Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3a2f33322d313238203d3e20323633323932.roa
File:                     323830343a313639303a3a2f33322d313238203d3e20323633323932.roa (raw, json)
Hash identifier:          pkP0DoxzhJkSLN9vfAWF7iK5zUiK3NEJIXwz72vfGBc=
Subject key identifier:   1F:2A:14:BC:92:D3:2C:18:75:72:5B:DD:DD:B5:F8:14:FB:4F:62:BE
Certificate issuer:       /CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
Certificate serial:       70219239CF6065E5A1D4C4F11EE52BF29CA5F926
Authority key identifier: E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3a2f33322d313238203d3e20323633323932.roa
Signing time:             Wed 08 May 2024 20:31:53 +0000
ROA not before:           Wed 08 May 2024 20:26:53 +0000
ROA not after:            Wed 07 May 2025 20:31:53 +0000
asID:                     263292
IP address blocks:        2804:1690::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:21:92:39:cf:60:65:e5:a1:d4:c4:f1:1e:e5:2b:f2:9c:a5:f9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
        Validity
            Not Before: May  8 20:26:53 2024 GMT
            Not After : May  7 20:31:53 2025 GMT
        Subject: CN=1F2A14BC92D32C1875725BDDDDB5F814FB4F62BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:c6:dc:0f:40:85:8a:54:ae:ed:1f:8a:69:
                    38:7c:d3:b3:67:49:53:6a:de:64:25:91:ab:16:b8:
                    6f:71:89:34:d2:43:9a:df:f4:71:b1:65:52:27:4b:
                    c0:d3:fe:6a:ab:2e:ec:a1:a2:df:f6:d0:1e:31:74:
                    ec:cb:ca:b8:9a:46:16:a8:bb:e4:89:68:14:81:50:
                    8b:02:5b:c5:b3:ad:54:df:a5:d0:2a:5d:c4:d5:96:
                    69:4f:d7:38:25:1c:d5:de:57:e6:e1:47:6c:f5:5f:
                    d6:23:9f:35:18:7e:4d:ab:5c:8f:15:19:ec:b1:f3:
                    54:fb:0b:e3:7f:f1:25:d0:61:76:bf:3b:96:9e:29:
                    02:33:45:d4:14:66:91:c6:96:4d:b9:21:56:83:96:
                    40:90:67:55:65:33:ad:fe:8b:95:99:65:18:27:dc:
                    e0:1e:89:9f:13:84:67:01:6a:e8:85:92:6d:1b:62:
                    bf:8d:02:ad:12:fc:76:c5:57:59:56:6e:f0:b2:f6:
                    c0:f6:ea:50:f9:15:46:ca:ff:36:50:06:0d:c4:2f:
                    92:e6:5a:aa:be:7d:af:aa:18:d3:a0:a8:13:a1:d0:
                    73:36:6b:10:73:1b:46:ad:3b:c8:ce:75:68:72:9d:
                    59:ef:a1:32:dd:a1:f5:31:9d:ce:2d:b9:05:62:c4:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2A:14:BC:92:D3:2C:18:75:72:5B:DD:DD:B5:F8:14:FB:4F:62:BE
            X509v3 Authority Key Identifier:
                keyid:E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3a2f33322d313238203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:a1:16:2d:57:44:f7:c1:01:8e:53:3d:d3:a5:9e:cb:87:97:
         bf:47:23:da:57:ef:21:6f:1c:c5:23:e1:45:07:83:24:b9:54:
         e4:f6:ad:5d:c7:46:72:af:a8:7e:ee:90:ce:44:04:fa:af:63:
         0f:58:b3:17:b5:45:8d:c0:0d:50:ee:aa:5b:32:e3:cb:00:0a:
         a5:90:26:48:a0:28:02:f3:87:f8:58:42:05:0c:20:0e:0f:23:
         1c:65:5b:16:db:0a:e7:d1:9b:bc:35:68:eb:cd:3f:ff:fa:67:
         3e:60:94:0d:0b:ee:c4:ec:1d:7d:da:1f:0e:23:a4:27:f7:95:
         ba:93:ff:4b:77:af:f5:7c:e8:3f:9b:45:d5:a2:30:6c:7a:ae:
         f2:d0:7b:a9:e5:1f:01:85:ee:fd:c8:42:eb:84:42:aa:8a:04:
         7c:b0:a3:b8:82:5a:6d:a4:44:12:6f:9e:3b:64:ad:56:b6:19:
         6c:14:c1:92:ec:3d:4c:86:41:46:85:84:f2:cf:44:7b:aa:47:
         b3:98:bc:ca:fc:51:2b:6f:5d:7c:5a:79:89:0a:f7:25:f3:7b:
         ee:3c:1c:90:90:4d:dd:e8:17:a1:39:24:9c:29:12:a8:d7:8e:
         e8:83:ad:4a:a4:64:38:60:d4:21:c4:7d:93:fd:bb:3a:76:1f:
         cf:be:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:49 2024 by rpki-client on console-fra.rpki-client.org