Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa
File:                     323830343a6433383a3a2f33322d3438203d3e203533313538.roa (raw, json)
Hash identifier:          TbTAkVSTlzUrOTHObWcf4t3QrhiiYqyc4CnFV8K6OU0=
Subject key identifier:   D2:F1:BE:91:FD:BD:50:D4:13:7D:87:2F:27:02:F9:73:7B:8B:52:88
Certificate issuer:       /CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
Certificate serial:       577857E4DC3F1F7218A7FBF6EEE3720FC97A99BE
Authority key identifier: BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa
Signing time:             Mon 27 May 2024 14:39:38 +0000
ROA not before:           Mon 27 May 2024 14:34:38 +0000
ROA not after:            Mon 26 May 2025 14:39:38 +0000
asID:                     53158
IP address blocks:        2804:d38::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:78:57:e4:dc:3f:1f:72:18:a7:fb:f6:ee:e3:72:0f:c9:7a:99:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
        Validity
            Not Before: May 27 14:34:38 2024 GMT
            Not After : May 26 14:39:38 2025 GMT
        Subject: CN=D2F1BE91FDBD50D4137D872F2702F9737B8B5288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:da:d0:c5:68:9b:92:b3:f8:fe:92:e0:75:
                    41:b2:03:fe:94:19:06:43:b8:72:91:50:66:3c:ea:
                    97:76:64:46:22:15:8f:d7:fb:7d:28:ce:a8:6a:90:
                    96:11:3c:a9:30:d8:b1:e4:5d:0d:d8:61:ce:39:e7:
                    16:c9:bd:d4:6a:ed:c8:ad:e1:a2:04:13:13:24:f9:
                    c3:94:64:c3:1c:91:22:b4:b0:12:25:64:6c:e5:d0:
                    b0:f6:99:e3:d7:65:a0:22:1e:ba:a6:53:54:f0:9b:
                    12:58:4d:a4:33:d1:35:83:a6:16:95:79:bb:86:54:
                    55:4f:91:af:da:b9:f9:2a:4b:0b:90:fb:be:9e:b7:
                    e5:26:1c:55:33:66:3e:f1:05:1d:76:4d:91:9b:c5:
                    b7:f1:dd:2c:ae:ea:7c:9a:d5:26:1f:1b:e6:90:20:
                    cf:fd:72:69:c5:38:74:1b:1f:f7:ab:2f:9d:de:0e:
                    32:36:83:8e:55:b0:25:bb:3e:2b:cf:51:c1:6d:35:
                    0e:77:08:2c:4f:01:1a:34:ba:52:b8:9b:ff:e2:8a:
                    8d:3b:c3:8c:90:d9:d1:04:11:c2:f5:34:cb:c4:58:
                    53:93:d4:a0:f8:20:ae:5b:c8:ff:61:c5:bb:d6:04:
                    c7:84:63:3d:b0:7d:6f:4c:e9:67:2a:94:d5:8c:5d:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:BE:91:FD:BD:50:D4:13:7D:87:2F:27:02:F9:73:7B:8B:52:88
            X509v3 Authority Key Identifier:
                keyid:BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d38::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:0c:ed:7a:55:a7:0d:58:5c:5e:26:b9:59:62:d9:31:18:
         ea:0d:a2:95:30:29:b1:c1:aa:14:ee:4b:40:65:64:2a:fb:b1:
         32:4a:8b:ed:0c:a8:6d:7e:81:f0:1b:24:4e:13:40:22:e8:dc:
         ae:07:2f:f4:aa:7c:63:6e:96:ae:fa:1a:e3:a7:47:46:ef:68:
         dc:97:6b:3d:5f:85:9a:fc:65:4b:4d:46:82:93:7c:b6:3e:42:
         e3:aa:ba:46:5d:67:28:8a:92:9a:50:64:dc:c2:61:70:34:68:
         ca:56:67:c0:dc:64:7e:d7:ac:8f:22:e0:33:72:da:9b:d4:b0:
         2d:63:2c:a5:d8:9f:56:73:b4:d6:5b:d0:cd:07:cb:ff:ef:c5:
         3e:6c:ab:f7:11:f2:38:3d:65:17:7a:cd:f2:b3:07:6f:c4:28:
         f3:86:6e:38:61:b4:de:5a:63:c6:ac:94:bd:2b:26:39:99:90:
         7f:56:78:d5:64:62:0a:66:6e:85:84:05:3e:06:41:4b:e9:99:
         b4:fb:e2:48:6e:a9:6b:51:14:0b:25:69:3a:b8:57:53:da:64:
         51:e4:08:73:2a:0c:33:36:db:87:fe:4f:5e:4e:2f:4e:6b:29:
         2c:18:16:2b:68:2f:10:93:59:49:1e:2e:0b:a5:03:d4:56:d8:
         a5:d4:e3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:54 2024 by rpki-client on console-ams.rpki-client.org