Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/323830343a343838303a3a2f33322d3438203d3e20323637313235.roa
File:                     323830343a343838303a3a2f33322d3438203d3e20323637313235.roa (raw, json)
Hash identifier:          Cz3GPQyS6PoYIuudlbAzWULr2FVSUxkFZuLNqlZVuh8=
Subject key identifier:   8A:8F:A9:1F:2F:7B:D1:82:47:71:B6:EA:20:56:EF:02:A2:EB:97:3F
Certificate issuer:       /CN=61AD0EDC55E74D73B77ED252B44E764D2028B7A4
Certificate serial:       548B87260CC1C62DEEA1B9E14AFE1D53088A5284
Authority key identifier: 61:AD:0E:DC:55:E7:4D:73:B7:7E:D2:52:B4:4E:76:4D:20:28:B7:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/323830343a343838303a3a2f33322d3438203d3e20323637313235.roa
Signing time:             Thu 04 Apr 2024 02:00:16 +0000
ROA not before:           Thu 04 Apr 2024 01:55:16 +0000
ROA not after:            Thu 03 Apr 2025 02:00:16 +0000
asID:                     267125
IP address blocks:        2804:4880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.crl
                          rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8b:87:26:0c:c1:c6:2d:ee:a1:b9:e1:4a:fe:1d:53:08:8a:52:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61AD0EDC55E74D73B77ED252B44E764D2028B7A4
        Validity
            Not Before: Apr  4 01:55:16 2024 GMT
            Not After : Apr  3 02:00:16 2025 GMT
        Subject: CN=8A8FA91F2F7BD1824771B6EA2056EF02A2EB973F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:81:5e:67:50:63:64:7d:c8:e0:a3:8c:96:
                    e3:1f:6e:b9:bb:98:2a:ad:12:6a:ab:b5:31:0e:a4:
                    7a:a2:b9:49:b2:03:11:8a:7b:25:c7:3c:34:cd:db:
                    e6:5d:26:22:07:ca:18:36:53:cd:2b:76:4f:2a:bb:
                    74:ab:8c:76:7b:0e:76:d7:28:92:08:3d:06:3b:4a:
                    bc:bd:4d:cd:0e:60:81:f4:dd:2f:ad:da:3e:ba:70:
                    76:7f:29:3b:2c:d3:40:b0:7e:31:7a:39:60:dd:a8:
                    6a:cb:91:cf:d1:13:62:2a:ce:52:62:7b:62:c6:9e:
                    2c:3e:74:b6:3c:31:13:23:71:c3:a3:b4:2d:4f:cf:
                    08:c3:67:0b:87:45:fc:92:8c:f5:be:5f:8f:41:86:
                    51:e3:7f:c9:26:a9:d7:d4:2e:d1:37:dc:29:61:ed:
                    95:4b:a3:06:56:77:4e:37:4a:91:c8:0f:77:73:20:
                    24:12:fa:bb:db:33:3e:c4:e4:dc:b4:69:dd:89:aa:
                    1a:84:74:57:c5:b3:0a:6a:3c:f4:12:9d:59:b6:f1:
                    32:2b:d5:d9:e1:6d:16:c1:b6:3d:3b:f7:60:d3:8a:
                    f0:9a:0f:31:76:3f:36:e2:0e:7b:16:8a:04:a4:01:
                    b5:1e:70:50:16:9b:44:21:d1:37:5a:76:3c:58:9f:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8F:A9:1F:2F:7B:D1:82:47:71:B6:EA:20:56:EF:02:A2:EB:97:3F
            X509v3 Authority Key Identifier:
                keyid:61:AD:0E:DC:55:E7:4D:73:B7:7E:D2:52:B4:4E:76:4D:20:28:B7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61AD0EDC55E74D73B77ED252B44E764D2028B7A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/323830343a343838303a3a2f33322d3438203d3e20323637313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4880::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:6d:c2:e5:1c:9d:52:7d:df:51:8b:25:99:25:00:ad:da:
         1e:30:ee:f9:16:ba:5a:0d:1b:c7:ca:b7:ba:ff:69:52:7f:36:
         5f:a5:be:69:04:eb:c9:14:50:2f:29:b9:08:9b:e5:92:41:3e:
         1c:77:02:3d:19:d2:e1:a7:4d:ff:fc:cd:ff:04:0e:d9:21:e2:
         99:e6:82:b5:4b:fe:ef:87:92:ed:30:84:4d:f9:55:6a:9e:82:
         7b:01:87:6e:15:61:29:99:98:bd:ce:27:7b:48:10:8f:f4:63:
         57:db:0f:c5:6d:b6:64:8a:92:22:00:f8:76:2c:86:b2:ac:63:
         66:19:9b:e0:7b:41:16:2f:cc:0d:2a:c4:6f:d9:9e:ce:98:69:
         13:93:e3:45:44:3a:ae:03:6c:3a:3f:62:a1:13:6f:51:12:6a:
         81:a2:f2:d8:13:a7:d1:90:9f:0a:1c:46:8e:9d:76:2c:9f:b6:
         7d:5b:81:1d:0f:11:6c:fd:c0:1d:7e:c7:be:6a:1c:a7:05:fc:
         62:e1:8d:3b:42:83:26:b9:71:36:6f:b6:52:39:86:0e:66:af:
         bf:da:f0:f7:05:90:86:38:5e:a7:23:e3:2f:5b:eb:00:07:bf:
         6f:e5:54:ce:f9:df:d2:20:53:7f:cc:10:41:0c:d4:e5:66:dd:
         e2:19:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:51 2024 by rpki-client on console-fra.rpki-client.org