Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3438203d3e20323731323934.roa
File:                     323830343a373934303a3a2f33322d3438203d3e20323731323934.roa (raw, json)
Hash identifier:          w5kE0/ukWFXHECK5661tj21AZRHpnn+AXh7PD1gK4VA=
Subject key identifier:   69:03:79:14:AB:FB:8C:66:69:BC:91:17:CF:BA:C2:05:AB:64:7D:0F
Certificate issuer:       /CN=BC55A04B353F6DDFE4D30618B1341D7C5A1E2406
Certificate serial:       2685D217B10B7FE2333572CAE615F74C562A26C8
Authority key identifier: BC:55:A0:4B:35:3F:6D:DF:E4:D3:06:18:B1:34:1D:7C:5A:1E:24:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC55A04B353F6DDFE4D30618B1341D7C5A1E2406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3438203d3e20323731323934.roa
Signing time:             Mon 11 Nov 2024 18:09:52 +0000
ROA not before:           Mon 11 Nov 2024 18:04:52 +0000
ROA not after:            Mon 10 Nov 2025 18:09:52 +0000
asID:                     271294
IP address blocks:        2804:7940::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/BC55A04B353F6DDFE4D30618B1341D7C5A1E2406.crl
                          rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/BC55A04B353F6DDFE4D30618B1341D7C5A1E2406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC55A04B353F6DDFE4D30618B1341D7C5A1E2406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:85:d2:17:b1:0b:7f:e2:33:35:72:ca:e6:15:f7:4c:56:2a:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC55A04B353F6DDFE4D30618B1341D7C5A1E2406
        Validity
            Not Before: Nov 11 18:04:52 2024 GMT
            Not After : Nov 10 18:09:52 2025 GMT
        Subject: CN=69037914ABFB8C6669BC9117CFBAC205AB647D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:0d:de:69:c4:b3:3a:fa:f0:f6:c4:51:ce:
                    6f:00:f2:a0:30:91:98:0a:a3:9f:72:43:ba:41:fa:
                    05:f2:48:7f:a7:b0:22:a2:02:55:08:21:52:15:32:
                    a7:f0:74:99:2c:9f:bb:f7:65:ba:24:c6:f2:3f:40:
                    63:a8:32:0e:15:4e:92:06:9c:b5:40:e4:3c:1a:63:
                    99:0d:d6:f0:d0:7d:5d:85:fc:96:e3:f2:9d:94:7d:
                    f4:2c:21:04:5f:2f:de:6a:c2:f3:c5:19:20:55:26:
                    e6:cb:e2:d1:ea:db:e5:96:4b:2e:1a:2c:76:4c:fe:
                    05:94:3d:31:64:84:5a:09:0d:22:de:07:50:db:f5:
                    24:cb:7a:d3:a9:3d:c8:cb:46:5a:48:da:ac:f0:cb:
                    62:ed:db:03:a4:e6:9f:da:15:58:65:54:49:53:36:
                    a5:78:f4:c7:99:9d:af:6c:dd:1b:9a:9a:d3:43:33:
                    39:0d:75:dc:ea:f1:b8:fb:22:9e:e6:79:12:af:8b:
                    ad:d4:37:2c:c2:83:23:2e:69:21:ce:24:93:81:10:
                    1e:62:ad:f7:58:d8:d8:81:0c:2a:9a:0e:80:12:39:
                    34:4a:2a:8c:62:7e:47:63:e9:2e:a3:c0:bd:4e:35:
                    15:f8:78:19:56:74:3a:f3:d2:4a:fc:3f:00:aa:36:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:03:79:14:AB:FB:8C:66:69:BC:91:17:CF:BA:C2:05:AB:64:7D:0F
            X509v3 Authority Key Identifier:
                keyid:BC:55:A0:4B:35:3F:6D:DF:E4:D3:06:18:B1:34:1D:7C:5A:1E:24:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/BC55A04B353F6DDFE4D30618B1341D7C5A1E2406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC55A04B353F6DDFE4D30618B1341D7C5A1E2406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3438203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7940::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:d4:f7:df:40:e3:a6:a3:35:a2:db:1e:5d:78:0c:ce:2f:
         d8:b6:27:02:1d:e7:74:6d:41:1d:5b:5b:e0:7a:19:b0:1a:94:
         6e:1b:78:57:e5:ee:9c:22:45:c2:ec:bb:69:43:1d:a8:dd:c1:
         ac:64:c6:6a:52:eb:75:26:6f:59:09:8a:d0:5a:4c:7d:be:f3:
         e1:b5:3f:a3:25:0b:96:f9:a0:8a:41:f0:ec:ee:66:79:7a:2d:
         a7:2f:db:71:a3:b4:bd:56:65:53:a5:66:f3:82:67:8e:77:8e:
         fc:e8:47:6e:06:dc:13:2c:26:ec:2d:78:03:e8:cf:26:e1:ac:
         31:ce:66:dc:9c:44:0e:3f:5c:57:27:a2:38:4d:5a:ab:56:38:
         b8:e5:d4:08:93:f0:2a:a7:47:6a:2d:7c:c6:c4:a4:ea:29:06:
         06:d5:76:92:20:2e:ae:50:4f:6d:7b:93:21:1f:78:35:da:61:
         26:4c:e5:c0:4e:77:1f:3d:25:2a:d8:08:01:f0:06:0c:0f:60:
         d3:f3:ed:9c:66:93:61:7a:31:f1:c3:de:1a:19:2c:71:10:d4:
         b7:a1:64:73:cc:50:80:76:63:29:05:07:fb:cf:12:78:c7:15:
         e3:98:19:de:db:b6:6c:2e:07:77:df:46:aa:53:47:62:f9:2e:
         84:5b:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:07 2024 by rpki-client on console-fra.rpki-client.org