Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d3438203d3e20323635343132.roa
File:                     323830343a333362343a3a2f33322d3438203d3e20323635343132.roa (raw, json)
Hash identifier:          H3+MDMYZdDOp9zJGml3Pa6P+H5Bhpsnwloli63/SA98=
Subject key identifier:   AE:1A:EB:20:F0:BA:11:1F:E3:45:E4:1E:CB:D9:B0:E0:BB:54:D3:E2
Certificate issuer:       /CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Certificate serial:       291BF24B9BBD07D7ECBE580BE7EBDBF8F376BE02
Authority key identifier: F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d3438203d3e20323635343132.roa
Signing time:             Wed 05 Jun 2024 19:31:09 +0000
ROA not before:           Wed 05 Jun 2024 19:26:09 +0000
ROA not after:            Wed 04 Jun 2025 19:31:09 +0000
asID:                     265412
IP address blocks:        2804:33b4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl
                          rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1b:f2:4b:9b:bd:07:d7:ec:be:58:0b:e7:eb:db:f8:f3:76:be:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
        Validity
            Not Before: Jun  5 19:26:09 2024 GMT
            Not After : Jun  4 19:31:09 2025 GMT
        Subject: CN=AE1AEB20F0BA111FE345E41ECBD9B0E0BB54D3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:bf:0c:45:4b:f3:0c:78:b0:4c:f1:dc:1e:
                    f7:92:2f:4c:81:be:ca:97:ac:90:53:1b:ca:d0:db:
                    cc:b0:22:cc:f8:09:3a:d1:5d:ee:9a:8f:67:b7:97:
                    c4:a7:f2:4e:9c:99:99:9c:8a:aa:3e:8a:d2:b0:12:
                    3d:7d:c8:00:b3:84:88:22:65:a7:63:6e:c6:ee:a9:
                    71:06:d2:78:2c:38:4f:dd:30:36:b5:c6:87:c8:07:
                    8b:e4:b9:9c:72:20:bc:15:7a:cf:ed:1b:8d:6b:b5:
                    f8:73:b5:74:f0:30:bf:69:7c:34:c2:bb:df:ba:c3:
                    9f:a3:32:a0:e9:ad:57:d6:64:83:49:13:38:13:9d:
                    0a:c9:bc:fd:60:5f:6e:3e:64:32:0f:ff:b8:2e:60:
                    ec:d1:f4:96:4f:00:8b:67:bb:6c:76:60:e3:f3:05:
                    cd:65:b9:00:80:a0:2a:79:09:44:d2:0b:9a:ad:19:
                    02:ad:e8:e9:1e:82:ad:86:33:d2:91:39:21:fc:4c:
                    c3:2b:69:b7:81:3b:f4:65:3d:03:21:37:f3:49:f6:
                    3e:f3:a4:c6:fc:3f:ad:e1:f2:b7:83:52:64:67:15:
                    15:41:db:4d:19:8f:bd:9d:e3:de:bb:92:41:b2:85:
                    ec:6b:e3:a5:1f:b4:2f:4d:09:e5:fb:71:d8:6d:d6:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1A:EB:20:F0:BA:11:1F:E3:45:E4:1E:CB:D9:B0:E0:BB:54:D3:E2
            X509v3 Authority Key Identifier:
                keyid:F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d3438203d3e20323635343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:84:b4:28:c2:f2:75:04:f0:15:f2:6c:05:49:9c:cb:e0:
         42:cc:64:ba:83:47:a8:fa:38:ec:b6:67:24:9a:1a:e8:7e:70:
         ba:e0:42:e3:68:ad:20:a5:c4:be:d5:2d:42:4f:e5:4a:57:f2:
         74:fe:ba:2a:2e:bc:d8:ad:85:f5:c7:ca:00:b8:2b:45:fd:5a:
         c0:9d:17:20:ac:98:49:15:cd:a7:ab:61:e8:fe:78:b2:a0:f0:
         06:bf:99:b0:09:41:45:8b:d9:93:8f:0d:80:e9:15:da:50:8d:
         d3:a9:d4:ef:70:eb:4e:61:92:98:63:dc:81:f5:0a:7f:65:47:
         83:1a:e2:e4:b8:7c:02:df:29:7f:b6:52:ee:ab:1a:e0:94:b1:
         06:53:ea:95:47:f8:65:82:09:bb:a0:ea:40:e3:fb:df:e4:14:
         b9:16:63:e6:68:a8:15:a7:5d:02:e9:d6:2d:71:5e:59:2a:9d:
         43:67:8f:02:ed:44:e3:24:21:5b:c2:68:be:f0:54:2e:9f:da:
         2b:1d:27:7a:04:42:af:1a:79:d4:ac:f6:d7:cf:16:10:64:6d:
         cf:5e:8a:b9:b6:32:e3:18:08:64:c6:af:9a:f2:ed:7f:bf:da:
         df:89:2f:cf:6e:46:f5:60:a8:ad:ad:83:34:b7:30:07:19:47:
         ff:22:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org