Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/323830343a363734343a3a2f33322d313238203d3e20323639363137.roa
File:                     323830343a363734343a3a2f33322d313238203d3e20323639363137.roa (raw, json)
Hash identifier:          m0nZMEgztue/sKrJILi3WHG6FU6LlavVLrcTq1OAwtI=
Subject key identifier:   78:7A:43:E1:A0:D4:18:0F:41:35:34:F7:CC:55:2B:8B:9C:6C:24:19
Certificate issuer:       /CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
Certificate serial:       48EDE1122791263DFF70AC78EA5278F06A859E45
Authority key identifier: BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/323830343a363734343a3a2f33322d313238203d3e20323639363137.roa
Signing time:             Wed 24 Apr 2024 17:56:21 +0000
ROA not before:           Wed 24 Apr 2024 17:51:21 +0000
ROA not after:            Wed 23 Apr 2025 17:56:21 +0000
asID:                     269617
IP address blocks:        2804:6744::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.crl
                          rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ed:e1:12:27:91:26:3d:ff:70:ac:78:ea:52:78:f0:6a:85:9e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
        Validity
            Not Before: Apr 24 17:51:21 2024 GMT
            Not After : Apr 23 17:56:21 2025 GMT
        Subject: CN=787A43E1A0D4180F413534F7CC552B8B9C6C2419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:9a:c2:3a:c7:3a:f2:80:3c:f4:1e:e6:dc:
                    e7:31:6b:28:ea:32:b6:3b:2f:8b:4e:94:fe:1a:f9:
                    b5:13:b1:6c:f5:88:66:f0:18:93:b0:9f:b8:e8:c5:
                    d5:33:f3:f9:e8:e3:dd:5e:82:b7:da:67:6e:39:44:
                    f9:dc:6a:bb:d6:0f:4e:c3:9a:87:5e:af:f6:9a:56:
                    36:b2:4e:2e:51:f7:0d:9d:f9:08:cd:ce:c4:3e:8c:
                    4a:1b:ca:4a:e3:1a:29:25:5e:1f:37:4e:d4:10:4e:
                    32:8f:6f:6e:c7:b0:94:c1:04:ac:a3:69:6b:b7:f4:
                    72:ee:d8:67:7a:2f:5e:12:29:13:f1:cf:5c:9f:ee:
                    78:33:48:4e:70:90:8a:05:e3:ea:8f:06:bc:bf:5a:
                    ff:90:64:0d:2f:35:7b:50:df:dd:1d:71:50:ad:dd:
                    4e:a0:ee:4a:a6:f1:d3:10:45:71:28:b4:aa:3f:b8:
                    87:70:92:44:6a:53:0b:3a:f4:ea:0f:43:2a:94:46:
                    73:f9:76:47:bc:3b:98:43:77:d6:23:f4:68:6e:29:
                    e2:64:eb:59:9d:5b:c5:9f:7a:af:04:73:ee:b9:02:
                    03:67:4e:fa:b3:e9:99:d8:f4:cb:d9:49:bc:0d:81:
                    c5:02:2b:80:90:cb:b6:e8:0f:25:c3:f2:ad:d3:37:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7A:43:E1:A0:D4:18:0F:41:35:34:F7:CC:55:2B:8B:9C:6C:24:19
            X509v3 Authority Key Identifier:
