Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
File:                     323830343a363132343a3a2f33322d3334203d3e20323639323135.roa (raw, json)
Hash identifier:          Q8Gx30VpoQnwp9/ahZlMLWd8O7uErGYoiJpZvdrmY24=
Subject key identifier:   82:0B:39:8A:82:08:17:AD:B3:67:17:5E:F0:65:42:BA:82:D2:8D:F7
Certificate issuer:       /CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
Certificate serial:       2AA7DED182E6AC35976BBB9E5D9FA732CAC44291
Authority key identifier: 1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     269215
IP address blocks:        2804:6124::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl
                          rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a7:de:d1:82:e6:ac:35:97:6b:bb:9e:5d:9f:a7:32:ca:c4:42:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject: CN=820B398A820817ADB367175EF06542BA82D28DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:23:cc:8e:a3:d9:00:20:6f:c5:c4:2c:0c:
                    f5:61:1e:b7:5d:3e:64:57:77:a8:d1:fc:44:6e:d9:
                    cf:30:81:42:16:87:98:28:03:4a:99:1f:26:2e:7d:
                    38:3b:1c:21:25:75:8d:19:d4:5b:eb:5a:21:eb:32:
                    74:0e:5c:84:04:cf:76:0f:a0:49:79:83:d0:f2:e6:
                    3a:52:a7:be:9a:97:07:89:38:08:60:9f:8d:21:80:
                    3e:8e:7c:34:de:23:82:7c:f9:da:3e:ce:39:86:bd:
                    be:ec:d6:6d:50:84:f7:e3:01:d1:6d:22:de:8c:d5:
                    4d:70:fb:98:c3:b2:e7:95:b0:e5:70:43:4b:45:9c:
                    b2:36:4b:d2:cf:24:aa:4b:a3:1d:aa:2e:b1:f1:6b:
                    ba:15:df:b6:57:61:44:ca:f8:73:48:29:aa:99:03:
                    9a:43:37:8d:63:5d:15:19:17:b8:83:cb:10:0d:e3:
                    c2:dc:15:a8:d3:b3:8f:1c:2a:81:9b:0c:3a:b5:7e:
                    fe:45:90:e4:b9:db:d1:8c:14:62:22:d4:91:48:7b:
                    d3:84:68:4b:18:5b:22:d8:34:a3:9a:65:a5:7c:43:
                    9e:e1:12:d1:44:b0:cd:ad:64:6f:5f:99:aa:6c:50:
                    05:d9:77:4e:f8:b0:8c:ec:90:dc:ce:61:0e:0e:1b:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0B:39:8A:82:08:17:AD:B3:67:17:5E:F0:65:42:BA:82:D2:8D:F7
            X509v3 Authority Key Identifier:
                keyid:1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6124::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:06:b5:8d:b1:e9:d1:03:ad:e8:6f:a0:f3:c4:d3:1e:6c:84:
         bf:da:74:0b:79:43:3e:9f:f1:95:ee:6b:2e:d0:b1:ea:8d:ba:
         22:25:b5:96:2f:b9:d7:66:f4:56:4d:1c:64:c8:82:02:89:9c:
         30:c1:1f:4f:b2:18:1b:08:7a:ab:84:99:26:6c:34:d7:f5:07:
         72:2e:7e:c0:52:4d:57:14:10:d7:cc:37:ec:12:fa:b8:19:3c:
         79:7e:df:fe:ac:6a:ac:a7:73:80:67:e9:fc:ac:cc:41:84:41:
         da:51:2a:28:1b:5a:16:d8:b6:d7:13:f9:5c:f4:e7:d3:20:3f:
         02:08:c3:ff:c4:e6:49:d0:dc:9c:44:7e:c5:85:f3:d5:19:b4:
         09:67:b0:2d:9b:b6:f6:6c:88:4e:02:e8:3b:27:dd:67:24:34:
         7d:87:5c:35:93:3c:b1:97:48:34:a0:d3:0b:2d:71:66:1d:a2:
         47:d1:b6:59:6e:b3:17:6b:9e:2a:12:77:0f:7a:3a:61:0a:23:
         17:60:92:82:32:cb:d8:8d:fa:87:45:76:ec:24:54:a3:51:f0:
         bf:40:09:ab:43:1f:44:4f:82:d1:17:1d:ae:25:4f:ae:79:87:
         6a:1c:54:68:d2:6d:df:f4:2c:7c:ca:9a:1a:6b:44:0d:0e:c8:
         7c:20:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:04 2024 by rpki-client on console-ams.rpki-client.org