Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa
File:                     323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (raw, json)
Hash identifier:          7TeDUrU8KUp7KYzMns4RKwOPSpUkj0dypMomecxU/YE=
Subject key identifier:   DF:4F:3B:33:F2:84:76:18:FE:2A:F0:EC:98:08:8A:15:D9:15:CC:1F
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       38BA814AD530993DCD11DFC6942173D74F784903
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     267334
IP address blocks:        2804:4be0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ba:81:4a:d5:30:99:3d:cd:11:df:c6:94:21:73:d7:4f:78:49:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject: CN=DF4F3B33F2847618FE2AF0EC98088A15D915CC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:7a:02:12:34:f6:87:3e:23:90:32:02:67:
                    dc:cc:8a:a8:a0:04:59:3b:39:7c:99:35:6d:a6:56:
                    fd:29:f5:09:15:eb:6f:99:a3:09:40:2c:09:05:ac:
                    db:5a:ee:fe:24:1a:d3:41:4e:0e:7a:c6:a0:e9:34:
                    53:ac:53:b0:84:ea:71:16:da:82:f5:1c:c3:7f:12:
                    3d:67:d1:c0:a2:7e:e8:b9:f9:c3:31:48:1e:d9:d8:
                    9f:22:4b:f8:ee:53:0d:e0:b8:be:7d:92:a0:cd:9f:
                    a9:e0:6c:d4:29:5c:bf:21:d9:0f:51:0e:3b:cd:f2:
                    a9:3f:1f:60:19:c5:81:27:a1:07:83:7e:ce:06:72:
                    79:1a:e4:cf:70:26:14:b1:db:f7:e9:9c:3a:bf:58:
                    67:6d:fb:bb:de:ec:d8:42:40:d1:15:a2:0c:7d:15:
                    1d:aa:4b:9d:35:54:53:2f:a1:cf:48:d3:f4:7f:92:
                    02:d1:11:37:11:8a:af:14:15:e7:4f:54:80:80:e9:
                    91:c4:da:a3:bc:1b:5c:6f:49:20:85:07:d4:1d:7b:
                    9f:1f:8d:ca:50:fa:02:43:9a:be:e8:fc:31:f5:9b:
                    88:75:61:b1:80:c8:39:77:c0:8b:e9:15:56:62:97:
                    b1:a6:cd:a8:61:c6:28:22:0e:5e:90:5e:1b:cc:97:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4F:3B:33:F2:84:76:18:FE:2A:F0:EC:98:08:8A:15:D9:15:CC:1F
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:4c:6f:8a:08:5e:b6:35:ce:be:2f:e6:7d:be:c4:52:15:
         b6:09:dc:01:a7:57:36:cf:cd:fa:9e:b0:d3:2f:33:4d:a4:3a:
         78:70:af:55:84:b2:5f:8b:4e:10:b6:fc:6e:b8:15:58:57:97:
         96:7c:b7:92:1a:44:66:21:d6:60:63:e5:3e:97:03:e6:a7:44:
         e5:09:df:aa:a0:a8:97:93:ba:70:aa:55:5d:76:03:01:2c:cf:
         82:38:50:ae:cc:c4:ff:d6:32:63:c0:58:7d:77:94:1e:7f:53:
         84:74:3e:4e:99:7e:79:5d:02:f1:8b:51:bc:3b:39:55:76:46:
         11:4e:6e:1c:1c:d1:7e:38:1d:2a:d7:be:44:a0:d9:21:53:4c:
         70:e2:b0:e8:c5:59:6e:ee:89:c9:8f:e5:6c:2f:b5:ea:32:55:
         de:11:05:15:21:af:76:3d:e9:e5:b2:bb:f7:e8:7b:4f:c1:b7:
         fb:cd:4d:53:8c:9d:01:af:9a:6e:e5:0b:7e:0e:ca:e6:58:7b:
         21:7b:69:3b:6b:48:d3:fb:cc:f2:9a:d0:28:c4:24:e0:ae:f7:
         7e:8c:04:3f:ea:82:3d:56:28:c5:0e:52:07:e7:0c:75:18:b3:
         7e:3a:9c:91:59:2a:81:db:e6:21:bc:fa:0e:c6:5c:d2:94:0d:
         fe:a9:fb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org