Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
File:                     323830343a6438383a3a2f33322d3438203d3e203532363337.roa (raw, json)
Hash identifier:          fwGQw3UpS4DQcKSFUW54OTjUZTTF5dvPHwGGqpOnhMk=
Subject key identifier:   5D:1C:99:44:88:D0:69:66:BD:6C:38:A4:F5:AC:A5:CA:98:55:CA:0F
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       472494704C6F8F440632A136FA0A769726AFBE40
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
Signing time:             Wed 03 Apr 2024 18:38:56 +0000
ROA not before:           Wed 03 Apr 2024 18:33:56 +0000
ROA not after:            Wed 02 Apr 2025 18:38:56 +0000
asID:                     52637
IP address blocks:        2804:d88::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:24:94:70:4c:6f:8f:44:06:32:a1:36:fa:0a:76:97:26:af:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Apr  3 18:33:56 2024 GMT
            Not After : Apr  2 18:38:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:aa:dd:1d:fb:6c:d1:92:15:27:58:2e:f6:
                    5d:18:62:da:55:4e:a7:a1:92:f9:22:81:2d:99:32:
                    22:46:de:02:0e:b9:a0:7a:d3:50:d2:bc:55:bb:39:
                    e4:3f:4c:99:bd:ce:b5:5d:4b:f0:88:9a:2e:ee:ee:
                    1b:4c:0a:dc:a8:79:fd:99:26:d8:e6:28:f0:05:ea:
                    26:3f:fe:0b:95:c5:b9:3f:17:cd:03:99:9a:2b:c2:
                    59:be:9f:69:4e:51:8d:4a:cd:9d:3f:ad:ac:ba:f9:
                    02:e1:7e:40:1a:89:1b:44:15:80:37:f7:96:95:92:
                    e3:95:09:a9:c0:1d:30:b5:0d:29:53:6e:27:80:4e:
                    95:5b:fa:6f:27:5e:3a:91:f6:af:d4:90:b1:b3:79:
                    8d:42:d2:70:0b:82:11:b6:59:ec:b0:45:bb:27:fe:
                    12:b0:f1:97:de:8d:17:6b:9c:b7:7d:2d:d0:5c:0a:
                    ca:ee:18:d3:b9:93:19:af:9b:e8:7d:93:c6:f8:96:
                    4f:93:72:c6:7d:f8:02:6d:be:81:9e:10:45:3e:3a:
                    64:2e:bc:b5:8b:9b:14:d1:78:17:b3:32:ec:3c:07:
                    c9:12:5e:d7:ef:1c:b2:7a:9b:84:a6:20:11:92:f4:
                    75:d3:4f:41:34:f2:08:55:d5:7e:89:62:08:18:20:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1C:99:44:88:D0:69:66:BD:6C:38:A4:F5:AC:A5:CA:98:55:CA:0F
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3438203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:b7:03:31:a4:02:d3:51:c0:dd:25:64:af:ed:f0:fe:d6:
         8f:10:83:ad:0f:a8:65:c2:19:5f:04:71:2c:52:33:ef:05:9a:
         50:8d:24:b7:bc:75:3a:d1:41:9b:e9:bb:78:74:41:cc:e1:8c:
         1f:aa:91:8f:9e:c5:10:b4:5e:b5:6c:2c:00:f4:d2:32:50:bc:
         a3:48:f4:b9:f9:96:76:1c:38:22:6e:55:22:71:5a:9b:35:7f:
         f3:38:44:47:0e:77:cd:ff:b9:e2:40:27:c2:4c:fe:5e:f6:ad:
         5e:15:76:5c:7c:d2:0c:7e:7f:e9:88:e3:a8:b6:82:8a:51:41:
         e4:c9:59:84:b1:28:2a:17:62:4b:bd:e6:20:1e:2f:53:7a:0d:
         fa:51:fc:95:dd:d7:bc:99:4c:25:40:6d:d4:3c:f0:e4:71:c7:
         7e:cd:0f:02:a4:05:15:12:fc:0f:d1:f6:8e:17:aa:46:d1:dd:
         3a:02:f3:96:21:8c:74:28:34:e1:f8:c0:0d:c6:20:94:cd:1b:
         8b:1c:5f:64:e7:ea:4f:ad:06:52:c8:17:bc:3f:3b:e9:02:b7:
         95:21:3f:28:a4:76:41:6d:2c:fc:57:9c:2a:1d:db:c9:42:3c:
         9f:a2:c2:34:6c:26:c1:2a:2b:b2:c7:55:12:39:5c:95:2d:ac:
         58:0c:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org