Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa
File:                     323830343a323030383a3a2f33322d3438203d3e20323634343631.roa (raw, json)
Hash identifier:          bp/4NeLGKust0wtnFldTtLctfqZiRa6G862bNPN+NSU=
Subject key identifier:   FE:E8:75:8F:A4:42:FE:05:A0:03:7A:07:CB:27:68:0A:49:0E:82:28
Certificate issuer:       /CN=01848C66A25335A0075484FBC32617363F3B8550
Certificate serial:       5DBB429743AA2E00CDFF2D7AC9222B1226BE9699
Authority key identifier: 01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa
Signing time:             Mon 22 Apr 2024 17:31:50 +0000
ROA not before:           Mon 22 Apr 2024 17:26:50 +0000
ROA not after:            Mon 21 Apr 2025 17:31:50 +0000
asID:                     264461
IP address blocks:        2804:2008::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.crl
                          rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bb:42:97:43:aa:2e:00:cd:ff:2d:7a:c9:22:2b:12:26:be:96:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01848C66A25335A0075484FBC32617363F3B8550
        Validity
            Not Before: Apr 22 17:26:50 2024 GMT
            Not After : Apr 21 17:31:50 2025 GMT
        Subject: CN=FEE8758FA442FE05A0037A07CB27680A490E8228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:32:1f:1f:5f:a1:a3:f2:bc:1b:dc:a5:76:
                    98:de:8a:4b:ee:6d:00:49:75:ca:3f:75:3d:e7:bf:
                    2b:30:ed:6a:6b:12:28:cc:df:64:f0:43:07:59:a5:
                    c1:df:29:da:80:01:01:1d:0e:d9:5b:73:38:2d:4c:
                    61:29:8e:11:86:49:4c:1c:43:4d:93:83:42:ee:31:
                    d8:42:85:54:cd:4c:aa:10:8c:a7:f8:fe:b0:92:f7:
                    ea:07:42:50:55:14:02:1e:58:47:7a:82:24:0e:9a:
                    89:68:37:b8:d5:61:25:6a:c2:4c:fc:8e:00:1c:ea:
                    9c:4b:bc:a2:7a:24:80:db:3e:ba:2f:db:a0:74:e0:
                    d8:98:97:51:01:64:80:dc:a8:24:0e:c7:16:4e:e4:
                    60:4c:9e:97:f2:59:0d:7e:80:89:52:fb:f9:09:f2:
                    8e:f2:bd:78:4a:df:6e:95:19:ea:26:79:65:87:8d:
                    91:ee:09:8a:da:de:62:67:2c:6f:a9:3d:04:2b:ef:
                    27:cf:c8:64:97:16:94:2a:d3:21:a0:64:11:e6:c6:
                    cd:55:27:49:35:51:f7:96:ae:62:17:ae:7e:e4:1f:
                    c3:d2:15:ec:ee:0a:bf:97:d3:6f:f6:f5:a1:8d:b2:
                    33:00:5f:d5:ca:8a:d1:6b:19:94:6e:76:19:f7:c7:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:75:8F:A4:42:FE:05:A0:03:7A:07:CB:27:68:0A:49:0E:82:28
            X509v3 Authority Key Identifier:
                keyid:01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2008::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:09:4d:ec:78:e4:f6:cf:fa:65:c0:48:42:ca:d0:0b:cd:
         93:b4:98:e4:56:23:70:49:a9:0a:09:79:e3:81:ac:2d:33:93:
         dd:32:44:eb:86:3f:7d:9b:1f:46:64:67:d7:e6:f4:19:b1:32:
         db:2f:fc:f3:69:87:f5:57:11:34:34:73:51:31:ce:03:b2:f7:
         e2:7f:56:07:6a:94:e8:b3:08:14:93:34:ad:80:99:a6:75:12:
         da:99:26:a1:9d:23:df:37:9c:e0:6d:e9:62:31:d2:5e:49:b0:
         b1:cf:d0:cd:bc:25:ad:b3:91:da:ce:99:29:1d:a7:97:1f:07:
         50:9c:59:26:13:62:3b:cc:f7:1f:82:ab:cf:31:63:56:44:fe:
         b3:76:f1:2e:e8:8e:12:8a:6d:c1:83:03:6c:34:dd:52:e9:5a:
         30:aa:ea:84:26:83:32:ed:be:58:3a:c5:3d:32:ba:72:53:98:
         9c:d7:e5:f4:62:c2:91:32:a1:cb:24:13:25:64:de:c8:5f:47:
         55:52:83:4b:e5:52:2d:20:45:50:4d:95:72:c2:38:d2:51:22:
         3f:a5:0f:53:c9:aa:4f:f3:fc:c2:59:6b:95:dd:d5:f6:99:b4:
         62:35:44:a0:b9:8f:5b:fd:2a:64:41:31:4d:db:80:66:14:9a:
         15:25:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:36 2024 by rpki-client on console-fra.rpki-client.org