Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/323830343a333931383a3a2f33322d3438203d3e20323636353234.roa
File:                     323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (raw, json)
Hash identifier:          tf2RoPQHA6t0VO3R7OBwK1JIUkJraJ9Fvg8jLut8sAE=
Subject key identifier:   80:51:6C:8A:26:42:4B:AA:A6:3A:A9:DD:DF:E2:59:9F:B3:14:9F:1B
Certificate issuer:       /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F
Certificate serial:       02910A973DF7622A39ABA97EC8AD45F28D073BC4
Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/323830343a333931383a3a2f33322d3438203d3e20323636353234.roa
Signing time:             Thu 04 Apr 2024 21:07:43 +0000
ROA not before:           Thu 04 Apr 2024 21:02:43 +0000
ROA not after:            Thu 03 Apr 2025 21:07:43 +0000
asID:                     266524
IP address blocks:        2804:3918::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl
                          rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:91:0a:97:3d:f7:62:2a:39:ab:a9:7e:c8:ad:45:f2:8d:07:3b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F
        Validity
            Not Before: Apr  4 21:02:43 2024 GMT
            Not After : Apr  3 21:07:43 2025 GMT
        Subject: CN=80516C8A26424BAAA63AA9DDDFE2599FB3149F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:6f:56:75:6b:b4:de:38:dc:a7:b7:48:f6:
                    08:7a:fa:b7:a6:7d:23:95:ee:25:ce:4c:bb:31:54:
                    9f:69:f2:1c:e0:b4:2b:db:b2:b9:4c:e2:f9:52:2e:
                    b7:4b:53:b5:28:0a:31:46:e3:a0:ea:43:1f:5c:ca:
                    10:9a:90:e1:ca:7f:1d:68:ae:f4:69:a0:bb:f5:64:
                    68:73:d9:58:23:b6:27:6c:c2:03:4a:81:d0:2f:9f:
                    8b:50:c5:e7:4c:56:59:42:b0:c2:66:b1:0c:a0:d4:
                    0b:a3:e0:72:79:29:97:9a:15:2b:87:d7:13:f6:c8:
                    1e:6f:89:b0:92:26:26:36:15:04:7d:14:ff:49:d6:
                    21:a3:c5:82:66:1c:b2:0e:14:e3:e6:e2:9a:c1:44:
                    ba:1b:25:2a:55:bc:ce:67:e3:32:07:12:69:fc:6e:
                    0c:c2:85:66:d9:f8:d5:9d:29:d4:4e:f5:a0:9a:45:
                    cf:04:6d:d4:b4:9f:1a:30:0a:db:7d:9a:fa:bb:4e:
                    dc:49:24:b3:1a:ed:8b:b8:7e:a5:43:6e:ea:60:32:
                    ff:10:3b:3c:ce:39:3d:d0:ff:cf:1e:c1:84:13:53:
                    4a:9f:6b:17:f2:53:31:fe:46:21:32:55:28:fc:62:
                    be:d7:46:e2:85:3a:e9:42:4b:e6:3b:58:f6:81:b4:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:51:6C:8A:26:42:4B:AA:A6:3A:A9:DD:DF:E2:59:9F:B3:14:9F:1B
            X509v3 Authority Key Identifier:
                keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/323830343a333931383a3a2f33322d3438203d3e20323636353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3918::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:91:ea:9a:0c:d3:e3:ee:46:22:99:73:0d:b3:8a:11:4b:a6:
         92:3f:4d:a7:ad:78:24:36:ad:1e:0c:67:4f:80:3d:a3:a3:32:
         31:5a:6e:88:47:5a:ac:f0:ff:c4:da:81:48:33:4f:b9:5b:0e:
         c1:d0:c2:fb:9a:91:16:48:a9:52:f0:40:2d:65:5c:cd:18:07:
         8f:3a:73:1c:0e:cb:7b:aa:b6:13:8e:0b:ed:3e:02:4e:c3:e3:
         6d:f3:9d:c9:f1:db:3e:07:e4:c5:01:73:04:fe:07:ad:73:ef:
         82:62:e8:cc:6c:33:d6:5f:10:3e:63:53:47:b6:0e:7c:c9:a1:
         3e:eb:80:20:07:aa:aa:11:69:e2:b1:46:a0:40:fc:84:7a:ed:
         e6:4f:c3:fc:d5:ba:88:b4:ce:12:b0:74:d0:bf:20:77:26:c7:
         10:a3:fc:4f:75:c1:82:80:8b:35:81:85:f2:39:4b:e9:c9:e3:
         10:99:13:c4:c4:01:ea:bb:4c:e7:7c:7c:9e:5d:fb:82:86:35:
         65:86:99:ab:8f:28:f6:c4:fd:a1:4a:9f:42:4d:60:d9:fc:4b:
         0f:e2:27:4a:31:79:82:20:30:8d:91:5d:70:83:2f:ed:9f:8a:
         e4:37:76:64:7f:77:c8:66:02:c6:db:75:c8:02:10:3b:09:f8:
         74:9a:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org