Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a656230303a3a2f34382d3438203d3e20323637333438.roa
File:                     323830343a346331343a656230303a3a2f34382d3438203d3e20323637333438.roa (raw, json)
Hash identifier:          aHOUmn8Z06po2MOhuS+oxB1PGv+QSkKS/K+YDArsg9Q=
Subject key identifier:   66:BC:7C:3D:46:4E:D1:E0:33:66:16:89:90:9F:EA:21:9C:BB:14:D8
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       1C1F5896EDE6FDB2F77D880FDDFF13CA571DD628
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a656230303a3a2f34382d3438203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:48:13 +0000
ROA not before:           Wed 31 Jul 2024 17:43:13 +0000
ROA not after:            Wed 30 Jul 2025 17:48:13 +0000
asID:                     267348
IP address blocks:        2804:4c14:eb00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1f:58:96:ed:e6:fd:b2:f7:7d:88:0f:dd:ff:13:ca:57:1d:d6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:43:13 2024 GMT
            Not After : Jul 30 17:48:13 2025 GMT
        Subject: CN=66BC7C3D464ED1E033661689909FEA219CBB14D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:bf:3a:aa:0d:e7:16:aa:e8:51:b5:0c:c5:
                    aa:54:82:43:c2:48:52:2e:96:f7:16:44:6b:e7:d8:
                    c3:5d:49:11:f6:a5:73:1c:37:9b:02:21:03:83:63:
                    4e:c2:29:6d:b8:7b:9d:d4:34:e0:fd:d1:ae:53:2c:
                    1b:b0:30:43:4a:af:79:7a:7e:b3:b1:db:20:ef:95:
                    76:e1:6d:a5:92:bf:4d:c3:41:7c:de:97:21:e8:6f:
                    9a:95:eb:4b:77:f7:26:1e:10:e7:31:23:c4:83:e4:
                    ef:a5:89:9c:91:45:0b:6a:6a:09:79:e8:e5:2e:1d:
                    9d:b3:82:f2:0f:da:37:dd:b3:eb:fa:f7:89:29:8d:
                    e9:f9:19:b9:00:d4:b8:0d:09:25:a2:4d:cc:70:37:
                    fc:03:55:93:2c:44:cf:5e:6f:97:b6:0a:20:41:df:
                    63:9c:99:43:fe:9e:8c:78:b4:99:27:35:92:9d:95:
                    33:13:a9:6a:26:d3:47:bb:a4:a0:95:6f:18:e8:16:
                    3d:ff:85:6c:dd:01:d5:38:cf:71:08:d2:d4:8c:32:
                    86:66:a4:e0:b7:0a:c2:31:fe:74:f9:5f:aa:ee:35:
                    3a:87:68:66:da:55:36:ac:42:2a:e4:74:9e:a2:98:
                    0d:11:fd:84:27:9d:92:94:50:c2:fc:c2:f0:cf:d2:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BC:7C:3D:46:4E:D1:E0:33:66:16:89:90:9F:EA:21:9C:BB:14:D8
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a656230303a3a2f34382d3438203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14:eb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:57:ec:e5:26:0c:7f:e9:a7:4b:64:68:a9:b5:5d:e0:13:
         93:1c:8b:d3:5e:69:42:35:e5:fa:cb:01:4d:83:c5:09:c1:d6:
         a6:5b:d9:68:96:2e:bc:13:7c:31:7c:7e:e4:66:08:85:44:f7:
         39:e0:5f:83:5d:98:f5:64:7a:3a:18:da:cb:52:41:b2:50:93:
         11:0d:ec:0e:25:4b:59:f8:fc:c4:a3:c3:c7:53:18:24:4f:97:
         e5:bf:d3:a7:c0:3e:ba:c0:3a:7f:72:08:42:f7:7f:aa:08:bc:
         a1:55:96:e8:08:84:41:da:71:b8:8a:46:cc:11:0b:21:ff:f3:
         22:e7:34:5d:9d:02:b2:e7:c4:ba:6a:26:aa:57:a6:29:18:98:
         a7:03:db:a1:cc:94:09:5e:ad:da:1c:f5:6a:cb:ea:be:5b:b5:
         c2:7c:4f:65:29:29:1c:55:76:15:1a:70:5e:58:4d:17:7e:97:
         4b:8c:ca:63:61:ca:c4:81:59:bc:60:d0:74:30:fc:f9:ec:00:
         c0:aa:8f:5c:ed:51:ea:81:c2:f2:ca:15:b5:4d:f5:14:a6:ba:
         9d:e1:43:f8:d0:d1:84:ee:3b:70:c5:32:c3:20:e3:60:db:bf:
         d8:26:75:94:e9:97:fb:eb:9e:cd:a7:bb:14:2a:48:a0:bc:fa:
         7e:03:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:13 2024 by rpki-client on console-ams.rpki-client.org