Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa
File:                     323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (raw, json)
Hash identifier:          BRAGESPlirh3U+6ZZUuUE4v1QWkyvG0inczhk9utG3M=
Subject key identifier:   A2:AE:6C:52:62:55:C2:9C:32:FE:88:0C:98:4A:10:48:B3:39:AB:A6
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       334896FC2E5F2005C75B4218E2D8626A40881E6D
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa
Signing time:             Wed 03 Apr 2024 22:41:56 +0000
ROA not before:           Wed 03 Apr 2024 22:36:56 +0000
ROA not after:            Wed 02 Apr 2025 22:41:56 +0000
asID:                     265081
IP address blocks:        2804:327c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
                          rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:48:96:fc:2e:5f:20:05:c7:5b:42:18:e2:d8:62:6a:40:88:1e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Apr  3 22:36:56 2024 GMT
            Not After : Apr  2 22:41:56 2025 GMT
        Subject: CN=A2AE6C526255C29C32FE880C984A1048B339ABA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:9c:ff:58:1d:41:42:13:59:10:99:27:34:
                    05:19:af:10:f3:d5:a1:db:04:4e:00:a7:6c:88:3b:
                    77:7c:e5:3b:6b:2e:4f:d9:87:81:40:73:17:2d:78:
                    af:a5:22:63:94:90:11:26:1b:62:50:2f:f4:27:8a:
                    0f:00:9e:dd:63:86:a4:be:3d:80:8d:48:04:f7:72:
                    89:fa:19:f3:3b:f5:8d:7a:e2:38:50:21:b4:f8:ea:
                    62:20:b6:3e:a3:9d:de:25:e6:6a:d3:8a:ca:9f:2f:
                    d7:a8:d4:9a:93:08:68:8c:53:c8:1f:9b:88:4c:90:
                    31:59:16:15:e6:de:36:5b:8f:ee:5e:4b:84:f1:f6:
                    d8:13:25:7a:50:4c:82:1a:f2:4e:69:86:99:30:81:
                    50:ae:29:a4:31:b1:05:84:d8:54:4c:24:02:c5:a4:
                    40:6c:ba:be:36:24:f9:7e:04:f3:da:97:92:f0:24:
                    e7:29:d4:06:0d:86:a6:09:30:af:1c:94:71:fa:6d:
                    3c:95:74:03:76:d1:c8:5b:77:a4:62:ea:a6:a0:b1:
                    72:ab:3c:b2:69:f4:d1:51:2d:56:fc:81:47:39:83:
                    63:ae:78:c3:22:0c:c6:7f:4f:c1:90:35:58:60:dc:
                    5a:8a:5b:b6:78:85:2e:be:60:86:e9:f8:98:76:56:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AE:6C:52:62:55:C2:9C:32:FE:88:0C:98:4A:10:48:B3:39:AB:A6
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:327c::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:fb:8c:81:c5:69:ad:27:1f:e9:96:09:9e:25:16:43:1c:cf:
         3e:86:cc:cb:ab:d3:f6:17:b8:86:e8:f9:44:b5:0c:98:a3:56:
         f9:80:13:36:8f:eb:36:e2:b9:ec:fa:8f:a3:96:0c:51:73:b0:
         56:b1:fe:f9:0b:b0:3b:2e:4b:2b:64:0f:eb:f1:31:eb:7f:0f:
         d6:f3:e0:bd:0c:9a:f9:1a:8f:a2:cb:a8:8b:28:75:4d:d1:52:
         48:9d:f8:62:c8:5b:f8:fe:ef:45:0f:a6:27:57:65:b5:79:44:
         9b:40:92:c0:90:a9:41:f1:48:5b:1f:ec:7b:4b:e1:09:66:24:
         93:ca:2b:2c:b9:0a:57:55:9e:90:e0:79:6a:5b:b6:c7:50:90:
         c3:ea:b7:63:d7:97:f9:a7:aa:2a:1d:9e:d7:27:d9:61:41:37:
         7b:f3:13:10:37:1f:7f:57:30:03:b2:82:6d:5c:d4:54:b8:1d:
         5f:d0:bf:19:64:46:53:ad:4d:c4:d7:02:0c:99:3b:1f:49:bd:
         db:3a:9d:31:9b:68:23:31:57:3d:f2:51:ac:c3:fa:3f:8b:a9:
         52:c3:44:40:1f:c3:c2:e1:9f:ca:53:a5:c1:be:9f:e6:b8:2b:
         2c:31:3c:80:54:47:55:2b:2b:f8:ad:01:b0:da:97:95:ec:7b:
         cb:3d:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:11 2024 by rpki-client on console-ams.rpki-client.org