Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
File:                     323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (raw, json)
Hash identifier:          OfniejyYHml8c4va5ROHpRfubb8Q7PfxH7OJpQK74zA=
Subject key identifier:   B3:A0:AC:CD:21:F9:12:D1:BE:54:C6:02:EA:A7:8D:2A:04:C1:82:89
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       79AA1EE9B79110353187E419B77864E66F72F891
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
Signing time:             Wed 04 Sep 2024 12:36:01 +0000
ROA not before:           Wed 04 Sep 2024 12:31:01 +0000
ROA not after:            Wed 03 Sep 2025 12:36:01 +0000
asID:                     264891
IP address blocks:        2804:2f70:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 12:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:aa:1e:e9:b7:91:10:35:31:87:e4:19:b7:78:64:e6:6f:72:f8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Sep  4 12:31:01 2024 GMT
            Not After : Sep  3 12:36:01 2025 GMT
        Subject: CN=B3A0ACCD21F912D1BE54C602EAA78D2A04C18289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:7a:1b:8e:c8:9b:a2:b5:7d:bf:3b:7c:8f:
                    35:7b:71:b4:d8:b3:f0:d5:9f:39:66:b9:53:76:8d:
                    36:81:eb:3c:2d:1e:38:4e:a5:eb:81:84:bd:7f:52:
                    e9:56:d5:4b:f6:ef:48:f1:4f:0e:de:09:dd:b1:84:
                    78:07:d5:77:31:56:cd:1e:68:07:68:41:98:b6:0a:
                    84:55:2e:85:40:d9:0e:20:bd:e0:2e:48:76:6c:3a:
                    c3:a6:b6:62:b8:85:74:5a:28:ef:d7:f9:a2:88:b1:
                    79:d3:ab:6d:ad:e3:93:35:50:77:22:58:64:1e:97:
                    94:bd:76:37:c6:5c:81:04:b7:32:ee:c0:01:ba:67:
                    c5:40:db:ca:ef:b4:2e:27:d6:78:36:94:d1:da:75:
                    06:55:e3:90:9e:1f:c1:b2:18:3a:02:a4:62:cd:86:
                    75:d5:2a:d5:ac:eb:d8:03:44:8b:bf:6b:f3:5a:84:
                    de:0e:21:bb:6f:7e:3c:d4:8c:27:53:0d:95:d4:2a:
                    74:6e:a0:98:c9:81:8f:ae:2e:fc:02:06:9e:67:d5:
                    93:7b:29:90:29:9b:1d:ff:8c:c9:f6:9e:89:20:c1:
                    e9:6c:7c:23:c2:93:bf:a2:1c:0f:54:11:46:f1:e8:
                    49:90:d9:82:a8:41:13:10:4d:19:5b:16:aa:06:de:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A0:AC:CD:21:F9:12:D1:BE:54:C6:02:EA:A7:8D:2A:04:C1:82:89
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:e6:81:83:9e:da:b2:38:ee:78:42:bb:34:4a:b3:60:25:3d:
         5a:66:12:8d:fe:26:9f:15:82:8e:b7:da:8c:b0:27:92:04:53:
         61:e6:9d:56:68:dd:e7:d0:ab:16:0a:80:3b:3e:32:c1:90:63:
         d8:c4:45:45:c8:da:a8:b8:40:7d:c6:d0:05:65:3e:10:0b:12:
         42:94:f6:1c:67:2b:e3:5c:b1:96:17:69:3a:cb:5d:74:c9:40:
         83:3a:83:2d:32:6e:c5:c3:7e:aa:d1:68:ea:a6:c2:0c:a2:94:
         c1:cc:fe:83:fd:8b:6e:90:5b:8a:b3:50:34:e4:6f:95:73:42:
         ce:c6:68:7e:f5:d6:b7:b8:29:fb:20:42:23:c2:ed:3e:0c:83:
         7c:ea:e7:f4:d8:2d:6c:a2:03:5e:0b:b4:de:e2:c7:c8:1a:a3:
         52:5c:55:1f:36:00:42:e6:50:ce:fd:39:f9:ac:04:81:f8:f7:
         dd:50:6b:a6:8c:43:74:74:62:e7:88:28:64:4a:d7:c1:95:6f:
         e4:f5:80:0e:a5:26:23:d8:1a:f6:8b:f0:67:23:a0:ed:28:ec:
         14:b1:4d:ed:5b:65:2b:b1:28:2d:ef:c5:4b:5f:8b:3b:c7:05:
         aa:54:31:70:8e:2d:20:2f:fd:4c:b6:ef:79:27:2b:70:13:e2:
         f6:f8:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:17 2024 by rpki-client on console-fra.rpki-client.org