Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33322d3332203d3e20323731353632.roa
File:                     323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (raw, json)
Hash identifier:          X3MuaSrOzMGHqNg4efeK3TmaMEWpZY7eIqfkUxd5TCQ=
Subject key identifier:   DE:2E:96:E7:0D:AA:B7:66:C2:22:45:AF:1D:76:16:09:41:01:E7:64
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       5B06A8CFACD9F1FE985CBE3604B9206426DAFE11
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33322d3332203d3e20323731353632.roa
Signing time:             Wed 03 Apr 2024 19:24:12 +0000
ROA not before:           Wed 03 Apr 2024 19:19:12 +0000
ROA not after:            Wed 02 Apr 2025 19:24:12 +0000
asID:                     271562
IP address blocks:        2804:7d74::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:a8:cf:ac:d9:f1:fe:98:5c:be:36:04:b9:20:64:26:da:fe:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Apr  3 19:19:12 2024 GMT
            Not After : Apr  2 19:24:12 2025 GMT
        Subject: CN=DE2E96E70DAAB766C22245AF1D7616094101E764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:d1:8e:af:b4:7a:fb:c3:b3:b9:d9:bf:b8:
                    34:25:cf:c5:d0:76:8d:d4:3f:cf:ea:4e:27:9f:7c:
                    28:54:d6:54:0f:6f:58:91:dc:02:bb:8c:77:92:44:
                    29:7a:43:e3:57:a2:ed:ee:93:89:c5:ca:07:16:d6:
                    26:1b:5b:be:72:30:aa:eb:bc:9b:d8:09:dd:c0:84:
                    2d:04:09:33:7c:f0:23:c8:4a:86:8f:4c:7b:13:b9:
                    3e:17:02:7a:d7:bb:b4:6c:70:ea:78:88:ed:c5:52:
                    20:37:03:a6:03:bf:01:9e:75:7a:5c:25:e7:cb:1c:
                    82:1f:c0:be:c9:6f:7e:7d:fe:4a:fd:f0:ba:57:a1:
                    06:3c:c8:70:df:30:8c:4e:98:24:46:ac:36:59:2a:
                    54:8d:08:f4:ab:13:66:bc:8e:07:46:ee:70:17:9a:
                    23:16:2c:49:30:f2:8c:07:38:a4:c9:85:3a:71:c0:
                    b6:17:53:a8:c1:bd:d7:ce:ff:15:fd:48:db:92:e2:
                    ed:db:6c:74:0f:4d:5d:6b:d9:17:79:a9:7d:59:91:
                    df:48:f6:45:8b:4d:b6:b7:cd:b7:16:d8:f0:5b:39:
                    ea:e4:c0:f7:61:64:d0:0c:85:b6:83:8d:bd:e8:50:
                    b6:f8:8a:43:1c:9b:4f:67:85:99:e0:87:6a:17:16:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:96:E7:0D:AA:B7:66:C2:22:45:AF:1D:76:16:09:41:01:E7:64
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33322d3332203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d74::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:ad:44:eb:43:24:e5:aa:57:af:d0:6a:8d:e7:62:a0:04:
         4f:15:0e:82:5f:8f:5b:a0:dc:0f:03:49:62:f1:d8:3f:5d:43:
         3f:79:ae:d2:a6:ed:14:93:24:56:24:90:f2:b0:18:a6:f4:34:
         8b:ea:06:a2:cb:af:3e:60:c8:6f:7d:86:67:a6:24:ab:14:c2:
         22:7c:68:ad:f5:d1:7c:57:a4:23:bc:55:8f:0d:ff:32:50:11:
         21:0f:b5:57:f7:3f:d3:b3:bd:fc:48:76:dd:b2:1d:64:6a:82:
         7b:8e:f7:57:56:62:d6:1d:0e:d7:08:30:af:1c:08:14:b5:6b:
         9d:a7:7c:77:7e:9d:f0:23:9c:49:b5:52:06:94:f1:37:34:ca:
         e2:f3:4d:ab:c5:9e:88:e8:89:d9:e5:b6:c4:0b:50:d3:20:58:
         e1:9a:86:f7:28:8b:69:78:fd:e5:81:18:58:2c:5f:2c:5d:ed:
         36:f2:ac:ef:be:f8:00:4b:ec:12:8a:7a:45:36:54:4f:f9:bd:
         38:ca:69:77:5e:94:22:f7:2d:02:c1:dd:f2:57:66:6a:09:98:
         f0:2a:90:5b:08:5f:7a:d1:45:94:1e:31:d7:25:18:52:99:38:
         b0:fa:40:74:de:c1:19:b2:73:b9:a8:3a:9a:9b:87:e9:5f:e2:
         bb:ab:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:38 2024 by rpki-client on console-ams.rpki-client.org