Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a646130303a3a2f34382d3438203d3e20323637333438.roa
File:                     323830343a346331343a646130303a3a2f34382d3438203d3e20323637333438.roa (raw, json)
Hash identifier:          DFsgiglb8RrmNuujXKPb7XvBkzSAdgrD1TJA4ZqkhPI=
Subject key identifier:   34:99:9E:67:B6:C9:EC:D8:B0:72:41:0D:84:86:F5:7E:75:ED:95:A2
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       549285F6472FADAD4B7FB95E426053C4FD31EA20
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a646130303a3a2f34382d3438203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:48:08 +0000
ROA not before:           Wed 31 Jul 2024 17:43:08 +0000
ROA not after:            Wed 30 Jul 2025 17:48:08 +0000
asID:                     267348
IP address blocks:        2804:4c14:da00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:92:85:f6:47:2f:ad:ad:4b:7f:b9:5e:42:60:53:c4:fd:31:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:43:08 2024 GMT
            Not After : Jul 30 17:48:08 2025 GMT
        Subject: CN=34999E67B6C9ECD8B072410D8486F57E75ED95A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:06:24:54:40:e0:9d:d5:e3:3e:a8:04:e1:e5:
                    2c:42:4b:82:d2:5f:ec:f4:7b:57:02:fb:61:ec:8f:
                    15:9f:69:f4:38:3d:6b:1d:da:8f:25:05:3f:27:95:
                    27:00:a6:06:f1:26:83:8c:95:b5:ca:32:a1:61:62:
                    0e:36:fe:26:9d:5c:f8:aa:d8:29:28:d3:29:c0:52:
                    aa:fc:de:60:8f:b9:d7:51:d5:16:78:dc:f0:e8:9a:
                    b2:5b:4e:cd:c6:49:ec:ab:08:de:63:c5:2f:85:1d:
                    69:d7:d3:1b:c2:7b:8d:2c:c7:60:c9:42:b3:91:32:
                    e3:3a:d6:22:72:b0:79:5e:05:69:cc:16:4a:8d:a6:
                    4b:d6:dd:1c:db:4a:37:5f:43:91:e9:9d:8c:54:db:
                    a4:75:f8:f8:73:41:8e:6d:c3:86:f1:27:01:73:dc:
                    0d:90:f7:79:5a:40:14:60:02:1d:a3:dc:ab:b9:a0:
                    b5:92:71:5f:1c:0d:60:fd:cc:5c:36:8b:2e:e8:e1:
                    b6:c9:90:ce:d2:9a:9a:15:7d:ac:ff:c8:17:e5:29:
                    b2:98:b0:43:b2:1d:53:d3:9d:97:3a:18:75:d9:b1:
                    c2:58:f0:26:35:c2:68:f5:5c:60:e0:01:e7:60:93:
                    88:d0:fd:c6:d4:8c:b3:d3:0c:d5:3c:25:34:ca:c4:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:99:9E:67:B6:C9:EC:D8:B0:72:41:0D:84:86:F5:7E:75:ED:95:A2
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a646130303a3a2f34382d3438203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14:da00::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:44:50:d7:d8:e8:b4:e6:0e:64:83:1c:56:c2:5b:f6:4d:
         bb:6c:86:fa:62:e9:e8:37:92:01:b7:22:7d:2b:91:53:60:0f:
         89:ec:6c:56:03:aa:8e:7b:cb:1f:d2:49:91:78:0b:8d:1f:1c:
         5c:b5:18:d9:b9:f6:f5:3b:a0:74:47:59:46:0a:c2:72:c2:f4:
         43:6a:c8:c3:2c:62:2f:7e:16:d6:d7:eb:bf:7c:4a:64:87:41:
         d7:95:86:d7:f4:c8:3d:62:a0:03:01:2b:25:4b:9c:7d:82:e2:
         9e:be:ab:0f:bf:52:f8:02:ce:0b:24:79:69:48:29:76:9f:34:
         c2:0d:d2:b6:b7:dc:fc:79:06:89:30:51:a4:a3:6c:45:e8:7a:
         4c:0d:35:56:16:ee:ac:a5:13:9a:bd:93:c8:41:af:e5:53:7e:
         30:f6:95:d1:e7:73:47:75:41:c9:3e:37:1b:f8:56:12:7c:f6:
         45:bd:52:d1:4c:13:77:27:ff:47:76:23:5f:ec:c8:3e:3d:65:
         e9:74:d2:41:68:94:23:ef:1d:0f:b3:b8:85:b7:53:01:6c:85:
         82:82:aa:5f:52:0c:14:10:0b:fb:99:43:af:e2:cb:14:6e:3c:
         83:ad:81:d3:e2:84:de:05:89:4f:a6:46:7b:a7:1d:66:cb:28:
         43:65:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:13 2024 by rpki-client on console-ams.rpki-client.org