Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          83ooMipcjlONPgJX/IS4f60E4s7GyAVBGMghJS/9uOc=
Subject key identifier:   14:29:BF:67:D1:86:F4:A7:CD:AF:77:37:F0:2E:62:83:F7:6B:B6:D4
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       1BD7A8CA73BDB41A04053E9A989DE8ADDD438366
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Wed 03 Apr 2024 18:30:37 +0000
ROA not before:           Wed 03 Apr 2024 18:25:37 +0000
ROA not after:            Wed 02 Apr 2025 18:30:37 +0000
asID:                     271754
IP address blocks:        2804:8080::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d7:a8:ca:73:bd:b4:1a:04:05:3e:9a:98:9d:e8:ad:dd:43:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Apr  3 18:25:37 2024 GMT
            Not After : Apr  2 18:30:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:31:a9:5c:5f:bb:ac:94:be:d8:3c:25:ea:
                    06:85:50:bf:f2:4a:9c:7b:5e:6c:fe:80:12:0b:78:
                    a6:5e:fd:0d:db:25:94:10:8d:3d:f1:31:7a:f8:ee:
                    49:18:c3:cb:3d:00:78:c4:80:c3:92:23:ba:39:e3:
                    ed:64:a5:ad:4f:91:37:1d:08:85:cf:71:52:6a:44:
                    ca:a6:f5:53:cb:60:d4:20:42:89:a4:f4:f4:09:e1:
                    d5:9c:22:c6:b3:58:51:83:c3:70:ef:22:07:ef:7c:
                    42:da:90:f4:78:b7:7e:d5:ef:44:bb:d5:4e:0d:fc:
                    c8:64:5b:75:7a:e4:6f:99:8d:6c:30:5f:54:8e:b8:
                    65:1f:51:dc:d1:25:76:98:de:52:ba:02:8f:57:76:
                    bb:fe:86:07:30:f2:e8:1e:60:8e:fd:ea:de:99:94:
                    0d:d1:c9:e9:b6:32:cc:6d:e9:f9:97:44:64:5e:0c:
                    63:31:c0:59:28:76:1d:04:57:65:8c:fc:36:53:43:
                    d1:ef:5f:81:dc:a5:b3:ba:2a:87:f8:13:e0:cb:6d:
                    f5:a8:af:33:f3:3e:70:34:a0:6f:d4:c4:1f:aa:f5:
                    0a:23:59:15:e0:af:b5:7e:42:ef:c4:12:97:a1:36:
                    a3:41:e6:ee:98:c8:37:21:ee:9b:03:26:1b:e3:d7:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:BF:67:D1:86:F4:A7:CD:AF:77:37:F0:2E:62:83:F7:6B:B6:D4
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:59:7f:d9:88:cf:6b:58:49:ba:a0:5a:87:6d:86:75:59:69:
         12:8e:ab:2f:3d:fe:d0:1c:8f:6b:aa:9f:ec:32:95:61:eb:14:
         26:c0:80:61:72:4f:4d:8b:5e:75:bc:40:c7:5a:88:c2:8d:f8:
         cf:a5:0a:73:41:19:28:31:56:66:d1:8b:68:be:c2:1b:c7:34:
         c7:1e:66:7b:5a:64:ed:df:30:4f:18:74:dc:29:cb:f8:9f:76:
         1a:f2:0e:cc:ca:5f:8e:5d:b2:cd:94:0b:71:16:18:82:26:a7:
         70:26:28:5e:5e:56:11:2f:70:55:d4:e6:4b:99:37:f1:dd:e4:
         0c:45:d9:56:4d:01:6c:de:2a:55:03:65:8f:57:56:cb:b6:c0:
         d2:3f:05:3b:3c:b8:8e:74:29:57:86:78:a7:c7:2a:13:0e:8f:
         83:0e:cd:dd:c5:e2:88:ee:9b:f9:9d:85:77:76:54:32:83:f1:
         4d:a0:f7:c5:9a:fa:68:ca:9b:95:d1:72:98:44:f7:0a:8b:b7:
         7d:25:65:bd:b4:8e:b2:8c:56:c3:91:1c:db:bf:98:b8:32:ef:
         c6:a5:e1:c3:90:c6:e4:0b:49:09:a0:5c:12:af:dc:ea:5c:eb:
         40:34:11:46:92:d4:66:26:4a:45:bc:0a:59:7a:60:3a:c0:5e:
         84:f0:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org