Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/323830343a333037383a3a2f33322d3438203d3e20323634393533.roa
File:                     323830343a333037383a3a2f33322d3438203d3e20323634393533.roa (raw, json)
Hash identifier:          2jRh4OC6O8ir4fm3ZBChReF+Kz4iAeRBjOVCNBvIO0U=
Subject key identifier:   B5:A7:7E:92:F1:A0:F9:6C:7E:FE:15:E8:24:D2:B4:6D:7C:F5:48:9F
Certificate issuer:       /CN=E6A6493F94A8507877191030829BC5477C5A89E2
Certificate serial:       25F58B9793E0FF2A7839679FBA46FB9CEEA2DF25
Authority key identifier: E6:A6:49:3F:94:A8:50:78:77:19:10:30:82:9B:C5:47:7C:5A:89:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A6493F94A8507877191030829BC5477C5A89E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/323830343a333037383a3a2f33322d3438203d3e20323634393533.roa
Signing time:             Thu 04 Apr 2024 23:20:55 +0000
ROA not before:           Thu 04 Apr 2024 23:15:55 +0000
ROA not after:            Thu 03 Apr 2025 23:20:55 +0000
asID:                     264953
IP address blocks:        2804:3078::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.crl
                          rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A6493F94A8507877191030829BC5477C5A89E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:8b:97:93:e0:ff:2a:78:39:67:9f:ba:46:fb:9c:ee:a2:df:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A6493F94A8507877191030829BC5477C5A89E2
        Validity
            Not Before: Apr  4 23:15:55 2024 GMT
            Not After : Apr  3 23:20:55 2025 GMT
        Subject: CN=B5A77E92F1A0F96C7EFE15E824D2B46D7CF5489F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:68:ec:ce:3c:c0:87:f9:85:ac:e4:3f:c0:
                    54:56:5f:e2:55:34:c8:34:95:48:c6:b2:2e:c1:d1:
                    21:9d:c0:ee:44:60:14:5e:8b:11:58:6e:45:61:e7:
                    0c:22:ad:8b:c4:7c:e0:40:b1:a7:e7:b2:18:ea:e2:
                    f1:4b:99:8e:0e:9e:60:78:e4:ba:6a:61:4b:70:f8:
                    71:3e:d2:63:db:6e:b7:e2:5e:a5:07:6a:53:e9:c3:
                    7b:df:7e:60:c8:ef:45:86:9c:b8:d8:4f:33:36:57:
                    ba:f8:c3:06:2c:67:55:aa:64:6d:3e:85:f5:c0:31:
                    58:4c:41:d2:1f:d0:3b:14:01:ee:22:f5:83:b5:8a:
                    5f:e4:1d:1d:8b:0e:72:7d:de:3f:b4:c6:91:05:df:
                    25:de:de:08:69:aa:a5:86:46:09:54:78:40:e5:c3:
                    bd:d9:9b:7f:dc:f9:2c:9b:6b:a7:35:92:9f:dd:e7:
                    0a:eb:7e:98:a8:8d:36:ef:de:03:e9:46:48:f4:2a:
                    01:f7:ff:86:2d:31:93:9a:2e:01:1a:4c:00:7f:79:
                    e4:96:17:42:fd:20:be:5c:de:25:7b:45:8d:5e:82:
                    f0:21:db:7f:fa:2e:92:0b:4d:d1:22:62:20:05:e8:
                    12:66:ba:16:91:ce:a9:74:85:bc:a6:60:f2:aa:17:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A7:7E:92:F1:A0:F9:6C:7E:FE:15:E8:24:D2:B4:6D:7C:F5:48:9F
            X509v3 Authority Key Identifier:
                keyid:E6:A6:49:3F:94:A8:50:78:77:19:10:30:82:9B:C5:47:7C:5A:89:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A6493F94A8507877191030829BC5477C5A89E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/323830343a333037383a3a2f33322d3438203d3e20323634393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3078::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:56:48:2c:cf:2c:fe:5c:71:b6:74:c0:52:e5:16:d5:25:
         4c:6f:ac:04:ea:18:ec:08:6d:01:00:12:43:a6:51:17:40:2e:
         4c:cb:14:6b:99:7b:26:fd:10:11:58:03:05:85:14:ef:1c:c6:
         8e:9f:2b:34:d9:68:78:11:58:23:bd:8b:d2:31:cb:cf:3c:a7:
         9b:cb:66:5f:78:91:ac:d9:a8:85:2a:7b:83:f5:4d:b9:c9:b1:
         4c:44:28:97:23:0c:09:e0:3c:4e:9b:cc:6d:92:eb:df:46:9e:
         8b:31:c5:e5:76:f0:6f:dc:5f:56:b8:2a:20:f4:ba:2d:7d:4c:
         21:e8:90:16:c2:97:9b:10:25:a7:85:2b:62:ba:c0:d7:ce:06:
         f9:ad:73:38:b0:12:df:33:aa:af:a8:c9:01:36:20:70:67:6f:
         3a:13:c3:8e:f4:1c:64:a3:bb:9a:d2:4b:7d:2a:48:5c:02:49:
         a6:fc:11:d4:a0:3a:45:a0:c4:0c:08:c0:c9:e5:c2:4f:a7:c5:
         8d:24:d6:80:f0:54:06:ce:2b:07:54:a7:7f:66:fd:53:6d:15:
         b0:e3:0e:35:51:b9:f3:b3:d1:03:2c:47:fc:f6:95:f3:d9:3e:
         d7:33:c5:b3:9b:3c:2a:e6:ee:1b:2c:90:1f:99:c9:c0:01:07:
         0d:04:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:53 2024 by rpki-client on console-fra.rpki-client.org