Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
File:                     323830343a363862633a3a2f33322d3332203d3e20323639373132.roa (raw, json)
Hash identifier:          nISZBgjJXVYwxNnXnRZ1oZdVQuwGbrGbuFiROlJLvN8=
Subject key identifier:   01:10:78:AF:36:3A:72:1B:18:B8:98:48:8C:95:40:61:75:B2:30:34
Certificate issuer:       /CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
Certificate serial:       207D042059869149700EBEFB1353A394F96AEF4D
Authority key identifier: 8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
Signing time:             Wed 22 May 2024 18:13:18 +0000
ROA not before:           Wed 22 May 2024 18:08:18 +0000
ROA not after:            Wed 21 May 2025 18:13:18 +0000
asID:                     269712
IP address blocks:        2804:68bc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7d:04:20:59:86:91:49:70:0e:be:fb:13:53:a3:94:f9:6a:ef:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
        Validity
            Not Before: May 22 18:08:18 2024 GMT
            Not After : May 21 18:13:18 2025 GMT
        Subject: CN=011078AF363A721B18B898488C95406175B23034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:23:b1:a5:06:3f:fb:76:73:36:c6:6b:7b:
                    aa:b1:17:32:58:f2:43:10:5c:2c:50:89:ba:1a:11:
                    8e:68:68:bf:83:03:8f:06:b4:e0:a9:2d:69:bc:c7:
                    6a:63:76:b7:6a:fa:c1:1d:8b:e6:bd:9e:44:0c:b9:
                    b7:8e:17:4e:e4:e6:77:12:b4:94:fd:96:99:40:f5:
                    55:27:15:9a:c4:32:27:a4:09:de:5b:31:6c:71:1a:
                    3a:3d:8c:df:ed:42:b6:58:d8:e8:b2:01:2f:cf:6e:
                    7e:53:37:bd:cf:e4:a9:79:c2:da:92:53:d6:a9:ef:
                    a3:38:f9:df:d5:f7:04:ac:b7:5b:94:e7:f2:11:76:
                    d0:b7:90:b5:23:13:c4:75:aa:fb:f8:b6:35:bb:61:
                    13:1c:9b:9b:d9:89:9e:b8:cd:8e:31:35:b9:13:fa:
                    88:85:bf:ee:30:63:22:78:b3:d4:4e:e2:d2:19:ef:
                    21:78:de:b9:96:5b:a7:93:24:21:5f:7d:f4:3a:88:
                    c7:50:bc:cc:ac:6c:3d:2e:9d:26:fc:08:2b:68:44:
                    d4:b8:f1:a3:e9:e1:0b:20:89:59:81:0a:d2:2c:18:
                    18:c2:21:c1:15:3c:8c:71:f9:de:d7:f4:6e:80:9a:
                    5b:45:b7:2b:5b:35:06:fc:84:12:cb:d8:75:eb:b2:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:10:78:AF:36:3A:72:1B:18:B8:98:48:8C:95:40:61:75:B2:30:34
            X509v3 Authority Key Identifier:
                keyid:8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:fd:36:27:af:a3:18:d8:47:1a:95:81:8b:de:ca:d3:28:
         0d:bd:50:f3:3a:3f:4c:ea:ba:b1:c5:64:bc:d3:55:7b:5d:02:
         20:c7:47:27:71:ea:7e:c3:23:2f:9a:75:b2:39:4a:5d:7e:fe:
         ec:a4:80:b5:9d:0b:fd:dd:7d:56:e2:e4:7a:35:f0:f0:fe:6e:
         2e:a4:7b:fe:08:5f:64:7f:81:da:fe:70:8f:fa:aa:f4:53:a0:
         49:9b:13:8f:fe:6e:91:fc:51:4b:0e:41:df:82:2d:29:22:1b:
         b9:50:0d:52:5e:72:88:59:7f:50:cd:c2:30:cb:1e:87:7f:dd:
         39:41:b4:1e:c5:c9:28:2c:3c:69:c6:f6:18:f5:e0:ea:1c:2a:
         79:14:72:7a:34:4e:88:4c:35:9b:7f:31:fa:df:95:42:18:6d:
         41:e4:76:4a:fe:87:53:94:a3:50:1b:73:6b:a2:3f:59:7b:87:
         4d:28:ac:a8:59:66:5d:1d:a4:9b:88:c8:55:4d:12:5b:21:d8:
         9d:6f:02:92:b6:72:1b:e9:8f:c9:14:da:c9:87:78:09:16:7a:
         7c:6a:2d:a4:1a:76:d8:90:4d:c8:c5:ed:54:e7:04:46:53:4b:
         86:af:43:61:65:b6:fb:b7:f7:a6:c9:4b:d0:18:c9:77:90:0a:
         be:f9:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 04:58:19 2024 by rpki-client on console-ams.rpki-client.org