Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          uAYpeAViVe8QHyS0lwO292gAMcMOHRe0mdHP7ZQ19A8=
Subject key identifier:   8B:07:B9:17:CE:95:A3:72:46:1E:67:21:A7:82:B4:64:95:55:D9:37
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       792C2A64C1DAE782C9BDBB76B0B0074B8D0F53C0
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Wed 03 Apr 2024 18:30:36 +0000
ROA not before:           Wed 03 Apr 2024 18:25:36 +0000
ROA not after:            Wed 02 Apr 2025 18:30:36 +0000
asID:                     271754
IP address blocks:        2804:8080:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2c:2a:64:c1:da:e7:82:c9:bd:bb:76:b0:b0:07:4b:8d:0f:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Apr  3 18:25:36 2024 GMT
            Not After : Apr  2 18:30:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:99:bb:d2:b7:82:37:61:87:5d:e6:a1:ea:
                    e6:9d:7e:a5:e2:71:ce:8d:12:3f:e5:ac:c7:34:ba:
                    e2:eb:1c:83:ec:3b:42:13:9f:65:f0:43:5a:8a:66:
                    8e:92:8b:e6:f4:51:84:85:57:72:aa:94:ff:c6:9e:
                    c5:00:69:4b:b1:a7:2f:b4:86:91:a0:f7:9f:c6:91:
                    1d:b7:7c:ca:b2:60:bb:59:7d:d7:cb:29:41:df:ec:
                    d5:18:27:0c:36:d5:e7:9e:f1:da:4d:f9:e5:85:2d:
                    d6:8c:49:0c:41:82:a5:45:73:ca:75:07:b2:f3:78:
                    16:06:40:6c:94:65:50:51:9f:de:58:ad:6d:0f:02:
                    c7:02:06:a3:8f:a2:65:d4:b2:5b:ff:49:5c:d2:86:
                    b4:e0:dd:be:37:99:1b:e8:e0:62:c4:a7:9c:e4:7d:
                    57:c6:bd:7a:0d:8b:bd:e6:8e:8c:d8:68:83:ce:9a:
                    17:e0:70:d1:2a:4f:6e:87:49:e8:6f:3b:73:a8:07:
                    83:15:7b:07:3b:cf:a9:4e:df:36:c1:e4:e7:36:31:
                    66:cb:84:f5:56:0a:fa:8c:e1:7f:40:80:16:ce:69:
                    27:52:de:34:66:f6:58:2a:d6:23:9b:96:9b:96:47:
                    4a:24:13:94:cf:25:a6:ef:8f:de:43:02:2e:ee:72:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:07:B9:17:CE:95:A3:72:46:1E:67:21:A7:82:B4:64:95:55:D9:37
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:49:5d:6b:e8:22:93:f8:b4:af:91:50:48:ed:32:86:1b:
         8c:5d:cd:a9:33:59:88:9e:d8:32:a9:52:e2:41:a3:07:4f:93:
         d9:8b:74:6e:39:12:15:3b:50:d3:3e:e3:bc:01:e0:ff:98:82:
         f3:98:3f:9f:15:ab:9d:ab:04:e9:5d:ac:50:45:bf:7c:46:46:
         9e:c2:dd:f5:28:c9:35:a7:74:05:0f:d7:59:79:3c:b8:d4:e2:
         9f:3b:c6:31:c2:ab:3d:70:73:ef:e8:91:8e:b5:40:6b:cd:35:
         b9:f3:24:30:5a:72:47:ec:ab:17:0f:a6:8b:d9:2f:75:7d:c1:
         b9:b6:2f:be:53:45:2c:94:6f:e9:e9:f8:1a:48:bd:42:69:f8:
         03:99:32:85:0d:84:ee:e0:c7:10:d5:86:d2:8d:bc:39:98:77:
         76:dd:18:98:54:be:1b:21:b3:be:32:f9:32:84:d4:11:88:b7:
         12:43:aa:fa:80:59:60:88:87:d0:13:b6:0c:c7:de:3b:ef:68:
         1c:e1:28:54:0f:96:62:b6:db:17:77:4d:65:47:42:02:d5:5c:
         4d:9d:de:c5:87:26:fc:ab:2c:f4:eb:43:e4:36:da:6f:d2:34:
         b4:dd:09:2e:90:5e:6b:23:67:c4:99:65:e0:48:4c:d7:bf:1e:
         60:a2:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org