Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a616230303a3a2f34382d3438203d3e20323637333438.roa
File:                     323830343a346331343a616230303a3a2f34382d3438203d3e20323637333438.roa (raw, json)
Hash identifier:          jpR7d1vTjlFjmRHn6KD8sYU/dAYh8najaTCxhlRxJYo=
Subject key identifier:   2F:C5:16:59:C8:FF:BD:29:7F:0F:7F:E5:E8:72:99:35:AF:68:40:53
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       2AFAAA332C0AF34A1D365C1D768994AA1E75B7DA
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a616230303a3a2f34382d3438203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:47:57 +0000
ROA not before:           Wed 31 Jul 2024 17:42:57 +0000
ROA not after:            Wed 30 Jul 2025 17:47:57 +0000
asID:                     267348
IP address blocks:        2804:4c14:ab00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fa:aa:33:2c:0a:f3:4a:1d:36:5c:1d:76:89:94:aa:1e:75:b7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:42:57 2024 GMT
            Not After : Jul 30 17:47:57 2025 GMT
        Subject: CN=2FC51659C8FFBD297F0F7FE5E8729935AF684053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:2e:e8:a6:6b:6e:59:c4:46:79:ba:e6:ab:
                    32:6e:03:00:8f:26:ad:d5:87:e5:eb:46:3e:07:80:
                    e7:bb:bb:54:d4:ff:53:03:b9:44:e0:64:af:28:51:
                    11:79:14:32:27:e8:f5:12:2b:5a:5a:b2:ce:1e:97:
                    20:f7:70:0c:a4:a6:83:f6:30:ac:c8:d9:78:a2:88:
                    b0:ec:a0:bc:ff:25:96:4c:8e:74:f6:27:3e:2c:5b:
                    ce:61:2b:b7:7c:2e:35:ce:fb:8c:9a:10:4c:c1:8f:
                    2f:d2:46:85:97:83:1c:cd:e3:78:b3:4f:7f:6c:60:
                    f1:0e:e9:00:fa:6a:37:d2:16:fd:8c:8c:a7:d7:ef:
                    e5:b7:d5:7e:ff:1a:33:de:71:b2:08:3b:9b:51:7a:
                    0d:fe:d5:42:ad:8c:d0:a8:a6:ce:45:0d:ff:9f:b2:
                    d2:aa:bd:de:5e:85:9e:91:98:84:39:51:ce:7f:56:
                    fd:7b:a4:e8:86:02:1f:f0:68:6e:55:d8:05:b4:06:
                    25:10:15:6a:23:b5:63:3c:d8:bd:9f:62:14:ef:cf:
                    a1:fe:f5:ad:b0:72:93:72:07:44:94:0e:68:9d:1f:
                    86:80:50:47:61:0b:a6:69:df:51:96:c6:0f:b3:4f:
                    9c:02:1b:20:8e:88:ad:18:b6:8b:bc:21:70:6d:51:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:16:59:C8:FF:BD:29:7F:0F:7F:E5:E8:72:99:35:AF:68:40:53
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a616230303a3a2f34382d3438203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14:ab00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:75:cb:25:d9:c6:96:8f:d3:a7:82:85:54:34:f0:8b:f1:
         3b:31:6e:ae:6b:14:5c:5b:9c:01:be:b3:91:85:fb:2f:24:97:
         e2:98:0a:16:8d:b8:62:1d:a9:c5:51:aa:ca:1f:69:30:41:4e:
         31:b6:c3:ae:ab:53:69:79:a5:26:d3:d9:70:e5:e8:10:4c:b6:
         80:65:6d:c4:52:cc:dc:0e:34:82:25:f7:28:11:44:44:37:7d:
         d4:48:2b:90:ac:1f:ce:05:5b:22:b7:b3:88:e3:ea:7f:ac:89:
         b5:45:90:81:9e:3d:a3:b3:4e:7d:b2:1a:ac:37:19:93:79:d1:
         dc:aa:ba:c1:ad:4f:71:87:e8:86:78:29:ab:cc:02:9a:4b:9b:
         30:65:3a:da:8b:31:9d:36:c8:e4:de:58:8f:90:38:e1:80:28:
         1e:49:48:22:63:99:97:03:41:67:db:b6:fa:d4:4a:ee:23:63:
         7f:7f:11:1d:7b:4b:2d:80:9d:c2:7c:7a:67:67:ae:ba:92:6a:
         d0:16:e4:8f:99:89:da:f8:5f:f7:f4:b4:bf:d7:bb:1f:dc:a1:
         3b:31:4a:a9:8a:46:cc:ec:09:89:96:e1:1d:64:27:e8:c1:4b:
         da:94:a4:02:6c:4b:c8:81:e1:41:99:af:d7:f2:8a:f9:ad:6b:
         99:f2:92:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:13 2024 by rpki-client on console-ams.rpki-client.org