Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34382d3438203d3e20323634353235.roa
File:                     323830343a323066633a3630303a3a2f34382d3438203d3e20323634353235.roa (raw, json)
Hash identifier:          gMzFwntXJBE/8biTCjppybpDBTOuxL/yZdmkj0SJaFU=
Subject key identifier:   E5:5B:47:BE:CC:A1:80:4A:E5:86:53:92:E5:43:C5:CB:FF:A7:AF:BF
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       13233CAB0A6C14FE4D4C4705BD38F16208F2DB3A
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34382d3438203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:10:42 +0000
ROA not before:           Tue 30 Apr 2024 22:05:42 +0000
ROA not after:            Tue 29 Apr 2025 22:10:42 +0000
asID:                     264525
IP address blocks:        2804:20fc:600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:23:3c:ab:0a:6c:14:fe:4d:4c:47:05:bd:38:f1:62:08:f2:db:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:05:42 2024 GMT
            Not After : Apr 29 22:10:42 2025 GMT
        Subject: CN=E55B47BECCA1804AE5865392E543C5CBFFA7AFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:fb:b5:ef:63:b0:08:0d:2c:1b:ea:52:8c:
                    49:49:32:86:bc:0a:05:a0:56:bd:5f:f5:78:2a:c1:
                    0e:28:b2:0a:18:1e:3a:be:9f:fe:2c:bc:db:01:fa:
                    90:36:e5:16:cc:c6:8f:be:b7:44:05:73:0f:a7:c2:
                    b0:da:55:41:30:86:62:47:5d:f7:d4:8b:cc:09:03:
                    14:07:63:1a:f1:45:e2:c6:99:f0:ec:e9:f8:9e:76:
                    e8:29:5e:be:1b:64:2e:ef:e0:49:2f:07:0d:87:3e:
                    6b:4c:59:dd:03:29:72:68:4d:15:e6:0d:88:c1:15:
                    10:b7:bb:e5:2b:87:17:89:8c:6c:d5:fb:45:cb:24:
                    af:be:aa:2d:c9:1e:72:e3:8e:b0:d9:30:3d:c3:3e:
                    a0:15:fe:0b:7d:4d:26:80:d2:e2:f1:a8:2a:13:2d:
                    19:17:fe:bb:8c:25:30:7a:bc:3a:d7:32:ef:a9:f9:
                    85:62:ee:49:3e:ed:d2:69:c8:fa:23:4f:2d:a3:51:
                    52:d6:4d:97:86:36:47:d6:8e:84:3a:1f:51:af:61:
                    1b:1d:0b:1e:c4:18:7f:e4:26:7c:26:c2:bd:5f:f3:
                    e9:09:a4:b5:f8:56:bd:cc:63:65:a8:44:21:52:c2:
                    68:94:c9:0c:62:53:e3:f4:a5:3d:d0:11:66:e6:5c:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5B:47:BE:CC:A1:80:4A:E5:86:53:92:E5:43:C5:CB:FF:A7:AF:BF
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34382d3438203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:82:98:69:8d:01:4a:7d:3b:a3:44:3e:8a:ac:1c:a4:42:fb:
         3b:52:e5:5f:42:49:70:29:ef:16:35:9b:c0:aa:56:ea:51:9a:
         d3:94:a8:21:39:d7:8b:37:d7:50:6b:ef:cb:91:c5:c8:98:f5:
         15:45:52:54:74:15:c0:a9:3c:7f:84:00:49:f2:ad:07:3a:3a:
         51:38:c7:2a:cb:0b:17:33:b4:4c:73:d5:d7:48:30:60:72:61:
         0d:9d:c9:79:43:10:1c:a9:be:57:58:39:3e:9b:8b:75:9f:1c:
         08:32:44:5f:7b:b7:7f:56:a2:47:ab:68:c5:38:d7:fe:ee:3b:
         9e:bd:1c:a9:f7:85:f9:27:b6:a4:92:20:16:76:08:e9:35:49:
         74:2d:49:cf:66:fc:c4:71:91:ef:97:75:92:1c:f9:f6:de:56:
         cf:4b:6d:5c:d9:19:41:17:3f:44:0c:77:e1:6c:20:85:15:9f:
         e1:38:26:cb:72:1d:3d:a6:0c:67:5c:67:86:d6:ac:92:7b:97:
         96:b3:ea:c6:0e:77:32:47:dc:ae:ce:f1:a3:0f:c4:41:c9:75:
         7a:27:a7:b6:e3:fe:e6:85:fd:e4:c6:52:4f:31:71:82:7f:f4:
         ce:1f:a1:c0:67:7b:70:d2:15:02:76:8f:17:23:6d:b4:4c:31:
         ad:3f:78:86
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUEyM8qwpsFP5NTEcFvTjxYgjy2zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjhFQUNCOUY3OEE1NjRBNTU5NDU0RTM1N0UxRTMx
MzQ0QjFDODAeFw0yNDA0MzAyMjA1NDJaFw0yNTA0MjkyMjEwNDJaMDMxMTAvBgNV
BAMTKEU1NUI0N0JFQ0NBMTgwNEFFNTg2NTM5MkU1NDNDNUNCRkZBN0FGQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrPu172OwCA0sG+pSjElJMoa8
CgWgVr1f9XgqwQ4osgoYHjq+n/4svNsB+pA25RbMxo++t0QFcw+nwrDaVUEwhmJH
XffUi8wJAxQHYxrxReLGmfDs6fiedugpXr4bZC7v4EkvBw2HPmtMWd0DKXJoTRXm
DYjBFRC3u+UrhxeJjGzV+0XLJK++qi3JHnLjjrDZMD3DPqAV/gt9TSaA0uLxqCoT
LRkX/ruMJTB6vDrXMu+p+YVi7kk+7dJpyPojTy2jUVLWTZeGNkfWjoQ6H1GvYRsd
Cx7EGH/kJnwmwr1f8+kJpLX4Vr3MY2WoRCFSwmiUyQxiU+P0pT3QEWbmXJxrAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU5VtHvsyhgErlhlOS5UPFy/+nr78wHwYDVR0j
BBgwFoAUuduOrLn3ilZKVZRU41fh4xNEscgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4
d2kvMC9COURCOEVBQ0I5Rjc4QTU2NEE1NTk0NTRFMzU3RTFFMzEzNDRCMUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REI4RUFDQjlGNzhBNTY0
QTU1OTQ1NEUzNTdFMUUzMTM0NEIxQzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv
MzIzODMwMzQzYTMyMzA2NjYzM2EzNjMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzQzNTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCD8BgAwDQYJKoZIhvcNAQELBQAD
ggEBAICCmGmNAUp9O6NEPoqsHKRC+ztS5V9CSXAp7xY1m8CqVupRmtOUqCE514s3
11Br78uRxciY9RVFUlR0FcCpPH+EAEnyrQc6OlE4xyrLCxcztExz1ddIMGByYQ2d
yXlDEBypvldYOT6bi3WfHAgyRF97t39WokeraMU41/7uO569HKn3hfkntqSSIBZ2
COk1SXQtSc9m/MRxke+XdZIc+fbeVs9LbVzZGUEXP0QMd+FsIIUVn+E4JstyHT2m
DGdcZ4bWrJJ7l5az6sYOdzJH3K7O8aMPxEHJdXonp7bj/uaF/eTGUk8xcYJ/9M4f
ocBne3DSFQJ2jxcjbbRMMa0/eIY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org