Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa (raw, json)
Hash identifier:          qM0NHPr8w6GMcQzQ2u0ZxqlvUB3YsXl/rcLKZLVSfZU=
Subject key identifier:   22:93:7E:53:22:85:93:40:AB:ED:B0:D4:0F:06:42:AB:9C:9B:35:AF
Certificate issuer:       /CN=B82D4FBED9458B4F700D74E565347A95A08877D7
Certificate serial:       341FCF22EA040F72B054E0D024E34C590355BF61
Authority key identifier: B8:2D:4F:BE:D9:45:8B:4F:70:0D:74:E5:65:34:7A:95:A0:88:77:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
Signing time:             Mon 09 Sep 2024 16:56:44 +0000
ROA not before:           Mon 09 Sep 2024 16:51:44 +0000
ROA not after:            Mon 08 Sep 2025 16:56:44 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/B82D4FBED9458B4F700D74E565347A95A08877D7.crl
                          rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/B82D4FBED9458B4F700D74E565347A95A08877D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1f:cf:22:ea:04:0f:72:b0:54:e0:d0:24:e3:4c:59:03:55:bf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B82D4FBED9458B4F700D74E565347A95A08877D7
        Validity
            Not Before: Sep  9 16:51:44 2024 GMT
            Not After : Sep  8 16:56:44 2025 GMT
        Subject: CN=22937E5322859340ABEDB0D40F0642AB9C9B35AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:1f:c1:de:c2:73:a7:1c:34:a1:e9:7b:13:
                    3f:93:b9:b9:28:b0:ad:07:78:4e:7d:1b:f0:aa:68:
                    fc:5a:9e:52:ad:40:8c:1c:25:6f:1f:eb:40:43:c3:
                    e7:2e:ea:aa:aa:5b:90:49:cb:d2:af:44:6b:77:38:
                    8d:c4:5a:ad:50:c0:81:31:a8:2a:af:70:8e:6b:83:
                    61:21:64:6f:1e:e3:04:de:77:9c:eb:ee:af:b8:9f:
                    41:a4:98:c0:84:45:39:83:f1:d9:8c:7b:73:3f:3b:
                    1e:42:cb:06:af:8b:95:39:0d:17:15:df:02:df:e9:
                    bf:c4:8c:b8:fb:ea:da:30:73:5a:bc:27:b8:28:3d:
                    9f:cb:6c:20:57:1d:62:c6:c0:38:0b:c3:92:bd:c8:
                    87:d8:f1:87:36:78:74:9b:ea:63:d5:7a:4f:52:00:
                    6c:25:b1:e7:9d:72:83:83:6c:88:eb:b2:9b:6d:04:
                    92:b9:a9:3e:f3:7a:ea:0c:44:fd:d6:99:8d:4a:82:
                    7d:b4:07:cc:76:68:c0:d2:64:30:68:11:33:4d:91:
                    dd:ca:d5:c8:91:93:11:e6:91:ec:b1:d2:fc:97:19:
                    89:31:45:8a:16:97:72:70:dc:d4:6c:df:30:64:f1:
                    cf:a8:b7:64:e6:97:04:cc:7a:80:1f:25:c0:e3:ba:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:93:7E:53:22:85:93:40:AB:ED:B0:D4:0F:06:42:AB:9C:9B:35:AF
            X509v3 Authority Key Identifier:
                keyid:B8:2D:4F:BE:D9:45:8B:4F:70:0D:74:E5:65:34:7A:95:A0:88:77:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/B82D4FBED9458B4F700D74E565347A95A08877D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/41

    Signature Algorithm: sha256WithRSAEncryption
         77:d9:cd:61:d6:96:d1:87:c4:63:97:e7:47:d5:ae:08:5a:c5:
         44:66:df:14:48:de:6e:0b:56:8b:d8:b0:37:40:d8:61:57:96:
         fd:26:f5:21:a9:7d:21:3e:c7:7a:9f:33:98:c8:1b:31:9e:56:
         00:db:9b:1c:58:4e:14:f4:29:bf:2c:6f:2a:43:fe:d0:fb:e9:
         fc:3f:4c:d7:80:15:69:b1:c3:4f:5e:07:28:a3:aa:05:ab:2d:
         44:11:6c:a5:b0:d5:3d:bb:01:f8:b9:9d:73:35:67:7b:10:56:
         76:70:a3:f1:d8:c1:23:1e:10:1d:5f:dc:8b:d2:00:4a:be:f8:
         22:36:30:d7:a9:c7:df:99:36:5c:0b:cb:59:25:43:1a:c9:8e:
         78:09:e6:b8:b0:91:13:55:e8:ff:87:80:18:19:78:5e:53:19:
         93:d3:97:8b:c2:06:77:94:6c:97:7f:58:d6:87:a6:c4:88:dc:
         0f:03:89:0c:a1:e4:4a:9a:43:fc:76:86:ff:31:7c:cc:74:3d:
         1e:ba:4c:63:95:fd:48:3d:01:6b:a2:0f:dc:81:d4:9f:51:94:
         ee:69:32:a3:f3:77:24:63:6c:72:65:c9:60:ff:17:f6:2d:08:
         ac:81:12:2c:bd:05:27:d1:f7:92:bc:51:5d:a3:7e:3b:47:4b:
         26:8a:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:35 2024 by rpki-client on console-ams.rpki-client.org