Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a626230303a3a2f34382d3438203d3e20323637333438.roa
File:                     323830343a346331343a626230303a3a2f34382d3438203d3e20323637333438.roa (raw, json)
Hash identifier:          yj9x5jZQtCsBJSW11i7QIUs8FENrlZ7tV36m61iD1L0=
Subject key identifier:   F6:02:58:19:D6:EA:ED:9A:7D:A9:7E:15:5F:B2:0E:0F:D5:77:61:57
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       4C58A80C95E9FC2CB1DE0E2B3E93F6D50265DA82
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a626230303a3a2f34382d3438203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:48:02 +0000
ROA not before:           Wed 31 Jul 2024 17:43:02 +0000
ROA not after:            Wed 30 Jul 2025 17:48:02 +0000
asID:                     267348
IP address blocks:        2804:4c14:bb00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:58:a8:0c:95:e9:fc:2c:b1:de:0e:2b:3e:93:f6:d5:02:65:da:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:43:02 2024 GMT
            Not After : Jul 30 17:48:02 2025 GMT
        Subject: CN=F6025819D6EAED9A7DA97E155FB20E0FD5776157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:35:a2:db:9d:76:77:2b:b6:e7:e4:b6:01:
                    62:6e:e5:7a:f4:2f:92:d3:c1:a9:1f:61:71:20:46:
                    4e:53:72:9b:35:98:5b:6e:a7:f0:36:49:f7:83:db:
                    db:f1:2b:4d:d2:20:bd:0d:cf:90:08:35:2f:fe:6d:
                    fe:58:fc:54:5a:39:a9:1e:55:d0:ed:e0:5f:c6:ae:
                    60:2f:91:de:47:06:bd:d3:df:81:a2:0f:ab:a5:80:
                    1c:7e:a0:d2:fb:17:71:93:6d:19:70:41:f5:47:4d:
                    e4:b8:45:b9:99:8a:c2:20:40:84:99:e0:ca:5f:11:
                    33:ae:d5:10:24:61:3b:99:60:c6:a2:5b:b8:fd:ee:
                    38:28:56:6e:21:9e:d9:37:92:b6:8a:bf:f9:58:20:
                    23:eb:cc:4b:8d:a2:f2:94:1c:0f:d0:b4:bc:be:da:
                    9d:9f:f2:23:60:c3:c7:8d:24:41:5a:e5:6c:7f:b7:
                    86:a7:0a:a9:06:10:62:62:7d:69:39:39:33:ff:57:
                    50:94:5f:60:40:b4:50:c8:97:a3:d4:24:cb:6a:b3:
                    ca:b0:f0:96:65:22:53:5c:6a:8d:a9:9c:b9:18:47:
                    ed:5a:25:56:0d:ef:78:79:4b:98:dc:66:56:07:4c:
                    72:cf:68:8d:16:35:ec:3f:c1:68:e1:85:6e:7c:52:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:02:58:19:D6:EA:ED:9A:7D:A9:7E:15:5F:B2:0E:0F:D5:77:61:57
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a626230303a3a2f34382d3438203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14:bb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:fa:d1:b9:31:b3:51:00:83:c2:70:a6:62:32:60:11:a5:
         7a:41:ae:d9:42:e3:d4:6a:7f:f3:a0:5f:1f:4c:45:32:9c:ab:
         17:6c:59:dd:7b:1e:a5:89:73:b2:ec:8e:b4:65:d7:6f:11:d5:
         ee:f4:6d:b6:79:6f:39:78:6a:08:35:88:b5:e5:9a:a4:a9:b0:
         e8:46:50:f5:8c:c5:88:a8:df:d3:fb:54:5f:98:c3:63:bb:17:
         75:30:a6:01:44:ab:a7:46:76:d8:01:7a:7b:e9:60:b1:b2:c7:
         8d:f9:eb:a3:60:4a:e3:76:06:6f:b5:c8:06:4c:11:34:04:fa:
         79:f5:cd:84:fe:24:1c:87:51:02:9e:28:5d:ef:90:6e:25:e0:
         69:ea:13:73:b1:2b:7e:8e:ea:96:be:4b:b3:ec:6b:25:ec:14:
         24:8e:63:ef:5a:48:4d:6d:be:29:54:f9:64:84:eb:b4:43:f6:
         07:e7:a6:4b:f3:f1:dd:39:ee:a5:6f:b2:1d:a8:ce:78:3f:37:
         21:5a:0b:4b:6a:b7:8a:f6:97:05:67:92:ac:70:a8:50:e6:be:
         62:63:ca:4b:b5:01:45:dd:02:0a:6a:3d:65:49:2d:6b:12:2d:
         3e:3e:86:03:10:91:d3:49:80:2d:55:82:9b:1c:ab:98:8f:7f:
         08:28:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:13 2024 by rpki-client on console-ams.rpki-client.org