Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/323830343a3431343a3a2f33322d3438203d3e20323632373630.roa
File:                     323830343a3431343a3a2f33322d3438203d3e20323632373630.roa (raw, json)
Hash identifier:          Zy8KVfkAZZwfHChVvh4tCvTvTRTLX22ksoj8mkp0yjA=
Subject key identifier:   F2:92:13:23:7F:45:94:ED:59:55:99:05:64:5A:AC:1D:85:8D:13:AB
Certificate issuer:       /CN=B69F04A56302F33CF21A166C862CB615F9EB1C0F
Certificate serial:       61922D7A5385823BB55A7435A440410E612615D7
Authority key identifier: B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/323830343a3431343a3a2f33322d3438203d3e20323632373630.roa
Signing time:             Fri 10 May 2024 17:23:25 +0000
ROA not before:           Fri 10 May 2024 17:18:25 +0000
ROA not after:            Fri 09 May 2025 17:23:25 +0000
asID:                     262760
IP address blocks:        2804:414::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.crl
                          rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:92:2d:7a:53:85:82:3b:b5:5a:74:35:a4:40:41:0e:61:26:15:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B69F04A56302F33CF21A166C862CB615F9EB1C0F
        Validity
            Not Before: May 10 17:18:25 2024 GMT
            Not After : May  9 17:23:25 2025 GMT
        Subject: CN=F29213237F4594ED59559905645AAC1D858D13AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:70:87:be:ae:06:ad:5a:d7:e6:46:ff:33:d4:
                    ee:20:71:77:16:0c:9d:ea:d0:85:40:7d:c2:30:2d:
                    c6:ed:ba:c5:07:12:c3:c4:a8:1d:95:35:26:08:e2:
                    30:8e:f8:a7:b4:e7:d1:90:31:b9:4a:c2:08:ef:ce:
                    f2:77:ec:39:34:c9:59:d8:8f:dd:f0:43:97:d7:30:
                    e4:d9:89:88:fb:09:3d:8b:5b:aa:5e:41:a5:f2:ae:
                    f5:61:92:dc:b1:fd:6b:17:2e:78:24:7f:a6:39:4d:
                    ba:77:50:3f:90:50:ee:6b:3f:b7:e5:1e:cc:2d:df:
                    fd:8e:ab:c2:f4:47:fd:d1:57:1a:d9:6d:c6:64:fc:
                    03:31:13:a4:0e:f9:ab:9e:f4:d0:91:7e:65:de:ba:
                    0c:df:92:76:0c:9f:46:73:06:ab:c1:66:70:77:90:
                    11:34:b9:b6:8a:23:f8:f6:5d:27:da:4a:7d:08:22:
                    ae:83:7e:17:8d:6a:a6:99:68:10:ce:e4:7c:bb:b4:
                    be:e3:05:46:4f:ec:01:ad:27:61:8a:91:5d:68:7e:
                    26:90:cf:94:aa:a6:98:d2:c6:a3:95:8f:51:30:9d:
                    4d:98:a4:c8:18:50:c2:ac:14:b7:f9:1c:61:4d:2e:
                    3a:d5:c5:a3:9d:e7:9d:d6:f9:4d:49:e9:12:5c:23:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:92:13:23:7F:45:94:ED:59:55:99:05:64:5A:AC:1D:85:8D:13:AB
            X509v3 Authority Key Identifier:
                keyid:B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/323830343a3431343a3a2f33322d3438203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:414::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:75:f3:40:6a:02:dc:2e:37:68:3a:c5:e8:a9:89:59:64:04:
         6a:b4:fd:91:8d:7b:74:1d:e0:90:81:f7:56:4b:0e:8f:bd:ed:
         80:42:c0:b9:64:8c:be:f8:36:89:1d:2e:f7:96:3b:4d:cc:e2:
         d3:7b:f4:d9:ad:b4:f9:9d:c6:71:85:b2:5e:9d:64:42:81:de:
         dc:a1:3a:6f:cc:16:a8:a0:67:6c:94:c9:c4:35:b8:b4:18:a0:
         0a:9d:12:03:6d:5b:91:50:a6:07:27:c0:22:6b:f4:00:26:06:
         b5:41:6e:f7:96:46:77:c4:4e:e8:5f:2f:c5:a9:87:3a:ed:68:
         d5:f0:e5:13:47:e8:04:5c:20:02:71:fd:5c:93:ab:24:5f:34:
         8d:7f:79:c9:c5:1f:8f:00:53:68:0c:6b:25:cd:92:03:6b:4f:
         24:3a:d6:9a:ca:ab:38:36:0c:e8:ee:d8:e1:b1:7e:9c:a9:36:
         2e:fc:ec:97:cd:d3:94:09:33:40:56:69:ae:f0:67:b8:3e:c6:
         43:3f:e3:ea:7a:39:74:29:e0:3f:cf:d0:bb:87:40:81:ba:13:
         49:ac:df:30:72:ed:44:56:3d:ee:96:51:46:52:59:30:ed:d9:
         27:d6:52:3c:dc:fb:bf:b1:01:2f:5d:12:00:b7:74:5c:1f:ec:
         c0:0c:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:42 2024 by rpki-client on console-fra.rpki-client.org