Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/323830343a353463383a3a2f33322d3438203d3e203631353935.roa
File:                     323830343a353463383a3a2f33322d3438203d3e203631353935.roa (raw, json)
Hash identifier:          2eaxUpIWFPKUhsklddqOXEnCdPC3vS1xPUd0+7hfGZQ=
Subject key identifier:   5F:A3:2B:0E:E0:C5:01:CF:E5:0A:0E:20:05:E1:F7:A9:65:55:4C:7F
Certificate issuer:       /CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
Certificate serial:       30BB90731384E9576A6B6C15F0BB67263A47C293
Authority key identifier: 43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/323830343a353463383a3a2f33322d3438203d3e203631353935.roa
Signing time:             Thu 04 Apr 2024 17:45:58 +0000
ROA not before:           Thu 04 Apr 2024 17:40:58 +0000
ROA not after:            Thu 03 Apr 2025 17:45:58 +0000
asID:                     61595
IP address blocks:        2804:54c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bb:90:73:13:84:e9:57:6a:6b:6c:15:f0:bb:67:26:3a:47:c2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
        Validity
            Not Before: Apr  4 17:40:58 2024 GMT
            Not After : Apr  3 17:45:58 2025 GMT
        Subject: CN=5FA32B0EE0C501CFE50A0E2005E1F7A965554C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6e:b9:39:b0:43:4e:00:51:d6:8e:3b:bd:de:
                    9f:a5:d9:6d:c5:b6:af:92:4c:88:5a:91:29:84:df:
                    0c:4d:fd:ea:f9:72:cf:1b:56:73:81:09:3c:a8:60:
                    48:68:ef:33:8c:09:29:de:90:35:32:ec:92:32:94:
                    3c:e4:13:81:61:c4:ba:2e:c8:7a:b8:8f:10:51:3c:
                    68:a1:e3:11:e8:8a:0b:e5:2a:ea:ff:3b:40:5f:b8:
                    0c:04:16:ca:92:56:0f:99:da:5b:4f:fb:6b:c2:a6:
                    97:af:50:da:07:83:b8:2d:6f:7d:fe:60:ac:2b:2e:
                    a4:37:e1:49:51:7b:a5:79:9b:99:b1:ca:a7:00:bc:
                    e7:9f:65:5c:0b:ff:7b:bf:f5:a3:70:5d:74:83:1c:
                    e5:08:73:b6:bb:90:44:d9:93:f2:8f:fe:f7:b2:a3:
                    dd:2e:68:98:00:39:fb:aa:20:47:31:23:bb:50:87:
                    2f:2f:09:5c:0c:61:4e:76:64:fa:73:c8:34:11:0b:
                    a6:49:0d:a0:45:46:fb:26:0c:13:b6:cb:84:1b:7c:
                    68:cc:96:90:7d:d0:7d:d3:3d:4a:c8:1e:88:f4:aa:
                    af:a3:34:d0:72:bd:68:b8:0e:19:e3:66:9c:19:90:
                    91:3b:ae:f4:35:c8:8a:9c:e5:de:3d:fe:00:cd:ab:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A3:2B:0E:E0:C5:01:CF:E5:0A:0E:20:05:E1:F7:A9:65:55:4C:7F
            X509v3 Authority Key Identifier:
                keyid:43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/323830343a353463383a3a2f33322d3438203d3e203631353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:68:46:16:a1:45:c9:3f:be:e3:2b:92:d0:f8:ed:fc:23:
         d7:43:a9:f0:91:3d:85:5a:20:2a:e6:78:1b:12:12:d2:06:b6:
         21:88:d7:fd:01:e2:eb:7d:b5:bd:06:7f:7d:78:ce:c5:85:28:
         d4:94:32:21:78:0e:42:7d:4f:11:ac:8e:72:c4:fe:ac:02:a6:
         af:9f:ed:35:56:14:ae:6d:53:7e:e7:7c:25:10:8d:16:54:cb:
         96:0b:fc:31:8a:a3:3f:c5:2a:ec:42:cb:95:25:32:e3:b4:28:
         fd:25:24:e1:1c:aa:bc:dd:48:d1:35:bf:7c:bd:aa:23:ea:06:
         16:5f:8f:6d:04:a6:03:bb:bc:09:79:f1:80:e5:c8:e5:b2:a0:
         aa:3f:e4:ea:93:0b:53:e7:8b:62:ec:e8:45:13:b8:52:b9:c1:
         e0:2c:90:61:3d:0a:b6:e5:94:ee:c5:7d:14:e6:05:41:54:1f:
         27:70:25:88:9b:b2:49:5a:2c:c2:0e:3b:58:b1:c4:5d:68:45:
         52:3a:1d:d4:46:2a:11:28:98:c1:39:62:81:e9:f8:0f:3b:f1:
         6e:80:29:25:66:10:0d:b2:e7:61:36:5f:ab:e0:7a:ae:18:0c:
         d2:91:57:90:d0:b4:64:c8:58:f1:e7:69:16:e9:aa:4b:ab:9e:
         53:bf:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org