Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/323830343a343962633a3a2f33322d313238203d3e20323637323030.roa
File:                     323830343a343962633a3a2f33322d313238203d3e20323637323030.roa (raw, json)
Hash identifier:          M8f3gluPUJHu3UKddostU1iR2xAO8mmjaVORnWYfYys=
Subject key identifier:   2C:5D:AE:55:0B:42:A0:93:34:EB:2B:BA:34:A5:AC:5D:7A:E8:82:6C
Certificate issuer:       /CN=18EBC5963DCD1282AB48ECABA9F118AE558F786C
Certificate serial:       199D191EBCEDF49BCC3AED5079A5A4BC5C9A68E4
Authority key identifier: 18:EB:C5:96:3D:CD:12:82:AB:48:EC:AB:A9:F1:18:AE:55:8F:78:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/323830343a343962633a3a2f33322d313238203d3e20323637323030.roa
Signing time:             Thu 04 Apr 2024 03:00:15 +0000
ROA not before:           Thu 04 Apr 2024 02:55:15 +0000
ROA not after:            Thu 03 Apr 2025 03:00:15 +0000
asID:                     267200
IP address blocks:        2804:49bc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.crl
                          rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9d:19:1e:bc:ed:f4:9b:cc:3a:ed:50:79:a5:a4:bc:5c:9a:68:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18EBC5963DCD1282AB48ECABA9F118AE558F786C
        Validity
            Not Before: Apr  4 02:55:15 2024 GMT
            Not After : Apr  3 03:00:15 2025 GMT
        Subject: CN=2C5DAE550B42A09334EB2BBA34A5AC5D7AE8826C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:e2:62:ed:4b:0f:e0:d6:d8:4b:c7:72:27:
                    5e:a5:09:a7:e7:52:18:b5:3a:bc:5b:42:c6:4f:08:
                    f4:7f:47:8d:45:9a:85:91:c8:0b:4c:79:22:14:fb:
                    96:9d:df:1b:8c:e5:a4:88:f6:ae:3e:21:44:ae:61:
                    45:4c:2e:cc:32:75:03:92:eb:e8:d0:73:49:d9:f9:
                    e8:aa:4b:4b:55:96:f0:bb:1e:68:36:89:2e:e0:d0:
                    16:24:11:75:64:bc:c5:fc:f6:e3:89:b3:9e:0e:66:
                    51:69:25:4c:65:35:d5:eb:e7:cb:6a:3a:80:1f:1d:
                    a8:b1:07:e7:fc:41:b1:08:85:70:16:ee:51:5b:f5:
                    80:4c:51:93:2f:d8:67:d1:13:2f:e3:6f:68:bc:af:
                    3e:99:4b:af:c3:8a:88:b7:55:8f:72:c8:54:32:53:
                    83:21:b6:f7:d4:b8:c9:dd:25:9d:3e:a4:f9:4a:81:
                    1f:7c:87:aa:c3:17:7b:2e:29:b8:21:74:13:a4:a5:
                    8b:10:8a:bd:a5:7e:43:af:6c:0e:8c:bc:95:aa:8d:
                    a2:d3:13:f2:b5:cd:50:6a:dd:ac:1c:20:c9:95:4f:
                    f8:64:e6:a9:30:4f:10:db:bf:c1:b5:26:63:fb:ea:
                    6a:a6:7d:9b:2a:4c:81:10:7e:d4:05:fc:8e:70:63:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5D:AE:55:0B:42:A0:93:34:EB:2B:BA:34:A5:AC:5D:7A:E8:82:6C
            X509v3 Authority Key Identifier:
                keyid:18:EB:C5:96:3D:CD:12:82:AB:48:EC:AB:A9:F1:18:AE:55:8F:78:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/323830343a343962633a3a2f33322d313238203d3e20323637323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:ab:9d:6c:3e:3b:c3:f0:48:39:eb:9d:f5:0c:08:c6:02:
         16:a6:6d:12:06:95:57:79:e4:ea:e9:08:10:0d:0b:c9:2d:fd:
         cf:69:4e:a8:63:38:f7:00:86:1a:3b:eb:60:65:84:4d:99:5f:
         07:93:cc:e4:ab:0e:65:49:19:c8:fb:9a:dd:ac:1e:c2:df:0e:
         95:7b:26:2f:bf:c8:3c:98:78:2b:23:1f:bf:2e:05:cb:4b:06:
         b4:3e:86:35:b4:ae:ca:0d:84:93:37:95:c4:da:07:9d:21:b4:
         49:1c:cb:9f:e0:44:a7:7a:7b:db:87:8b:72:2f:5e:ce:f2:51:
         8e:89:52:a4:17:14:48:61:cf:d2:05:e5:31:72:95:c3:59:b2:
         1d:5e:d6:27:30:6a:03:9d:82:c6:43:7b:6d:2f:65:e6:33:c7:
         17:c3:34:b3:68:60:ed:fd:80:23:3f:aa:3c:82:6f:c6:46:0e:
         21:35:39:11:83:1b:68:0e:84:f6:a6:f2:b9:b6:aa:6a:b6:b3:
         29:ec:fc:dd:9a:eb:d4:f8:8f:ba:bc:76:23:12:75:3d:30:66:
         cf:43:6b:a2:02:a4:4f:72:c3:97:f4:ea:4a:7d:e0:64:d7:05:
         44:8e:4d:e6:d3:86:73:b8:5c:dc:16:04:f0:e1:e5:e4:bf:fc:
         8d:41:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org