Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa
File:                     323830343a3565633a3a2f33322d313238203d3e203238313433.roa (raw, json)
Hash identifier:          zHvcFbXlyGlAays/UwiRnjdoGnh3BqviM0W/E8cKxHw=
Subject key identifier:   B4:71:F1:55:6F:4A:98:C2:51:99:D2:74:70:00:61:3F:96:5D:9F:49
Certificate issuer:       /CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
Certificate serial:       3DE4D1EFD4F4BCC4961EA0EA62412DA335775FE3
Authority key identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa
Signing time:             Fri 19 Jul 2024 14:09:06 +0000
ROA not before:           Fri 19 Jul 2024 14:04:06 +0000
ROA not after:            Fri 18 Jul 2025 14:09:06 +0000
asID:                     28143
IP address blocks:        2804:5ec::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl
                          rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e4:d1:ef:d4:f4:bc:c4:96:1e:a0:ea:62:41:2d:a3:35:77:5f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
        Validity
            Not Before: Jul 19 14:04:06 2024 GMT
            Not After : Jul 18 14:09:06 2025 GMT
        Subject: CN=B471F1556F4A98C25199D2747000613F965D9F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:72:1e:aa:6f:d8:61:22:e4:78:03:91:f3:
                    6c:68:d2:67:30:51:d4:cb:e1:74:25:76:f1:56:4e:
                    ba:25:06:f8:73:24:8c:bf:bd:d1:a1:f4:2e:e6:e1:
                    37:2a:5c:0c:32:17:54:ae:59:39:28:c2:6a:69:fd:
                    90:14:10:a8:91:cb:4a:ac:57:ee:9b:50:f0:3f:b3:
                    e1:fb:e0:7d:86:ad:06:4b:58:b6:d6:f6:c0:e4:56:
                    64:16:9f:4b:d1:f8:2e:e0:f7:a5:fe:71:1b:85:3e:
                    76:7b:54:70:57:0c:d2:70:55:81:bb:43:6e:cf:eb:
                    81:44:1a:f2:a2:76:04:10:98:cc:be:95:74:27:cb:
                    36:dc:9a:87:77:a8:1b:d3:81:48:c7:bd:f5:cf:4e:
                    d6:dc:62:2e:c3:22:b9:a5:49:13:d9:b2:6f:45:6d:
                    44:2f:ad:35:d6:c2:58:49:28:00:2b:08:f7:ee:27:
                    93:f1:e5:a1:0c:74:c5:44:51:9e:bd:29:a0:8e:b1:
                    f7:65:83:89:ea:64:c7:45:ce:8a:ec:be:fa:23:f6:
                    1f:60:f8:46:6e:f7:0f:39:fc:47:10:bb:6a:ce:55:
                    a1:7e:4f:8b:29:3b:91:d7:38:ae:5d:95:d5:47:e7:
                    d2:e6:74:fb:4c:2e:51:8f:aa:2e:80:0e:20:5d:e6:
                    97:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:71:F1:55:6F:4A:98:C2:51:99:D2:74:70:00:61:3F:96:5D:9F:49
            X509v3 Authority Key Identifier:
                keyid:3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:bb:55:fc:14:ac:49:55:44:d5:5a:47:53:7e:09:e7:fb:
         e9:3d:77:ec:29:78:eb:32:fc:73:b4:a8:44:c9:f8:b2:0f:2d:
         2a:5f:b7:ab:09:8a:5e:aa:e9:f6:e8:30:e4:53:04:9c:32:04:
         8e:ff:e9:2d:a8:dc:af:71:bb:c1:d9:41:f3:ed:f6:7e:89:04:
         de:4d:1a:fd:e5:0f:52:57:89:b1:69:2e:1a:1c:6b:7e:3d:ba:
         3f:21:02:82:ce:7f:ac:63:17:b7:49:b6:0a:53:3c:bb:60:2c:
         44:99:9c:f4:8f:51:66:73:ee:b2:42:ac:40:35:e7:5f:c5:6f:
         e8:54:76:13:16:f9:b5:ed:a3:3b:f0:6e:a0:ac:cd:c7:7d:2d:
         f0:40:56:41:75:2b:c9:2c:28:06:ca:2c:cc:49:b8:03:ab:48:
         68:d4:52:1f:c3:94:3f:8f:51:29:6c:2a:ca:81:06:2d:78:8c:
         80:6a:05:3a:3d:43:6f:a8:0a:67:08:d0:62:a6:72:08:d6:8e:
         12:ab:dc:75:58:67:7d:81:31:f2:5e:cf:e7:1e:d0:bd:25:8d:
         2e:84:12:12:7a:a5:ad:1a:1b:02:3f:be:5a:a4:18:91:77:f0:
         98:02:7d:69:2d:c6:13:ed:04:b9:4c:59:60:2b:5e:c6:aa:53:
         24:f2:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:32 2024 by rpki-client on console-fra.rpki-client.org