Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3334203d3e203532363337.roa
File:                     323830343a6438383a3a2f33322d3334203d3e203532363337.roa (raw, json)
Hash identifier:          EuNUGwoNEXoRpKxeVBFFo9Xlfw5CUyn5r7ta/6axsS4=
Subject key identifier:   69:94:66:3B:D3:B1:91:63:80:96:EF:FA:61:A3:20:9C:A8:C0:78:2A
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       0455B7C7648734C63641AF5957BF7E6795C58331
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3334203d3e203532363337.roa
Signing time:             Wed 03 Apr 2024 18:38:56 +0000
ROA not before:           Wed 03 Apr 2024 18:33:56 +0000
ROA not after:            Wed 02 Apr 2025 18:38:56 +0000
asID:                     52637
IP address blocks:        2804:d88::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:55:b7:c7:64:87:34:c6:36:41:af:59:57:bf:7e:67:95:c5:83:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Apr  3 18:33:56 2024 GMT
            Not After : Apr  2 18:38:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:3e:10:90:18:e9:e9:43:69:a3:1f:29:e7:
                    e4:c0:b2:2a:fb:20:e7:1f:7c:3d:89:e4:d1:ca:27:
                    ea:73:d1:ab:42:e2:6c:76:e3:e4:49:9e:85:9a:fb:
                    f0:7f:20:87:82:51:aa:da:a5:46:45:24:b3:0d:a7:
                    ee:0a:b7:68:b8:9b:58:b1:ed:55:b7:42:6e:36:2a:
                    7a:e1:46:4b:f4:5a:95:60:7f:00:a8:07:fd:d1:9c:
                    e5:a9:ab:fb:ce:68:d0:d4:54:20:84:be:8f:7c:60:
                    e4:81:16:81:35:47:11:da:40:7d:45:6a:da:a6:73:
                    57:65:a1:b0:70:e2:ad:87:ee:87:10:ce:ed:4d:98:
                    8f:92:14:51:63:f5:a9:14:5e:14:47:56:be:62:74:
                    06:a3:6b:6b:4a:47:6a:03:c8:8b:c6:f5:3d:d8:41:
                    59:2c:63:82:91:75:86:2f:e6:40:b8:f3:c7:c0:d4:
                    3a:9a:be:70:57:6f:70:32:b5:7e:23:8b:41:da:15:
                    ec:f7:61:7b:87:19:ac:8f:0c:2d:96:75:b4:09:03:
                    6d:16:a6:30:63:18:a6:47:e5:a2:82:dc:38:93:50:
                    3e:5a:b8:e1:f7:e3:cc:70:3b:1d:fb:23:b5:6a:1b:
                    0b:8b:35:55:7e:3c:88:c6:85:28:7c:c3:33:37:de:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:66:3B:D3:B1:91:63:80:96:EF:FA:61:A3:20:9C:A8:C0:78:2A
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3334203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:b7:50:b3:7d:76:6c:8f:26:aa:46:c4:68:f6:d9:49:d3:
         c3:5e:34:0f:54:d5:08:6d:4b:28:fe:8d:f7:e3:3f:a7:89:41:
         d5:70:c5:dd:0f:4b:e3:80:78:cf:3a:36:74:2d:d0:91:8d:2f:
         b6:e4:53:d2:eb:e0:e8:27:dc:d6:09:69:6a:e3:31:f5:46:da:
         56:ad:e2:4d:98:e3:2b:fe:00:6a:b6:cc:17:99:76:d6:8f:5a:
         c5:6e:5a:74:8e:9d:7b:dd:ce:b4:bd:9d:8c:bc:15:f4:7a:87:
         fe:25:58:27:b7:c6:3d:ab:28:47:ed:c2:c3:38:0b:20:02:1f:
         3a:1d:2a:ce:f9:12:12:97:bc:09:b5:40:f7:8a:3c:d4:41:53:
         08:ea:a5:2f:b4:f7:8e:0a:d7:89:66:a3:b9:0a:d2:23:70:f2:
         82:38:ca:76:cc:63:cb:e1:0f:36:51:4a:77:3f:9a:19:6e:ff:
         97:ee:fc:c4:83:32:81:14:31:ef:6a:f0:37:7a:53:97:7b:e3:
         74:33:aa:17:7b:c9:39:54:d0:0e:8d:a1:b0:16:e3:ec:ca:70:
         40:f9:d9:8a:79:ce:1c:a1:b7:6b:f1:d2:fb:72:75:57:8c:33:
         c0:ff:1d:1e:08:80:bc:0e:b8:62:d6:fc:c9:2c:d8:f2:a7:6d:
         56:66:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org