Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33322d3434203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33322d3434203d3e20323639353032.roa (raw, json)
Hash identifier:          UMHAl9FtoSqfHIdie/ZpohkIsU54uTdhIcoiHpJpz7g=
Subject key identifier:   DA:EC:1D:2E:21:5B:6A:A4:7D:93:AF:AC:15:1F:D1:E0:C3:13:D7:A5
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       0A8755BFB2DA456D9715FF5C0B24FCEF656F2FC5
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33322d3434203d3e20323639353032.roa
Signing time:             Sat 25 May 2024 13:12:03 +0000
ROA not before:           Sat 25 May 2024 13:07:03 +0000
ROA not after:            Sat 24 May 2025 13:12:03 +0000
asID:                     269502
IP address blocks:        2804:6598::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:87:55:bf:b2:da:45:6d:97:15:ff:5c:0b:24:fc:ef:65:6f:2f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: May 25 13:07:03 2024 GMT
            Not After : May 24 13:12:03 2025 GMT
        Subject: CN=3082010A0282010100CF62809C99E97C1BB5F1A2708647A13ADE8067AC9C2A36D888F8503EACCC5AA492EB5B09F8FA5493B5EDF5332415D4CAA6DEA2229224AD0CF97BFC65C1C62FE0FBE9B28282D3410EE60B5457A025011C2D472B1C70A6E248C3811E9A317FBC6B96FEFE0AC9B5FE65A2778D6BC84F76C2C492D8A20C54B5E9499A06147E27820FC530324246F188137F61DCEE12EEBA5C317FD64F747E03AA17DE59672A6B02F64E5671B5AEE42813B89AE762810865B7AAD142F8094DE08C32443FDCEE070EABC62765D054899D3DF05F7140C69BC0FC9E31C0CDA769EEB3C96AEEEE2C0663E905BB21CEC3F934732A9E3780C03981DC613F7D6687CE4B5995CFBFD348EF68A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:80:9c:99:e9:7c:1b:b5:f1:a2:70:86:47:
                    a1:3a:de:80:67:ac:9c:2a:36:d8:88:f8:50:3e:ac:
                    cc:5a:a4:92:eb:5b:09:f8:fa:54:93:b5:ed:f5:33:
                    24:15:d4:ca:a6:de:a2:22:92:24:ad:0c:f9:7b:fc:
                    65:c1:c6:2f:e0:fb:e9:b2:82:82:d3:41:0e:e6:0b:
                    54:57:a0:25:01:1c:2d:47:2b:1c:70:a6:e2:48:c3:
                    81:1e:9a:31:7f:bc:6b:96:fe:fe:0a:c9:b5:fe:65:
                    a2:77:8d:6b:c8:4f:76:c2:c4:92:d8:a2:0c:54:b5:
                    e9:49:9a:06:14:7e:27:82:0f:c5:30:32:42:46:f1:
                    88:13:7f:61:dc:ee:12:ee:ba:5c:31:7f:d6:4f:74:
                    7e:03:aa:17:de:59:67:2a:6b:02:f6:4e:56:71:b5:
                    ae:e4:28:13:b8:9a:e7:62:81:08:65:b7:aa:d1:42:
                    f8:09:4d:e0:8c:32:44:3f:dc:ee:07:0e:ab:c6:27:
                    65:d0:54:89:9d:3d:f0:5f:71:40:c6:9b:c0:fc:9e:
                    31:c0:cd:a7:69:ee:b3:c9:6a:ee:ee:2c:06:63:e9:
                    05:bb:21:ce:c3:f9:34:73:2a:9e:37:80:c0:39:81:
                    dc:61:3f:7d:66:87:ce:4b:59:95:cf:bf:d3:48:ef:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:1D:2E:21:5B:6A:A4:7D:93:AF:AC:15:1F:D1:E0:C3:13:D7:A5
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33322d3434203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:7a:d9:d5:e7:3d:55:94:f5:af:6f:56:9c:24:39:5c:8f:53:
         f1:be:24:35:66:8d:9b:d9:87:b2:1e:0e:41:cb:dc:28:57:29:
         55:97:2f:4b:a7:e1:21:ac:1d:a9:0b:22:59:f9:3b:21:9c:0d:
         30:28:dc:35:2d:8c:5d:56:ef:01:fc:ed:b6:a6:0e:9d:d8:36:
         5a:9c:cc:b3:da:21:ba:ef:9b:2f:0f:9a:c1:eb:bc:2b:b9:32:
         36:e2:65:5d:5e:82:0c:1d:2f:47:39:58:f7:5e:c1:b6:58:8d:
         a0:84:3b:46:0b:74:4c:41:9f:7a:aa:ac:88:23:75:9f:5d:91:
         8c:b8:69:bb:f8:51:65:a8:c5:e2:13:04:bf:c4:2c:9d:df:4c:
         3b:f9:95:6f:d8:b4:24:8b:b0:01:e4:a9:cd:74:cc:2e:a6:12:
         bb:70:32:1b:2e:04:18:9f:b6:a8:10:e6:4e:c6:51:8e:7c:46:
         49:85:3c:4f:06:7b:89:40:de:44:b3:c0:ee:24:67:fe:ba:53:
         63:13:c8:e4:69:50:ad:8d:65:9f:35:66:00:d2:c0:85:9e:86:
         87:39:1b:f7:60:52:80:1b:5d:4d:bb:1c:ca:fc:e9:32:6e:a1:
         ac:f5:8c:14:23:9b:5a:54:cf:09:7b:26:47:b6:55:21:6a:d5:
         da:e2:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org