Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/323830343a323262383a3a2f3332203d3e20323634313138.roa
File:                     323830343a323262383a3a2f3332203d3e20323634313138.roa (raw, json)
Hash identifier:          F35oR4HKO0d9SBUe8tMIRByH27AQSaQui124ViBYAuQ=
Subject key identifier:   FE:BE:55:49:58:9E:FE:0F:CB:B4:61:80:F1:6F:7C:1D:FD:1F:8F:2E
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       7111494A2E71B6A922BE79AC342A4C9FB5BCDB0B
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/323830343a323262383a3a2f3332203d3e20323634313138.roa
Signing time:             Thu 04 Apr 2024 21:37:42 +0000
ROA not before:           Thu 04 Apr 2024 21:32:42 +0000
ROA not after:            Thu 03 Apr 2025 21:37:42 +0000
asID:                     264118
IP address blocks:        2804:22b8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:11:49:4a:2e:71:b6:a9:22:be:79:ac:34:2a:4c:9f:b5:bc:db:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Apr  4 21:32:42 2024 GMT
            Not After : Apr  3 21:37:42 2025 GMT
        Subject: CN=FEBE5549589EFE0FCBB46180F16F7C1DFD1F8F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:ef:93:56:c6:f5:3e:d1:ef:0b:5a:eb:2e:
                    75:10:e7:e5:63:98:d6:61:55:6c:ec:3a:be:c1:46:
                    23:75:b1:1b:ce:0b:1b:35:af:7f:8c:f2:f6:bd:28:
                    40:fd:3f:bf:25:35:29:7d:a6:91:d5:ec:05:94:c5:
                    c1:0a:9d:03:49:5c:54:ee:d8:e1:64:af:0a:25:9d:
                    a0:5b:4d:d0:bc:a7:35:f2:6c:cb:26:ce:75:23:08:
                    4f:d3:a2:8b:86:70:08:8d:51:4d:a5:d0:1e:56:a9:
                    94:8e:0a:a2:36:53:68:e6:73:66:34:c3:8f:4d:76:
                    ca:14:7a:de:f9:74:86:4e:88:81:ba:3a:fc:ff:55:
                    4a:14:15:53:ab:81:7c:89:bc:d0:8c:a4:83:4e:97:
                    97:7e:30:4a:5a:2c:65:1f:19:9e:da:e2:70:1f:ee:
                    74:32:3a:80:d7:5f:51:a6:ba:e8:b6:76:00:0f:64:
                    5a:04:fc:f0:69:94:73:80:1d:af:34:2b:1b:ff:ed:
                    84:d7:ce:b7:0a:6f:b7:8b:77:df:a3:94:6a:37:ec:
                    89:b2:24:9e:72:67:88:f6:ba:be:87:89:82:3e:59:
                    a8:35:66:ff:9d:91:1b:6e:fe:83:08:95:23:45:c3:
                    7c:4d:38:29:9d:dd:84:01:23:41:89:81:d6:df:d3:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BE:55:49:58:9E:FE:0F:CB:B4:61:80:F1:6F:7C:1D:FD:1F:8F:2E
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/323830343a323262383a3a2f3332203d3e20323634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:45:d0:cd:86:a5:84:71:9d:26:b2:eb:ae:24:e8:f5:2f:
         ab:81:a5:4a:38:9b:94:18:26:43:82:80:20:45:eb:12:b8:f1:
         2c:54:46:de:3a:64:2c:5c:dc:ba:f1:15:69:8b:19:32:1a:b3:
         36:53:78:1c:05:63:f9:40:9c:ca:37:02:e9:68:ca:36:58:92:
         d7:0f:66:ae:a4:4d:fc:c6:26:46:68:7b:e7:d0:db:76:25:eb:
         0a:5d:a3:a0:30:77:43:37:b8:f4:09:cd:16:9c:69:f4:95:ab:
         ab:d0:a1:e1:e0:9a:b4:c4:c8:19:ff:e1:c8:de:ff:a0:7f:2e:
         f6:4a:0c:e7:a3:31:e3:15:77:5b:7b:ad:bc:c5:dc:49:7d:84:
         17:91:cc:31:4c:93:ac:0e:13:42:ea:d8:0a:5e:d9:54:d5:be:
         11:51:9a:92:a2:00:74:b8:b2:dd:96:80:32:c8:1d:ab:3d:74:
         8b:a9:97:77:70:d8:d7:be:91:24:1b:31:ce:b1:7a:1f:00:8a:
         b4:7d:6f:b1:b0:84:68:e1:80:6b:b4:ed:d9:3f:bb:b5:6e:03:
         fa:ef:44:68:3f:d8:b1:79:7d:64:43:21:34:dc:d3:d2:bf:f5:
         dc:3b:f9:2b:e9:17:67:1a:2c:a1:90:df:4e:e8:e3:33:1e:3e:
         f0:37:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:07 2024 by rpki-client on console-fra.rpki-client.org