4a:01:80:d3:7d:96:
                    f5:9c:cb:9a:2e:40:cd:b5:62:c0:d8:d4:25:96:44:
                    d9:30:80:4d:23:2f:1b:66:5a:be:f3:58:27:27:3d:
                    ba:00:87:f5:05:2b:5a:b1:43:f5:26:d4:29:d6:29:
                    5c:7c:3b:c5:d5:28:7c:d5:ed:81:12:87:2b:ca:a5:
                    ba:13:39:c3:8c:ab:0b:e8:ae:bc:99:d6:e1:e2:dd:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:FB:FE:27:A4:47:41:09:D0:12:95:28:F3:A3:8D:46:17:F0:ED
            X509v3 Authority Key Identifier:
                keyid:BC:B6:7F:AE:E7:0C:AE:20:5D:51:05:EC:24:B4:E2:68:4D:17:91:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/323830343a6132633a3a2f33322d313238203d3e20323633303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:75:15:03:00:d8:1c:79:40:22:35:54:20:56:fa:8f:b7:
         cb:5a:94:94:76:c7:e6:8d:8e:a5:4b:9c:a5:7c:b6:65:f0:1d:
         ff:0a:1b:e6:cd:b3:27:af:03:b9:09:cd:f6:ba:a4:e9:02:64:
         0e:bf:c3:be:4e:b2:9b:6b:9b:00:1a:9d:76:a8:61:cb:9e:f0:
         71:34:68:01:ec:5c:89:ac:6a:dd:9a:68:03:9c:e3:87:f0:38:
         35:8e:ef:86:79:bf:49:09:42:77:0b:50:f6:8d:45:59:e4:e3:
         a5:da:7a:2f:50:b3:64:44:d0:4f:fb:f5:f4:d2:27:94:40:3e:
         ef:13:d4:63:0f:4e:e1:d3:2d:4b:2e:79:4a:fe:76:01:28:6f:
         98:e3:48:82:cb:3e:83:72:c2:4c:02:ad:f6:3f:49:7d:01:a2:
         ed:d8:e7:76:20:4f:a3:75:cf:a8:9b:36:a3:1d:fc:d1:86:7e:
         be:52:df:e6:49:4d:53:42:fd:f2:fe:42:10:15:8a:be:8f:1d:
         a6:e7:4d:82:03:56:05:d3:e7:cb:97:45:98:fe:fe:0b:0d:b9:
         3b:4d:0a:29:b0:c9:a3:b8:45:7a:46:11:18:68:11:90:d1:61:
         eb:c3:06:1c:61:75:22:4f:81:d6:62:84:f5:4c:b6:bf:52:a4:
         cd:55:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:31 2024 by rpki-client on console-ams.rpki-client.org