Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33322d3438203d3e20323638353436.roa
File:                     323830343a353264633a3a2f33322d3438203d3e20323638353436.roa (raw, json)
Hash identifier:          XVdHhkRBfW6ySiIgI5r1CNRC97iz0lUoVli4Jb4QEVc=
Subject key identifier:   0C:84:7D:AC:AD:08:6A:84:ED:BB:3C:FD:DB:E8:9C:78:82:85:30:5B
Certificate issuer:       /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial:       28E4591D13AE8EFAD1AC941FE4F773520F499B42
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33322d3438203d3e20323638353436.roa
Signing time:             Mon 12 Aug 2024 13:18:03 +0000
ROA not before:           Mon 12 Aug 2024 13:13:03 +0000
ROA not after:            Mon 11 Aug 2025 13:18:03 +0000
asID:                     268546
IP address blocks:        2804:52dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e4:59:1d:13:ae:8e:fa:d1:ac:94:1f:e4:f7:73:52:0f:49:9b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
        Validity
            Not Before: Aug 12 13:13:03 2024 GMT
            Not After : Aug 11 13:18:03 2025 GMT
        Subject: CN=0C847DACAD086A84EDBB3CFDDBE89C788285305B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:8e:cd:d0:0d:38:e7:e5:56:06:0b:f2:00:
                    0a:18:c7:7f:e2:38:dc:9e:19:c3:d8:13:91:d5:67:
                    a4:2e:29:36:04:4f:91:2e:3e:13:7a:e5:f7:06:f3:
                    52:12:1b:9b:6a:b1:8c:04:4a:a6:4c:5c:6a:55:16:
                    74:d6:2e:04:ff:bf:16:9e:29:dd:6e:a2:1a:5d:3c:
                    f4:28:e9:d2:24:08:e9:15:5e:62:a3:95:f9:6c:9b:
                    de:bc:6b:02:ee:49:dc:6f:9e:b7:25:e8:a1:b6:43:
                    3c:97:08:08:3d:02:dc:18:dc:4e:d9:5e:e2:3d:3d:
                    aa:a6:9c:07:a2:62:3f:58:70:9a:ed:ca:76:83:b5:
                    89:32:41:a6:26:eb:69:43:ee:e7:b4:06:6f:31:99:
                    91:3c:8e:43:5c:5e:3d:f0:72:0c:5d:fc:b8:33:50:
                    f1:e1:68:90:8c:21:2e:c5:dd:63:50:9f:bc:74:d7:
                    ae:3d:f0:72:b4:02:98:53:4b:96:cf:a8:a3:c7:3d:
                    9f:e6:65:7a:c4:d9:5e:ed:a8:ba:8f:de:f8:57:5b:
                    64:a2:1b:14:96:d6:80:59:88:30:11:4c:41:25:3f:
                    73:cb:60:bf:de:79:5e:e1:c0:d7:23:c4:9b:d3:aa:
                    15:a1:f1:a3:12:90:7b:05:6b:13:22:f8:87:53:e3:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:7D:AC:AD:08:6A:84:ED:BB:3C:FD:DB:E8:9C:78:82:85:30:5B
            X509v3 Authority Key Identifier:
                keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33322d3438203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:5b:3e:c9:b2:ab:5e:02:14:1e:a7:91:8f:46:a7:29:7a:
         d4:7e:44:1f:2c:53:5c:fe:96:94:31:fa:7a:cc:ba:23:5d:5e:
         e6:a7:c5:74:ca:e3:b8:02:f3:46:ba:e8:52:01:5f:ac:34:c7:
         cd:d7:2f:7d:8a:72:87:05:34:8e:73:6e:05:d3:ca:bc:fd:73:
         0f:25:17:22:e3:0a:0b:d0:be:33:9a:75:ff:ea:eb:ec:da:2e:
         ab:b9:e7:23:0f:b7:66:e1:e0:fe:25:0d:d8:d8:97:14:3c:83:
         d4:40:15:fb:69:87:3a:63:29:80:27:cf:3d:be:6e:1b:74:ee:
         49:78:40:84:0e:38:bf:20:33:e8:23:24:76:b3:df:b6:c5:e7:
         cf:4d:f1:08:df:b9:b3:20:1a:e0:b3:17:d6:c4:71:7a:b0:ce:
         c4:23:59:a4:e3:eb:44:d1:15:6f:4e:b7:22:83:fc:50:f9:51:
         44:f9:e5:63:6d:be:ce:7d:af:fe:b2:e3:aa:7d:a0:d3:04:23:
         8c:e8:44:f4:4f:be:a1:e7:74:9b:eb:a8:e6:29:f5:5c:22:90:
         9d:c9:4c:3c:e3:8b:66:c0:90:fa:fa:a7:a5:13:be:12:6d:3e:
         c7:b3:38:f5:ef:95:3a:1b:68:cf:61:2e:7f:ab:b2:a4:5e:bd:
         6b:18:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:00 2024 by rpki-client on console-fra.rpki-client.org