Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a3a2f33322d3332203d3e20323637333438.roa
File:                     323830343a346331343a3a2f33322d3332203d3e20323637333438.roa (raw, json)
Hash identifier:          ELn6L1Fsn+j5IRdpzTbAffKJFqYh8JFey1vFnOLg8MQ=
Subject key identifier:   1E:1B:7E:B4:03:8D:6B:57:48:88:D4:56:AA:6A:12:EE:26:D5:14:D5
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       54DEC1A073F94BCA8471F54BAEA342A4E0657CB6
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a3a2f33322d3332203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:47:22 +0000
ROA not before:           Wed 31 Jul 2024 17:42:22 +0000
ROA not after:            Wed 30 Jul 2025 17:47:22 +0000
asID:                     267348
IP address blocks:        2804:4c14::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:de:c1:a0:73:f9:4b:ca:84:71:f5:4b:ae:a3:42:a4:e0:65:7c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:42:22 2024 GMT
            Not After : Jul 30 17:47:22 2025 GMT
        Subject: CN=1E1B7EB4038D6B574888D456AA6A12EE26D514D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:fe:97:63:cf:cd:d4:ea:e8:1c:04:63:64:
                    e8:a4:83:e1:f5:c8:e9:9e:12:03:de:73:31:3f:ab:
                    f2:11:d4:46:8e:c7:60:56:3e:28:66:b5:e8:ac:97:
                    8c:d3:f7:8f:80:ca:09:1f:86:18:96:63:72:9b:f0:
                    3c:4a:58:aa:ab:b9:29:ff:cf:2a:f9:ae:83:05:b9:
                    c3:31:b5:c6:c6:ab:c7:b1:f9:01:24:b6:6c:5a:8f:
                    ac:d4:5e:af:f9:fa:4a:14:93:df:2e:bb:a2:17:06:
                    6a:f3:5a:39:f1:dc:68:a5:b0:c5:3e:eb:e4:0f:84:
                    48:fd:ae:30:41:3d:ae:84:48:4c:39:45:f3:96:62:
                    cb:53:4b:0c:98:43:cf:8b:79:5b:9b:66:80:8e:bd:
                    93:83:07:3b:c6:4c:44:2e:6c:7b:fe:88:35:21:05:
                    74:06:3b:5c:34:d5:a6:fd:cd:a7:90:91:9f:9d:a7:
                    04:43:0b:83:e5:29:05:1d:14:20:c7:12:27:20:76:
                    c5:5c:0f:2a:40:99:69:51:29:b9:88:7a:e7:a0:45:
                    af:68:e6:14:e9:ac:a0:04:7b:7f:80:cd:05:cf:3a:
                    90:00:da:e0:6d:60:ea:38:bf:13:d2:a7:a1:a5:32:
                    7e:37:6e:45:de:2b:7e:76:2f:8e:b2:9a:dc:cc:99:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1B:7E:B4:03:8D:6B:57:48:88:D4:56:AA:6A:12:EE:26:D5:14:D5
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a3a2f33322d3332203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:a9:df:c6:16:c0:dc:6d:40:dd:39:8e:24:03:36:4d:9c:
         83:e1:72:05:96:61:0d:20:fc:c4:9e:d4:81:45:df:78:a3:82:
         b1:3b:02:35:8b:6d:fa:1d:e4:75:d9:82:a5:8d:50:b1:71:40:
         d4:f1:b2:86:14:15:45:e6:cc:fd:09:f8:f1:32:49:41:68:ff:
         c9:0e:bf:17:44:b2:9f:e7:65:7c:0e:c3:7d:73:5f:c3:3f:d5:
         0a:d8:21:98:76:9f:8b:35:57:ac:8f:65:ec:8b:d2:bb:0f:e3:
         aa:76:1a:07:39:69:97:07:15:d5:ee:4c:b2:14:52:bc:ce:e3:
         91:97:85:f9:bb:45:aa:1e:3f:d6:90:76:f7:f6:e3:2b:a0:3b:
         b6:17:09:20:22:05:40:c4:49:74:33:49:21:6a:fb:79:76:af:
         80:92:c8:3d:43:25:80:c3:6f:ea:83:d1:93:d4:a8:41:26:37:
         da:ae:6e:25:0a:1c:53:12:27:2f:4e:6e:a6:74:23:d9:5b:87:
         70:5f:18:4e:c2:ad:37:24:97:b8:5d:81:97:dc:f2:fe:e8:e9:
         bb:13:c5:c4:ab:52:5c:1e:fb:f6:e9:0d:02:5f:3a:1d:55:ad:
         fe:e7:dd:a6:46:76:46:ed:ef:fd:a9:68:9c:b7:aa:24:37:6a:
         d9:76:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:06 2024 by rpki-client on console-fra.rpki-client.org