Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/323830343a376638383a3a2f33322d3438203d3e20323731363934.roa
File:                     323830343a376638383a3a2f33322d3438203d3e20323731363934.roa (raw, json)
Hash identifier:          2WhDpJJ/Sz4d4Q7w7NYNUptL0MEhvw+trrIOk1uN/ZM=
Subject key identifier:   1F:DC:2A:4B:4E:04:D8:64:52:E5:BA:B3:48:3D:8B:26:11:F3:CA:4A
Certificate issuer:       /CN=9B0FDA073951168EEB28943672D529AFE023A2B0
Certificate serial:       5FA600930A7487C80C13D4BBD9545D87381322C2
Authority key identifier: 9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/323830343a376638383a3a2f33322d3438203d3e20323731363934.roa
Signing time:             Wed 29 May 2024 11:18:09 +0000
ROA not before:           Wed 29 May 2024 11:13:09 +0000
ROA not after:            Wed 28 May 2025 11:18:09 +0000
asID:                     271694
IP address blocks:        2804:7f88::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl
                          rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a6:00:93:0a:74:87:c8:0c:13:d4:bb:d9:54:5d:87:38:13:22:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0FDA073951168EEB28943672D529AFE023A2B0
        Validity
            Not Before: May 29 11:13:09 2024 GMT
            Not After : May 28 11:18:09 2025 GMT
        Subject: CN=1FDC2A4B4E04D86452E5BAB3483D8B2611F3CA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:e0:3f:83:43:17:d0:f8:8a:7e:cc:37:a9:
                    3f:9a:5b:39:11:e0:7f:99:87:b9:a0:61:a4:0e:e1:
                    8e:a2:67:a9:83:b5:57:49:ee:0f:b0:56:69:9f:c3:
                    c3:1b:9e:f5:c3:52:ec:d2:44:c5:0c:43:b1:4e:fb:
                    d8:91:aa:43:16:6e:f7:d2:91:07:f5:5e:9d:39:e6:
                    5b:ed:21:39:b8:a2:09:72:a5:a4:fb:94:84:4a:aa:
                    11:c9:2e:9f:26:d7:80:32:f8:d0:c4:48:09:55:df:
                    a5:d9:16:a4:06:39:e0:4b:b0:ea:ce:42:6e:bc:89:
                    a5:4c:69:4a:b1:be:28:9f:a8:e7:e3:3f:22:5a:27:
                    e0:5f:de:6f:b4:3f:fd:e3:a6:94:01:70:5a:32:34:
                    b8:1d:de:6f:99:86:b1:37:0d:a6:ed:f5:20:35:62:
                    d5:99:64:87:d3:47:3d:da:0e:c3:10:a9:da:73:e2:
                    19:79:36:94:ce:06:c5:b9:7b:f5:59:4a:86:54:9a:
                    ae:3d:35:9b:e2:10:5e:74:99:a2:0a:2e:4c:a4:20:
                    a2:0c:63:ea:a7:e2:f0:89:c9:ad:87:c1:ae:54:bd:
                    b1:ca:80:36:f6:40:9c:e8:06:8d:82:ab:e0:68:28:
                    5a:a9:fd:76:8a:68:e1:7d:f7:78:9c:19:9b:eb:b4:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DC:2A:4B:4E:04:D8:64:52:E5:BA:B3:48:3D:8B:26:11:F3:CA:4A
            X509v3 Authority Key Identifier:
                keyid:9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/323830343a376638383a3a2f33322d3438203d3e20323731363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f88::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:29:1d:82:f2:46:5b:0f:79:e1:f4:5a:97:f0:15:4c:9e:
         90:58:9a:a2:e6:e3:23:86:11:92:f3:d5:e2:c6:aa:21:4b:70:
         4e:47:ea:77:bb:42:78:fc:1f:6f:33:82:82:43:e4:be:be:4b:
         8b:83:f6:e9:f5:0d:ca:3d:0e:76:aa:3f:bc:0a:02:8c:f0:90:
         7e:56:97:48:9c:8a:69:ba:84:5d:35:41:66:98:9d:d2:be:c9:
         b3:af:7a:89:2e:53:4e:86:24:53:58:64:f3:0a:0d:21:b4:cf:
         df:81:2d:df:29:7a:1c:15:3b:2b:72:1e:3b:80:c7:8e:a4:2e:
         48:62:75:47:eb:c9:98:fd:07:3e:69:4a:4c:62:d2:0b:1d:fc:
         75:42:25:73:34:4f:8f:30:de:76:d8:83:0f:38:91:28:e8:6e:
         e0:2d:a2:cc:85:c3:47:5e:d4:bc:5c:4e:92:3b:99:74:51:b7:
         d7:d6:92:84:ed:b1:8a:55:f4:86:02:c0:63:a4:88:26:7c:c2:
         d4:64:d3:4c:ba:8f:76:9a:52:61:7d:15:7a:30:71:2e:46:e6:
         81:1f:2d:73:cd:08:4d:51:17:f2:00:13:83:c0:eb:eb:08:df:
         ae:22:1c:e6:19:a5:35:bc:ea:e4:06:5f:fa:34:72:66:44:7a:
         aa:bf:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org