Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a616130303a3a2f34382d3438203d3e20323637333438.roa
File:                     323830343a346331343a616130303a3a2f34382d3438203d3e20323637333438.roa (raw, json)
Hash identifier:          3j9mswe78wmHwmqrqQH5uKpDuMVhaBTrpfiERWqffJs=
Subject key identifier:   D6:BA:86:7D:9A:6C:34:B2:56:77:42:74:7A:4C:8B:4B:65:AA:7A:4D
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       3ABA2A244775E824EBC12997471FC4B7EAF14B5B
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a616130303a3a2f34382d3438203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:47:55 +0000
ROA not before:           Wed 31 Jul 2024 17:42:55 +0000
ROA not after:            Wed 30 Jul 2025 17:47:55 +0000
asID:                     267348
IP address blocks:        2804:4c14:aa00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:2a:24:47:75:e8:24:eb:c1:29:97:47:1f:c4:b7:ea:f1:4b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:42:55 2024 GMT
            Not After : Jul 30 17:47:55 2025 GMT
        Subject: CN=D6BA867D9A6C34B2567742747A4C8B4B65AA7A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:14:48:d6:0c:18:91:3f:30:c7:57:90:36:
                    95:77:9f:5b:e2:41:fd:24:fa:80:42:e2:fe:9a:00:
                    74:d5:ef:34:46:20:8c:b6:89:19:00:0f:a9:85:2b:
                    7e:c0:0a:22:35:f1:75:95:5a:a0:b3:27:b7:b9:b7:
                    ee:c4:55:84:fb:ad:cb:a9:8c:84:03:9f:07:ff:71:
                    35:d0:9f:f4:64:84:dc:19:99:2a:3b:05:ca:f9:75:
                    6c:47:2e:ce:04:31:d2:da:95:ed:c6:a2:85:a2:f9:
                    97:34:c5:d9:78:fe:1e:e9:b1:a0:cc:ff:25:3d:e3:
                    aa:f4:d3:d3:cc:25:57:b4:ee:0c:71:98:ef:85:4f:
                    17:50:e6:a6:b5:bb:a7:35:22:35:ed:47:e3:a5:dc:
                    14:91:93:13:91:6f:32:45:c7:07:4a:f4:2d:6b:9f:
                    d7:14:56:f1:3a:72:3c:26:85:94:7d:6f:f1:00:86:
                    74:98:49:c5:eb:6b:4a:cd:0d:96:d3:06:b6:ef:03:
                    91:39:6c:b3:d9:37:a6:97:13:31:72:aa:2a:6d:96:
                    87:96:52:a6:f3:b5:5e:61:2a:c8:d8:37:53:46:85:
                    98:49:ca:90:38:dd:05:9d:25:4d:07:96:b9:73:20:
                    31:fb:b1:f2:56:3c:98:e7:f3:69:5f:9c:6d:15:a0:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:86:7D:9A:6C:34:B2:56:77:42:74:7A:4C:8B:4B:65:AA:7A:4D
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a616130303a3a2f34382d3438203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14:aa00::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:d7:5d:21:d5:36:13:27:16:0e:e0:bc:35:ae:af:61:f2:0a:
         e9:a4:f4:49:3c:ae:00:13:91:7a:ea:63:4b:76:54:52:c4:ff:
         27:65:20:97:82:dc:02:12:83:4f:37:f4:92:17:3e:b5:7f:e7:
         fc:dd:cc:43:0e:30:43:e7:23:8f:45:bb:8d:94:aa:02:7b:c3:
         17:84:9d:c9:7d:3b:42:a8:03:0d:70:07:e7:39:a1:c7:56:11:
         52:08:a8:0f:14:03:92:e0:75:9e:0a:c8:9d:14:f9:28:54:fe:
         78:b4:c0:c0:1f:78:ce:76:9b:b9:dd:61:81:59:24:80:96:6b:
         83:91:7c:53:31:9c:93:52:95:10:3e:15:19:8b:30:a6:b1:15:
         ea:ee:b4:b2:1c:b4:99:b5:b3:99:e1:13:18:1f:01:78:90:3b:
         bf:99:98:7b:19:a8:cc:b9:63:3e:90:50:51:e2:80:76:88:1e:
         bc:ad:f1:e4:c5:a7:52:f8:ae:a8:6a:9e:88:d8:95:82:75:98:
         2e:93:a0:f4:ea:ec:08:52:7b:ea:dc:a6:19:05:d9:3f:bb:b8:
         dd:27:4b:98:28:85:e1:9f:d7:45:86:61:cd:05:5e:36:ad:fe:
         8b:2e:c0:c3:34:c3:6e:f7:48:bd:2d:36:80:3d:23:15:e5:eb:
         5f:a8:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:13 2024 by rpki-client on console-ams.rpki-client.org