Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/323830343a333464343a3a2f33322d3438203d3e20323635343833.roa
File:                     323830343a333464343a3a2f33322d3438203d3e20323635343833.roa (raw, json)
Hash identifier:          Yz1wOgC8GNEP1ZxWpWxvzpdh662Fnc+Taa2TxMUcvE8=
Subject key identifier:   1C:C7:05:A2:37:15:D2:13:36:AD:F5:2E:D4:F3:72:31:70:B7:5C:6D
Certificate issuer:       /CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
Certificate serial:       718DF65B758481D12C3656D6077D8F5964528935
Authority key identifier: 08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/323830343a333464343a3a2f33322d3438203d3e20323635343833.roa
Signing time:             Thu 04 Apr 2024 16:07:41 +0000
ROA not before:           Thu 04 Apr 2024 16:02:41 +0000
ROA not after:            Thu 03 Apr 2025 16:07:41 +0000
asID:                     265483
IP address blocks:        2804:34d4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl
                          rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8d:f6:5b:75:84:81:d1:2c:36:56:d6:07:7d:8f:59:64:52:89:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
        Validity
            Not Before: Apr  4 16:02:41 2024 GMT
            Not After : Apr  3 16:07:41 2025 GMT
        Subject: CN=1CC705A23715D21336ADF52ED4F3723170B75C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:91:96:9d:9d:22:5f:4a:9a:fe:ba:64:23:
                    2b:7a:76:c6:51:dd:88:79:91:3a:1b:f5:fa:f2:16:
                    6b:77:18:fa:b0:78:b8:3e:bd:7a:7b:4f:23:64:53:
                    12:de:89:79:83:b2:38:34:26:eb:98:28:26:e2:3b:
                    b7:a0:26:bd:5b:b1:b5:0a:70:a7:5e:3c:25:d1:db:
                    9c:ce:dc:0d:28:7f:da:4e:6c:af:76:7b:c7:5a:e2:
                    6e:ab:38:64:c1:cd:c1:96:15:5a:b0:bf:dd:aa:bf:
                    80:8c:55:de:4a:1c:82:ee:81:d3:df:ac:24:f3:3b:
                    14:f1:59:30:40:c7:b7:11:9e:d4:34:a8:22:ad:14:
                    f5:66:c8:bf:7b:14:6c:a5:70:66:f7:ee:98:71:cc:
                    c6:74:ac:b6:24:20:02:34:e3:51:06:11:84:90:d0:
                    30:e6:b6:35:b7:82:d0:4f:6a:45:20:dd:53:b4:fc:
                    8b:9e:61:df:14:21:b5:af:0d:d4:f7:14:5f:84:0a:
                    26:27:36:ab:e9:2e:8c:7f:b4:c8:33:2d:3e:8c:10:
                    7f:9b:8d:74:c0:e9:94:18:a9:01:d2:84:2b:84:88:
                    69:a6:9c:da:e6:0c:36:6b:03:38:8e:a3:71:e3:d8:
                    b1:67:b7:96:43:db:c0:39:44:62:23:55:28:96:aa:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C7:05:A2:37:15:D2:13:36:AD:F5:2E:D4:F3:72:31:70:B7:5C:6D
            X509v3 Authority Key Identifier:
                keyid:08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/323830343a333464343a3a2f33322d3438203d3e20323635343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:85:a6:a1:bb:55:d3:da:a1:fa:b5:34:a6:5b:47:84:b0:34:
         31:57:72:e0:ce:7d:d8:db:c3:bc:46:ff:ea:26:2a:b5:b6:ab:
         4d:86:f3:f3:90:83:57:46:75:63:21:57:21:67:4f:a5:fe:34:
         cd:db:33:45:e3:e7:9b:93:5c:e1:38:fc:19:e5:89:62:ae:7c:
         f4:6b:20:3f:17:bc:90:25:d5:25:4c:02:67:cd:35:c8:13:d7:
         71:7e:24:68:41:4a:55:25:29:af:41:0b:89:28:98:67:8f:66:
         b3:16:3d:c7:74:77:0c:65:d1:9c:09:3c:3b:c8:89:38:66:15:
         46:5d:5a:ff:e6:e7:95:81:ef:5a:83:a3:b2:4a:c3:0b:d1:1f:
         cf:fe:12:25:66:96:7e:51:01:d2:26:32:aa:49:66:04:97:ec:
         be:11:e4:ca:85:4e:07:99:d1:67:60:13:ee:65:6a:0e:46:bb:
         67:7a:91:e9:57:c2:62:aa:12:75:c1:1c:b2:b0:af:d7:a9:e2:
         ce:a5:8c:40:a7:91:33:b9:97:24:db:76:1b:77:65:21:ed:df:
         d9:ff:18:bd:1f:e1:ba:3d:75:0e:03:fb:d9:e3:bc:16:ad:7d:
         ef:42:a8:c3:0b:67:1a:7c:75:ff:45:dd:5e:61:1b:f3:ed:d4:
         00:1a:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org