Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa
File:                     323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa (raw, json)
Hash identifier:          UG32O2mSDfIQ7YCwkmy/XJL+VoXSglA2a0pEIBuHi+U=
Subject key identifier:   AA:5E:68:61:25:9D:01:1C:2C:DC:73:3B:A8:55:61:15:C5:9C:31:D4
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       6FE989D0834D10C237A4BDA67357E4D4E3B8E3B0
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:33 +0000
ROA not before:           Thu 04 Apr 2024 10:53:33 +0000
ROA not after:            Thu 03 Apr 2025 10:58:33 +0000
asID:                     263500
IP address blocks:        2804:12d8:3300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:89:d0:83:4d:10:c2:37:a4:bd:a6:73:57:e4:d4:e3:b8:e3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:33 2024 GMT
            Not After : Apr  3 10:58:33 2025 GMT
        Subject: CN=AA5E6861259D011C2CDC733BA8556115C59C31D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:a4:82:b6:21:6a:8d:15:1c:29:6e:57:63:
                    fc:7b:2c:86:8b:e3:6e:51:bf:02:c8:f6:b8:03:7c:
                    9b:6b:8e:74:cb:41:49:cb:65:f1:b7:79:97:9a:57:
                    4d:7f:b8:aa:09:f4:18:44:cd:cd:48:36:c7:1e:2b:
                    00:f3:ff:32:74:1b:89:21:04:d1:cd:07:15:1c:0e:
                    65:2c:20:76:64:85:d4:7d:b3:17:e9:9e:da:21:ae:
                    66:06:24:cb:9d:0a:32:50:e1:6b:87:83:0a:47:29:
                    98:fb:9d:a4:5f:7f:33:6b:5c:97:cc:9c:5d:2a:d7:
                    a4:d0:bc:aa:58:56:cf:3d:39:12:55:e4:e1:fd:92:
                    a0:8b:63:70:6a:42:53:24:18:94:55:bf:0f:b4:28:
                    6f:87:0f:b8:11:7d:d7:c9:db:31:5c:2e:6c:15:c4:
                    f4:61:09:3d:b2:06:b9:89:a4:25:cb:d9:f2:4b:44:
                    64:d9:e0:e0:9f:20:89:81:68:1e:f7:28:6a:d0:63:
                    29:76:16:2a:85:66:18:51:6a:a4:b3:63:4c:b6:0d:
                    76:cf:89:e6:e7:93:dd:eb:9c:ab:8c:7a:12:09:a7:
                    be:19:1f:9b:8f:42:cd:b5:a2:59:37:68:6d:85:4b:
                    b7:46:3d:5a:bc:a8:e2:75:26:f2:ca:b0:48:27:4c:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5E:68:61:25:9D:01:1C:2C:DC:73:3B:A8:55:61:15:C5:9C:31:D4
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/323830343a313264383a333330303a3a2f34302d3430203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d8:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:d9:27:df:69:da:0e:fc:7f:5c:c0:4d:ff:aa:a8:45:b6:cf:
         9c:e5:44:4e:18:51:a1:35:94:d4:da:8a:3c:86:9f:77:8d:02:
         ab:e5:b3:0d:aa:b9:57:39:1e:98:a5:58:78:b1:40:5e:07:de:
         49:42:75:54:1f:40:2f:7a:3f:31:69:a0:4c:23:69:68:b4:4c:
         08:ae:89:b8:7d:32:6b:b1:66:7d:36:5b:0f:05:e0:11:80:41:
         de:76:69:5d:4a:bf:c1:51:99:7b:da:35:55:0c:5c:e9:fc:d6:
         2a:3a:80:8d:99:3b:c9:32:7b:87:71:25:38:1b:fb:2b:e6:2f:
         9e:90:6d:b2:44:8c:73:de:39:68:35:33:82:e7:fb:42:8d:96:
         3f:d5:62:bc:50:ef:df:91:9f:ca:29:e1:da:7a:af:fb:17:bd:
         5e:de:ac:b7:22:d0:7a:80:aa:6b:b0:b6:38:d3:dc:0b:d5:e6:
         09:de:20:8f:e0:3d:c1:f2:5c:41:5b:b3:ed:a0:85:08:e3:1a:
         4a:6a:88:bf:73:65:09:02:53:96:d7:98:3b:43:57:45:aa:a8:
         25:70:3f:69:ba:33:17:f7:83:e6:90:d1:d2:84:0d:83:6a:77:
         be:4e:ec:cc:be:91:37:d2:b7:a9:05:75:ce:f1:9a:5c:f5:bf:
         b9:34:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org