Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/323830343a313735383a3a2f33322d3438203d3e20323633313339.roa
File:                     323830343a313735383a3a2f33322d3438203d3e20323633313339.roa (raw, json)
Hash identifier:          pzN8r1etnGVn76KLAbfyvezQUY5heDl8tOBoDPJS2KU=
Subject key identifier:   13:F1:0B:48:DF:13:32:7F:86:70:4B:A6:04:B8:AC:C0:E1:38:64:85
Certificate issuer:       /CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA
Certificate serial:       58728A65528C365686787F28857417947217484C
Authority key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/323830343a313735383a3a2f33322d3438203d3e20323633313339.roa
Signing time:             Fri 05 Apr 2024 00:11:22 +0000
ROA not before:           Fri 05 Apr 2024 00:06:22 +0000
ROA not after:            Fri 04 Apr 2025 00:11:22 +0000
asID:                     263139
IP address blocks:        2804:1758::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl
                          rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:72:8a:65:52:8c:36:56:86:78:7f:28:85:74:17:94:72:17:48:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA
        Validity
            Not Before: Apr  5 00:06:22 2024 GMT
            Not After : Apr  4 00:11:22 2025 GMT
        Subject: CN=13F10B48DF13327F86704BA604B8ACC0E1386485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:58:52:84:62:48:8c:57:4d:7f:1f:65:fd:
                    29:e3:4b:60:99:71:eb:33:f3:eb:2e:3e:58:df:f0:
                    b6:83:8a:37:26:95:68:1e:8c:a7:91:31:87:63:34:
                    21:59:d6:b3:08:6f:ab:23:5d:ec:b6:84:67:56:39:
                    c7:63:39:22:0d:c6:3d:d7:1c:fb:30:61:93:0d:9a:
                    f3:46:e5:67:53:d4:4a:70:74:4d:40:b1:ad:c5:bd:
                    57:91:ea:be:1c:01:4d:b8:ec:27:e2:1a:d1:05:5b:
                    73:ad:d1:51:4e:07:a7:2f:89:e3:fc:8e:94:99:8c:
                    28:26:67:74:c7:65:3e:d1:13:ef:a9:4f:06:d9:92:
                    c1:03:c1:d3:a0:a4:75:e3:22:8a:9d:9f:cc:52:3e:
                    59:02:03:54:92:42:b9:e5:58:3a:1f:1a:ba:de:41:
                    4d:55:af:4d:24:52:26:60:30:2c:bd:a7:5f:b6:17:
                    8f:ab:2a:6e:a3:c8:34:d5:1f:85:d8:af:13:d8:b1:
                    cb:60:a2:e2:fc:7c:19:06:af:3c:4c:82:7c:e9:7f:
                    26:b2:2e:48:d2:8a:b7:6d:ee:13:c5:e6:6c:30:37:
                    69:f7:b0:7a:63:1a:1e:fa:83:d3:20:06:94:9a:d1:
                    31:46:ed:ea:bc:65:be:2d:00:9b:08:44:4b:22:fc:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:0B:48:DF:13:32:7F:86:70:4B:A6:04:B8:AC:C0:E1:38:64:85
            X509v3 Authority Key Identifier:
                keyid:BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/323830343a313735383a3a2f33322d3438203d3e20323633313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1758::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:9c:b6:ed:f2:59:e3:8e:2a:d6:73:3b:72:4b:45:0f:99:
         c3:22:f5:b7:64:da:e6:b7:36:36:90:f7:a9:21:2f:2b:02:c9:
         77:5e:c0:db:e8:1c:06:52:de:7d:99:5e:3f:a9:02:43:f4:1f:
         07:0d:f4:40:07:70:5b:cc:03:66:75:41:02:2b:56:d5:cc:56:
         2f:bd:a9:cc:22:37:6b:d1:d9:db:c4:d2:46:3e:6e:f5:89:23:
         21:75:35:6b:73:fa:3f:7b:85:15:bd:12:a1:11:03:43:eb:de:
         d1:12:78:f2:c0:53:53:27:92:26:46:d4:82:39:5e:02:17:fa:
         a2:7f:ff:ad:35:32:86:2a:85:a1:8f:16:df:ee:29:e2:d0:b1:
         1a:5c:80:64:6f:a7:8e:b7:6a:d4:af:0a:76:01:ee:54:77:03:
         3e:d1:1a:12:63:6e:12:60:7a:e8:76:44:f5:51:19:ce:82:ac:
         d3:62:63:e6:a1:26:9e:88:c9:74:54:e9:d1:61:a1:25:8c:5d:
         d6:44:2a:c0:d5:b9:e6:8e:6f:21:03:11:2e:d2:d8:37:db:77:
         42:bf:cc:85:12:eb:9d:60:e2:54:ff:f6:09:8b:29:49:64:9c:
         96:eb:f6:e6:18:66:e8:77:25:07:0f:e1:f1:f3:d2:c6:89:38:
         51:fd:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org