Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3334203d3e20323639343937.roa
File:                     323830343a363538383a3a2f33322d3334203d3e20323639343937.roa (raw, json)
Hash identifier:          fagN+lZQvCxb5UYY12x96bv3WT08aTJlTwKWAtX/OK4=
Subject key identifier:   81:96:F0:A0:A5:C4:C7:C6:7D:A0:0E:6D:A5:1E:13:0B:3D:5A:CD:9D
Certificate issuer:       /CN=BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7
Certificate serial:       68D361FD6812B3C9189E326EFF2228BA4E4D3825
Authority key identifier: BD:82:DD:BC:32:3F:4C:52:9A:2B:DA:07:55:A1:A8:F7:BF:2B:B0:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3334203d3e20323639343937.roa
Signing time:             Wed 11 Sep 2024 19:07:15 +0000
ROA not before:           Wed 11 Sep 2024 19:02:15 +0000
ROA not after:            Wed 10 Sep 2025 19:07:15 +0000
asID:                     269497
IP address blocks:        2804:6588::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.crl
                          rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:61:fd:68:12:b3:c9:18:9e:32:6e:ff:22:28:ba:4e:4d:38:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7
        Validity
            Not Before: Sep 11 19:02:15 2024 GMT
            Not After : Sep 10 19:07:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:e4:cb:37:30:d8:d6:3e:4a:93:c1:21:ae:
                    af:17:2b:07:09:8d:94:6b:42:5e:15:d7:ac:ce:c0:
                    67:77:5f:24:7f:6f:8c:41:03:3b:c2:33:1b:7a:99:
                    af:30:96:46:95:8a:be:f6:3b:38:d2:d6:66:49:2c:
                    54:0a:12:cb:9c:f9:f4:ee:ec:bd:00:69:68:dd:2a:
                    22:60:7d:d2:7c:a5:70:ef:6a:86:5e:7d:ce:a9:40:
                    63:d6:87:9f:5c:b1:17:51:e2:57:48:11:5f:56:67:
                    f4:8b:52:92:84:89:fd:a1:fc:1d:8a:bc:32:33:ce:
                    f3:3c:02:87:11:3a:21:5f:89:3a:41:10:d7:ef:39:
                    9e:8b:a8:47:07:8b:17:c3:1a:2f:7b:18:35:7d:58:
                    30:b3:72:08:35:0c:56:8c:62:f1:ea:4d:30:2d:c9:
                    5f:10:19:15:6d:b1:43:83:35:60:fe:4f:80:21:38:
                    ad:24:15:5b:fa:b7:cd:2d:c3:63:7c:b5:16:47:98:
                    c5:4d:44:38:4a:34:66:6b:21:f5:8d:3a:1c:4d:0a:
                    31:1b:60:60:c6:90:90:31:aa:1f:51:da:77:a8:ed:
                    84:58:e4:2d:c9:06:3f:3f:c4:47:00:69:d5:e8:13:
                    10:87:f8:82:2b:ab:1d:21:e1:cf:8e:e9:2b:30:65:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:96:F0:A0:A5:C4:C7:C6:7D:A0:0E:6D:A5:1E:13:0B:3D:5A:CD:9D
            X509v3 Authority Key Identifier:
                keyid:BD:82:DD:BC:32:3F:4C:52:9A:2B:DA:07:55:A1:A8:F7:BF:2B:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3334203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6588::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:69:00:d0:d0:73:99:6b:eb:95:fe:e8:92:22:5b:45:ab:3d:
         1a:61:74:fb:ce:ad:6a:49:f5:57:e5:9f:65:df:d3:b9:97:53:
         f6:00:85:55:5b:01:e4:14:08:ab:89:52:d3:21:66:96:1c:f5:
         47:18:6d:5d:ea:1f:1f:be:97:44:5c:af:f8:d1:e4:ed:f3:3c:
         4d:30:eb:fe:59:16:1d:a6:d4:a6:01:75:a6:fa:2a:91:48:53:
         22:6e:1f:f9:b2:94:aa:2f:8f:2c:a5:22:26:b8:1b:97:46:23:
         34:dc:5b:1d:c7:c2:53:c8:83:cc:71:06:3d:65:60:56:a6:3f:
         ae:92:e9:8b:75:a7:da:c9:6d:0a:fe:2c:b0:bb:06:b1:67:62:
         29:56:6f:c4:ac:2b:b6:f7:9e:51:a2:8e:53:1e:23:4d:8f:b9:
         50:77:cc:02:0c:36:6f:07:51:9a:02:fb:17:9b:6c:88:2b:57:
         e4:25:a3:c9:40:28:44:e5:59:ac:54:55:b5:b7:b3:8c:a6:d0:
         60:40:b6:98:e5:49:c1:eb:a4:0a:be:37:e1:0e:ec:47:a1:a0:
         5d:17:9d:89:ba:26:6f:3a:70:93:38:74:d4:bf:65:86:18:9a:
         57:d9:9e:13:18:2b:26:92:63:3b:71:92:87:b3:f8:a9:3a:d2:
         31:ff:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:20 2024 by rpki-client on console-fra.rpki-client.org