Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa
File:                     323830343a376136303a3a2f33322d3430203d3e20323731333637.roa (raw, json)
Hash identifier:          gIHp609pQ9bKTLjI7B7CdXXeZQUScMGjY4nDdZWvPV0=
Subject key identifier:   CA:D3:51:48:71:82:A6:86:39:64:C7:F2:F0:0E:EC:B1:8C:F4:24:F6
Certificate issuer:       /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial:       5BA9B9AA005F93B30F8A403902EC8487FAD1594A
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     271367
IP address blocks:        2804:7a60::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
                          rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a9:b9:aa:00:5f:93:b3:0f:8a:40:39:02:ec:84:87:fa:d1:59:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject: CN=3082010A0282010100C0B104F3CF171E7777A16A66682E8FC2BCE0145E2BDFD0A515B5900BF7377699FA7C019B5BA2E0BD4593BBEDBC08F572408203C9E183E801EE1989D483D4C77AD078E8FD6F3238086B0F092B80CC4AA7F4E3E9064F68C11078B8D44DB0A1442AEEDC92F32511388A815887FDB41105B608B0C87A2304E00D7A325C033848A98220EF414EAB3BBB49448F463D7DADE6A9859B040BD408C3FB6B5EA4ABE60ECFB62C2C0F8931ECE9BF94B68E22D7D3BB3E9168B1782E63482481A1ED39176EBE9D3B832D8432A380CB7473A965B207DEC3DCD52D3E948E5B978E563ED3082D63F8F0DD404C4FA0CC3EE61C87E99C162BDDE7BECEB4C91BF08E03D9EC58383202EF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:04:f3:cf:17:1e:77:77:a1:6a:66:68:2e:
                    8f:c2:bc:e0:14:5e:2b:df:d0:a5:15:b5:90:0b:f7:
                    37:76:99:fa:7c:01:9b:5b:a2:e0:bd:45:93:bb:ed:
                    bc:08:f5:72:40:82:03:c9:e1:83:e8:01:ee:19:89:
                    d4:83:d4:c7:7a:d0:78:e8:fd:6f:32:38:08:6b:0f:
                    09:2b:80:cc:4a:a7:f4:e3:e9:06:4f:68:c1:10:78:
                    b8:d4:4d:b0:a1:44:2a:ee:dc:92:f3:25:11:38:8a:
                    81:58:87:fd:b4:11:05:b6:08:b0:c8:7a:23:04:e0:
                    0d:7a:32:5c:03:38:48:a9:82:20:ef:41:4e:ab:3b:
                    bb:49:44:8f:46:3d:7d:ad:e6:a9:85:9b:04:0b:d4:
                    08:c3:fb:6b:5e:a4:ab:e6:0e:cf:b6:2c:2c:0f:89:
                    31:ec:e9:bf:94:b6:8e:22:d7:d3:bb:3e:91:68:b1:
                    78:2e:63:48:24:81:a1:ed:39:17:6e:be:9d:3b:83:
                    2d:84:32:a3:80:cb:74:73:a9:65:b2:07:de:c3:dc:
                    d5:2d:3e:94:8e:5b:97:8e:56:3e:d3:08:2d:63:f8:
                    f0:dd:40:4c:4f:a0:cc:3e:e6:1c:87:e9:9c:16:2b:
                    dd:e7:be:ce:b4:c9:1b:f0:8e:03:d9:ec:58:38:32:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D3:51:48:71:82:A6:86:39:64:C7:F2:F0:0E:EC:B1:8C:F4:24:F6
            X509v3 Authority Key Identifier:
                keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3430203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:ec:24:50:4d:07:d1:20:24:a9:9a:8f:d2:6c:d0:61:19:
         3d:73:e0:76:fd:d1:95:fa:86:c3:17:3e:37:7c:2d:4d:a9:73:
         34:44:7c:2c:ab:d3:5b:a7:e5:77:d5:47:f1:18:c6:62:bb:9e:
         f1:e2:d1:07:b4:8b:a7:bb:65:c0:93:6a:4f:7a:71:fb:99:bf:
         bd:85:65:02:2f:3e:3b:23:a4:fc:f7:7e:44:19:f7:70:71:1f:
         95:74:45:6a:08:22:a5:97:d3:10:af:c4:91:ea:85:24:77:5d:
         88:16:66:df:1a:60:80:46:65:7e:3b:7d:0b:a6:7a:7c:a0:1c:
         43:4f:fb:0e:02:52:ee:e8:12:fd:0e:02:2f:80:8e:db:54:de:
         64:70:9b:bc:31:4b:c5:48:78:af:69:d9:f4:59:32:81:ba:9d:
         3a:2d:8b:8d:5a:fd:24:a7:67:01:60:ab:2c:31:77:6a:5e:c8:
         ea:17:83:c2:de:d5:30:1f:c3:82:73:b1:7d:f5:4b:41:6a:87:
         d4:93:71:73:cf:7b:7d:a9:ff:7d:66:54:32:56:17:ef:2a:8a:
         7a:71:6f:f3:ae:5f:17:5a:e7:db:1f:63:d9:a6:0e:60:e9:69:
         68:44:dc:3e:4d:7d:a3:24:c3:ed:f9:b0:9b:80:1e:0c:38:54:
         90:e5:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org