                keyid:BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/323830343a363734343a3a2f33322d313238203d3e20323639363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6744::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:9c:a2:d0:b5:ea:a2:57:03:65:0a:04:52:7b:ae:aa:f2:13:
         ad:35:e1:0f:e5:b8:d7:be:fb:83:be:f5:8a:90:cf:4c:d8:ab:
         6e:29:37:36:de:5b:83:55:f0:64:e9:67:6b:45:13:65:15:b6:
         16:7f:07:60:23:cf:e9:79:ba:52:e8:7a:d0:c8:c0:83:db:f6:
         88:bd:e2:9a:6c:e2:c7:d0:30:da:f5:73:7b:ef:c0:5e:cb:93:
         bd:51:04:93:7e:8a:39:68:83:93:fc:ff:95:d7:4f:cd:4e:48:
         02:74:b7:5f:5c:15:d4:17:6c:c1:58:06:e0:46:5b:bd:0d:10:
         b3:ad:76:d3:91:61:32:66:82:c2:04:b6:7d:60:7e:5a:03:e0:
         c9:9d:b3:d8:ff:d2:bd:2a:d5:8a:13:68:37:d7:3d:d5:e5:a0:
         ce:d2:a9:39:46:d5:2a:9b:61:63:37:34:5a:44:af:d3:bc:ee:
         91:b6:0d:f3:ef:bb:a6:20:15:67:3c:e0:32:b6:0c:52:5d:a2:
         f8:4c:e8:d5:20:5c:a2:1a:2d:4f:0f:4b:84:7e:38:8a:ce:9b:
         93:24:3d:37:57:b9:e7:7c:23:47:b4:dc:6b:08:f3:7f:89:aa:
         3c:fd:27:dd:2c:11:27:98:b6:94:54:25:49:ef:d3:ed:44:d0:
         69:68:4f:84
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSO3hEieRJj3/cKx46lJ48GqFnkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUwMTQ5RUNFRUI2Rjk4MzMyNUREMkJCQzJBMTQ0N0Qw
OEVGMEUzMjAeFw0yNDA0MjQxNzUxMjFaFw0yNTA0MjMxNzU2MjFaMDMxMTAvBgNV
BAMTKDc4N0E0M0UxQTBENDE4MEY0MTM1MzRGN0NDNTUyQjhCOUM2QzI0MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkZrCOsc68oA89B7m3Ocxayjq
MrY7L4tOlP4a+bUTsWz1iGbwGJOwn7joxdUz8/no491egrfaZ245RPncarvWD07D
moder/aaVjayTi5R9w2d+QjNzsQ+jEobykrjGiklXh83TtQQTjKPb27HsJTBBKyj
aWu39HLu2Gd6L14SKRPxz1yf7ngzSE5wkIoF4+qPBry/Wv+QZA0vNXtQ390dcVCt
3U6g7kqm8dMQRXEotKo/uIdwkkRqUws69OoPQyqURnP5dke8O5hDd9Yj9GhuKeJk
61mdW8Wfeq8Ec+65AgNnTvqz6ZnY9MvZSbwNgcUCK4CQy7boDyXD8q3TNzSXAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUeHpD4aDUGA9BNTT3zFUri5xsJBkwHwYDVR0j
BBgwFoAUvgFJ7O62+YMyXdK7wqFEfQjvDjIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0xRM3NSTnVxbm1DTTlYdUxyak1VVzZBc3Z6N1ZFckw3WEpNczM1NjhG
aHovMC9CRTAxNDlFQ0VFQjZGOTgzMzI1REQyQkJDMkExNDQ3RDA4RUYwRTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMDE0OUVDRUVCNkY5ODMz
MjVERDJCQkMyQTE0NDdEMDhFRjBFMzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNMUTNzUk51cW5tQ005WHVMcmpNVVc2QXN2ejdWRXJMN1hKTXMzNTY4Rmh6LzAv
MzIzODMwMzQzYTM2MzczNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGdEMA0GCSqGSIb3DQEBCwUAA4IBAQAinKLQ
teqiVwNlCgRSe66q8hOtNeEP5bjXvvuDvvWKkM9M2KtuKTc23luDVfBk6WdrRRNl
FbYWfwdgI8/pebpS6HrQyMCD2/aIveKabOLH0DDa9XN778Bey5O9UQSTfoo5aIOT
/P+V10/NTkgCdLdfXBXUF2zBWAbgRlu9DRCzrXbTkWEyZoLCBLZ9YH5aA+DJnbPY
/9K9KtWKE2g31z3V5aDO0qk5RtUqm2FjNzRaRK/TvO6Rtg3z77umIBVnPOAytgxS
XaL4TOjVIFyiGi1PD0uEfjiKzpuTJD03V7nnfCNHtNxrCPN/iao8/SfdLBEnmLaU
VCVJ79PtRNBpaE+E
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:26:49 2024 by rpki-client on console-ams.rpki-client.org