Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d3332203d3e203631393339.roa
File:                     323830343a313838633a3a2f33322d3332203d3e203631393339.roa (raw, json)
Hash identifier:          AdB/iJ607DWpbrNXAQDg12bZaGbs9LHqSGAR9l9ATn0=
Subject key identifier:   86:25:7C:46:65:86:CB:76:09:E0:8E:E7:29:2A:07:C0:DB:0B:E5:0A
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       0205AD2B3AF1E4F359E53FEA2CB039D5F2D50247
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d3332203d3e203631393339.roa
Signing time:             Sun 04 Aug 2024 22:43:10 +0000
ROA not before:           Sun 04 Aug 2024 22:38:10 +0000
ROA not after:            Sun 03 Aug 2025 22:43:10 +0000
asID:                     61939
IP address blocks:        2804:188c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 20:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:05:ad:2b:3a:f1:e4:f3:59:e5:3f:ea:2c:b0:39:d5:f2:d5:02:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: Aug  4 22:38:10 2024 GMT
            Not After : Aug  3 22:43:10 2025 GMT
        Subject: CN=86257C466586CB7609E08EE7292A07C0DB0BE50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:6f:ed:02:47:e9:4d:0f:c4:98:a1:4f:a7:
                    df:2a:be:07:22:b0:9c:c7:62:70:73:26:a9:34:b0:
                    25:53:a0:58:31:68:87:10:d8:2e:63:f0:a3:91:bf:
                    f0:d4:fe:18:fa:ee:a1:41:a5:38:8e:e2:3f:04:a5:
                    08:b5:d2:ac:a0:e3:5b:41:80:c4:ee:19:ef:14:1b:
                    9a:46:68:d8:d0:bb:d0:cf:0b:1d:f0:73:29:79:60:
                    73:1e:26:57:f2:0e:3d:e3:7d:92:d9:a6:0d:95:42:
                    fd:25:ec:2a:06:6e:59:72:3e:e1:6f:06:94:62:e8:
                    7d:4d:71:24:aa:07:a6:32:84:69:e7:ad:17:00:91:
                    a0:44:c5:60:27:23:ce:31:99:0f:e5:e5:ea:16:5e:
                    07:5b:66:dc:cf:38:2e:85:8f:48:d4:be:79:89:2a:
                    31:a9:da:3c:ac:84:f8:e0:91:55:c8:79:66:05:f3:
                    7f:3a:2e:b7:38:45:b8:5a:6d:73:b7:41:11:90:c1:
                    79:f0:f2:f0:2f:31:4a:ae:92:28:fb:24:46:09:30:
                    fa:0f:77:77:97:42:27:c6:74:70:f8:5c:93:2a:94:
                    45:d9:8c:8b:1e:39:63:32:01:6b:8b:9c:4c:75:56:
                    fd:20:40:0f:36:5f:f0:8a:4c:a7:62:2d:d4:a7:05:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:25:7C:46:65:86:CB:76:09:E0:8E:E7:29:2A:07:C0:DB:0B:E5:0A
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d3332203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:188c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:0d:4f:d6:40:05:4d:70:96:51:8f:9e:94:ce:42:d9:f6:
         a6:c8:82:f7:c7:f7:f6:a0:c8:30:aa:51:d7:16:31:53:b0:2c:
         85:30:e5:9c:f2:75:9c:b8:d5:60:4e:c0:fa:bd:d2:68:2c:0d:
         b8:b7:2b:22:89:b9:e1:cf:33:7f:f8:fc:6d:60:f0:5e:f3:6d:
         62:37:e3:90:93:7f:55:4e:75:1b:e9:ee:c1:29:81:0e:8b:db:
         3e:c5:e8:68:8c:ae:d3:fd:58:a7:01:d4:06:32:75:01:0b:ec:
         ac:f2:3b:3d:69:01:fe:4a:fb:87:1d:ed:83:e3:f5:9a:ae:85:
         ff:69:19:e7:d8:f0:2e:99:37:07:36:ea:ec:60:d2:37:13:ca:
         a0:48:bc:f7:ab:01:56:b5:65:73:2b:72:6f:39:60:8d:67:83:
         85:8f:d1:9f:1c:ba:71:c8:c6:b1:a6:a7:e5:f9:5d:c1:c5:80:
         b0:06:92:78:a3:1c:83:d7:04:40:fd:8e:77:ea:e1:e1:2d:33:
         fc:95:dd:5b:6e:9e:65:2a:e2:b4:06:ae:f3:88:7b:0b:9a:6e:
         29:5d:78:0b:ef:c0:3a:be:b1:9f:4f:92:39:23:a1:b8:22:70:
         15:68:6e:ee:e8:1d:65:fe:15:f3:19:89:02:b1:f6:73:59:3d:
         42:eb:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:48:58 2024 by rpki-client on console-ams.rpki-client.org