Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa
File:                     323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa (raw, json)
Hash identifier:          HzUPA4nixJ8x0EkY2ZZHZx3aXCPlhWG0uFwXN8epI1U=
Subject key identifier:   D5:B2:3A:8B:C4:C1:B5:86:4B:75:51:BD:99:86:69:63:9B:A9:4A:49
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       7337C9D6A721A0456A94227CDBEB9AFC3B8762BE
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:32 +0000
ROA not before:           Thu 04 Apr 2024 10:53:32 +0000
ROA not after:            Thu 03 Apr 2025 10:58:32 +0000
asID:                     263500
IP address blocks:        2804:12d8:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:37:c9:d6:a7:21:a0:45:6a:94:22:7c:db:eb:9a:fc:3b:87:62:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:32 2024 GMT
            Not After : Apr  3 10:58:32 2025 GMT
        Subject: CN=D5B23A8BC4C1B5864B7551BD998669639BA94A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:c4:7e:4d:cc:22:19:34:b6:b2:57:05:ca:
                    07:5f:67:ce:b7:83:79:b0:7d:ce:a7:4c:80:09:c0:
                    3e:2a:2f:8a:36:a4:88:df:08:e6:dd:b7:c8:ce:0f:
                    17:db:17:21:dd:af:c9:7b:46:8c:f3:7d:37:00:51:
                    c7:d8:57:07:1b:81:ab:04:2f:3e:74:df:2f:9b:28:
                    c2:90:01:78:0a:ea:cb:bd:ba:1e:c9:6b:82:7f:ec:
                    76:6f:97:6e:88:e4:fe:97:22:57:2f:02:2f:68:4e:
                    84:99:4b:36:5f:8e:1c:a2:30:ff:ac:ec:b6:78:30:
                    2a:25:fe:09:dc:d9:05:aa:b8:c4:e8:c0:4c:c9:0b:
                    bc:bd:d3:74:16:e5:7c:55:bd:1f:c3:19:5e:04:06:
                    5a:e9:b2:d8:88:d9:78:80:82:d6:77:69:4e:c6:0d:
                    98:6a:b9:34:73:68:61:fd:c9:a7:a8:9a:55:c9:84:
                    d0:84:0c:00:04:07:16:b8:bb:e5:d5:bc:8a:ef:8a:
                    52:91:c9:d9:75:44:5e:68:66:1a:8d:46:db:52:6f:
                    c6:f1:43:5c:3c:94:ff:b1:44:a3:a3:86:a3:84:78:
                    5d:f7:92:af:83:65:81:f0:22:7e:76:86:df:95:e3:
                    ac:a1:33:48:0f:13:a1:3b:44:53:64:39:20:d7:1c:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:3A:8B:C4:C1:B5:86:4B:75:51:BD:99:86:69:63:9B:A9:4A:49
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/323830343a313264383a323030303a3a2f34382d3438203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d8:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:95:7c:5c:9e:fd:da:68:68:e5:95:d9:da:9b:b6:92:6c:
         ae:ff:bf:cb:dc:e1:b8:c0:4e:12:2a:1b:8b:0e:9a:0f:99:46:
         37:65:e0:aa:e3:42:8d:30:28:0a:8d:1e:a7:cc:e2:b8:1e:66:
         bb:e5:49:90:93:0b:11:74:ed:d4:7c:20:ae:42:46:60:cc:ec:
         5d:eb:5c:75:a6:59:f9:e7:56:9e:ce:86:14:05:80:b8:e3:7f:
         fe:93:68:fa:99:8c:cf:44:3a:57:11:91:7e:c7:db:3e:28:94:
         ff:cb:83:62:79:08:e4:d4:8e:48:af:8c:26:9d:33:e6:d4:72:
         1f:dc:2f:58:73:0d:7a:a6:45:81:51:f6:17:39:56:45:52:bd:
         83:8b:da:c5:65:0e:c6:46:a1:ab:e9:b1:48:bd:fb:1a:a5:1d:
         7f:87:29:9b:cb:0c:f9:5e:a3:e4:76:f9:5a:c4:77:64:b7:1d:
         6a:ad:de:9b:8d:44:f2:57:ed:2f:3c:ba:62:d6:b5:a3:02:12:
         77:7f:42:87:3d:a0:c6:14:dc:5e:be:29:1c:37:2d:77:7d:8e:
         73:71:cc:7f:53:28:66:a3:8e:86:e5:75:b7:db:1f:56:1a:b8:
         29:9a:bf:4f:85:af:82:80:58:a1:ac:3f:6d:d5:78:bb:3e:21:
         1e:af:8b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org