Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
File:                     323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (raw, json)
Hash identifier:          YGsG21UwYvg7OJLZ3+MUihQTniRG8fkS3ihHyc9pRAQ=
Subject key identifier:   DC:86:43:F9:40:6F:8E:A0:EE:AD:F6:01:65:5E:57:FE:EF:CF:A9:2F
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       7B8FD2BF8574CB96C2DC695B46455F7AC55C5105
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     267334
IP address blocks:        2804:4be0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8f:d2:bf:85:74:cb:96:c2:dc:69:5b:46:45:5f:7a:c5:5c:51:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject: CN=DC8643F9406F8EA0EEADF601655E57FEEFCFA92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:01:7f:c2:ac:ca:8c:4c:48:4a:27:8d:6f:
                    3f:80:2f:83:c1:4f:b5:97:ce:37:41:dc:66:3a:16:
                    4c:1b:92:b9:57:77:33:17:5e:39:62:13:e6:98:0a:
                    6d:81:19:79:00:4d:fb:d2:85:a7:0c:ec:52:35:54:
                    0c:63:c2:cb:7b:b0:fc:f6:30:53:55:5f:8a:3b:47:
                    00:f0:49:cf:8a:b2:4b:24:ef:9e:64:be:cc:52:c5:
                    e7:87:de:76:e4:dc:e0:2d:7c:88:d9:4b:c1:6b:c6:
                    99:92:86:6d:75:a2:e0:e1:3e:15:8d:41:ec:0a:69:
                    03:af:b1:1e:e0:7f:55:d2:ff:d5:f6:c1:7d:9d:04:
                    d4:7d:a1:14:80:8d:ed:34:74:11:01:d9:8f:9e:d5:
                    de:2c:b9:44:94:c8:09:3a:db:94:6c:78:f5:67:c5:
                    b3:0a:e2:fb:14:72:31:82:7f:c3:28:b2:31:7f:dd:
                    38:87:8e:9c:79:69:f9:86:28:f7:d7:90:ab:a8:ce:
                    32:3a:d6:29:8a:ec:1b:40:45:ae:9d:37:96:fe:2b:
                    56:5c:3f:52:e6:b8:b9:ce:46:2b:cd:d7:60:c3:67:
                    15:54:bf:be:fe:6f:33:ee:88:7a:8b:c7:0a:c0:0b:
                    81:9e:98:0c:9f:be:95:71:07:51:92:00:85:80:bd:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:86:43:F9:40:6F:8E:A0:EE:AD:F6:01:65:5E:57:FE:EF:CF:A9:2F
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:d8:38:a1:9d:0a:62:d6:16:10:a6:4c:5c:9a:5e:f2:ef:
         b4:1e:0c:e9:4d:e0:15:ee:35:f9:be:7e:6d:39:8d:0d:31:47:
         e0:e1:44:12:df:89:7d:d2:48:b3:6e:a0:54:eb:e7:f7:fe:eb:
         b0:d8:c5:d1:10:c2:8e:2f:66:64:00:c7:a6:30:ed:28:2f:d8:
         f3:49:f3:fa:d6:df:8f:9d:35:23:32:bf:9d:7a:ec:3c:cc:b6:
         10:6f:d4:bf:c8:e8:70:54:5b:46:a3:48:d7:d4:e0:49:21:d2:
         51:43:4a:88:db:86:a9:e8:10:ce:44:65:33:19:fe:7a:b4:33:
         50:c7:77:1e:57:ba:c8:7f:d0:53:78:33:de:d2:c7:c3:35:b9:
         9d:65:40:03:f3:57:58:90:97:fb:d6:b0:fe:06:46:70:8a:d0:
         62:c3:0a:7b:8b:58:3a:24:ba:04:ed:96:d3:45:92:75:8b:49:
         f2:ce:e1:c6:b7:7d:bc:2f:f9:10:82:fc:f9:e7:72:dd:1f:dc:
         c5:c5:f4:57:3a:fc:a2:d2:38:c2:03:25:f5:d8:bb:5b:8b:ce:
         d4:44:7c:df:91:31:5e:9b:e1:d1:40:45:70:59:1f:27:b4:57:
         6e:6d:95:a5:74:9b:c5:3f:c8:a1:a0:a4:40:b5:2c:5e:22:ca:
         25:d6:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org