Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa
File:                     323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa (raw, json)
Hash identifier:          9V2Ou2AZZOoEJ+Cc0Y6IYur6ogNqL9QHh0+1jkl4knk=
Subject key identifier:   49:F8:FA:6E:7E:BC:53:84:AF:90:C0:A5:26:DC:72:A8:35:C2:C3:61
Certificate issuer:       /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial:       5978AA2C7878385E908BB9E54E5C113D15B96DEC
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa
Signing time:             Thu 04 Apr 2024 23:21:27 +0000
ROA not before:           Thu 04 Apr 2024 23:16:27 +0000
ROA not after:            Thu 03 Apr 2025 23:21:27 +0000
asID:                     268331
IP address blocks:        2804:4f84:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
                          rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 19:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:aa:2c:78:78:38:5e:90:8b:b9:e5:4e:5c:11:3d:15:b9:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
        Validity
            Not Before: Apr  4 23:16:27 2024 GMT
            Not After : Apr  3 23:21:27 2025 GMT
        Subject: CN=49F8FA6E7EBC5384AF90C0A526DC72A835C2C361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:d1:17:0f:38:ac:55:18:53:0f:b5:20:e7:
                    66:c4:e3:b2:c1:24:c8:ad:e1:c1:f3:4d:74:1d:be:
                    9f:e9:94:ae:7f:e6:fe:c2:96:b6:c4:dc:e0:02:d2:
                    fb:83:e9:48:3e:99:89:40:78:b1:2c:a2:b0:fd:b7:
                    e2:d4:c1:1f:0b:f6:7e:5e:83:12:12:85:38:c7:f1:
                    00:b4:86:05:9a:60:38:93:73:1a:bc:e8:f6:a1:3a:
                    90:15:04:fc:45:42:03:20:0f:d0:1e:19:70:a1:16:
                    a0:d4:70:5c:bc:ba:0c:75:8f:45:cd:56:13:5d:7e:
                    49:d1:33:5b:56:66:22:02:04:15:1a:2a:39:8a:34:
                    a7:cb:77:96:b6:b2:b0:ed:be:7f:ae:e0:dd:ac:fb:
                    73:ad:c5:f3:04:7f:5b:48:ff:7c:30:b3:75:04:72:
                    58:e6:ad:9c:b4:42:78:ca:9c:40:40:83:83:d0:6a:
                    58:99:5f:33:01:e8:3c:cb:08:6c:76:59:39:dc:c7:
                    20:fa:62:e0:54:db:1b:28:40:29:95:04:81:4c:80:
                    75:14:08:e0:40:7c:f9:18:15:00:d5:dc:0c:ba:ea:
                    b0:88:e3:b0:da:41:63:15:77:b2:20:10:e1:85:67:
                    b8:60:30:b0:b8:60:35:c5:a3:3a:3d:cb:e4:06:9e:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:FA:6E:7E:BC:53:84:AF:90:C0:A5:26:DC:72:A8:35:C2:C3:61
            X509v3 Authority Key Identifier:
                keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:99:c9:2f:7a:3d:4b:89:65:31:86:97:ed:c2:15:bb:f2:
         37:64:7b:5d:f7:c2:1e:aa:0d:40:a3:2a:9a:4d:cd:5a:c5:aa:
         fa:17:c0:f5:73:aa:b6:b0:a0:31:7a:e9:19:08:4d:7b:f1:b6:
         e7:85:88:f0:96:1e:62:b1:64:50:66:67:f0:89:fa:a9:9d:e3:
         34:92:a8:52:c2:be:4f:2a:af:3b:a0:06:64:34:ec:68:d3:01:
         ee:ae:32:87:2f:79:0c:9a:be:cc:4e:ae:49:b0:17:06:96:b7:
         73:3e:3b:04:e2:d5:b5:33:a3:64:4e:ed:f8:7a:b5:f7:19:96:
         3b:ca:68:aa:f0:fc:45:c3:b6:56:c7:f8:79:d7:7c:fa:fe:16:
         d3:a0:00:7a:d0:fb:6d:2b:91:45:91:c9:2e:e2:69:3e:46:f0:
         92:52:fc:70:2c:45:3c:f1:49:f4:78:7f:4a:1c:27:a9:1e:ff:
         7f:76:fe:05:bb:8f:92:6b:84:97:22:91:49:85:72:95:a3:20:
         9e:db:1f:5a:5b:9b:89:6b:bf:a9:50:5c:d3:be:50:76:19:95:
         b0:57:5f:f7:a4:63:fe:d7:f6:34:2a:7e:3d:3b:c3:1d:0a:23:
         c7:f6:9d:ff:41:8d:ea:c3:7a:6c:a5:9e:ef:76:36:8d:74:46:
         6b:1b:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:46:23 2024 by rpki-client on console-fra.rpki-client.org