Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa
File:                     323830343a346638343a3a2f33342d3334203d3e20323638333331.roa (raw, json)
Hash identifier:          wUBJavb2cbh4bUeED4AVhjC6p7GBjBX4G0JYEeYbVME=
Subject key identifier:   28:22:AD:11:65:40:8A:52:2B:5B:90:54:E2:05:D1:21:0B:CA:92:38
Certificate issuer:       /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial:       3E95218B4EBA2222E623A39E5EED2F8AA4C1E63C
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa
Signing time:             Thu 04 Apr 2024 23:21:28 +0000
ROA not before:           Thu 04 Apr 2024 23:16:28 +0000
ROA not after:            Thu 03 Apr 2025 23:21:28 +0000
asID:                     268331
IP address blocks:        2804:4f84::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
                          rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 19:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:21:8b:4e:ba:22:22:e6:23:a3:9e:5e:ed:2f:8a:a4:c1:e6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
        Validity
            Not Before: Apr  4 23:16:28 2024 GMT
            Not After : Apr  3 23:21:28 2025 GMT
        Subject: CN=2822AD1165408A522B5B9054E205D1210BCA9238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:a3:4b:6c:b5:81:7c:ce:ca:42:7c:44:b5:
                    51:cc:88:31:c1:92:0a:96:8d:36:99:01:ee:bb:f0:
                    4e:ec:11:84:f3:b5:9e:69:92:90:5f:d3:c2:c9:a3:
                    2a:d9:92:01:ca:2d:db:e9:f6:6e:ab:0a:b0:63:ea:
                    fb:4a:35:c8:c0:7c:bd:70:2a:d7:5f:42:2f:37:b0:
                    db:39:5e:19:32:74:f2:53:85:b5:dc:27:fb:8a:af:
                    14:33:bd:03:fa:de:7e:8a:88:46:ea:db:31:f2:bd:
                    49:1b:d6:04:88:21:21:fd:f4:d2:50:a8:e5:b9:2d:
                    e6:de:96:58:2e:d3:c4:70:a9:59:8a:93:be:e3:a7:
                    7a:fa:9f:7c:98:50:1e:88:e2:01:a0:b5:23:6c:21:
                    a2:56:82:69:43:a6:63:18:b5:51:82:7b:ed:72:33:
                    a1:cd:e4:66:af:dc:ae:6d:b3:9a:11:5c:8d:e3:60:
                    89:d3:bf:f1:06:bf:1c:2b:9f:c0:7f:85:de:26:35:
                    f6:6a:c8:cb:8f:79:ab:78:dd:b0:aa:e3:fc:5c:a1:
                    b0:2e:a2:f2:ab:ce:0b:bd:48:e5:af:bf:ea:a6:35:
                    5e:9b:e0:3f:a6:74:ee:e5:ef:90:b3:27:c2:0f:fb:
                    6e:60:b1:25:11:ac:01:49:86:62:5e:1d:c2:f6:eb:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:22:AD:11:65:40:8A:52:2B:5B:90:54:E2:05:D1:21:0B:CA:92:38
            X509v3 Authority Key Identifier:
                keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a3a2f33342d3334203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:d7:54:ac:f7:f5:8e:2f:c5:d0:ff:e9:71:a2:6f:52:bc:
         62:76:d4:b9:6d:6f:1f:44:c8:62:0a:e7:a3:61:ae:92:18:8b:
         f9:da:50:b4:69:bb:b1:a6:14:d4:8e:fa:87:dc:53:17:fe:ce:
         96:4f:df:79:6e:ad:24:71:9f:0e:09:d6:a8:8b:b8:2f:82:62:
         d2:69:7e:6c:c0:d3:62:54:3d:1d:f7:43:55:9e:53:35:1e:4a:
         c1:2d:42:e3:83:2f:06:bb:97:79:1e:63:71:c1:6a:a9:e9:b7:
         70:4d:06:ab:7d:63:2d:23:65:14:89:77:64:2b:69:e7:da:3d:
         14:fc:2d:ce:6f:2f:41:2c:f3:65:9f:b4:ff:e1:63:ef:84:3a:
         69:df:92:30:c4:27:c7:0b:49:5f:73:66:a4:4f:a3:88:2f:f3:
         af:c0:fc:7c:80:80:28:b5:6a:90:70:a0:26:15:da:cb:2b:a2:
         af:33:09:50:06:ec:2c:d9:0e:74:11:c8:4a:8e:fe:68:3c:81:
         54:5f:19:d0:31:f7:ac:d4:97:da:58:42:96:45:b1:78:b5:79:
         89:c2:a9:30:29:02:26:49:a9:20:2b:c6:af:19:e7:e8:65:e8:
         23:31:8c:0e:25:11:06:65:5f:1f:f7:b6:07:7b:9b:27:e9:22:
         18:c0:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:25 2024 by rpki-client on console-ams.rpki-client.org