Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3631303a3a2f34342d3434203d3e20323634353235.roa
File:                     323830343a323066633a3631303a3a2f34342d3434203d3e20323634353235.roa (raw, json)
Hash identifier:          d2EvJneQjUK7UpdnKRi2QRy46dvQSt9/X1Tc8fLDc9A=
Subject key identifier:   BB:14:00:92:3A:15:B7:1C:57:F1:57:66:00:4A:8B:A3:48:9E:B8:F8
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       3907EBF2BB2E6D5625E9FEC117B255ECDC9A1FB6
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3631303a3a2f34342d3434203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:10:02 +0000
ROA not before:           Tue 30 Apr 2024 22:05:02 +0000
ROA not after:            Tue 29 Apr 2025 22:10:02 +0000
asID:                     264525
IP address blocks:        2804:20fc:610::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:07:eb:f2:bb:2e:6d:56:25:e9:fe:c1:17:b2:55:ec:dc:9a:1f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:05:02 2024 GMT
            Not After : Apr 29 22:10:02 2025 GMT
        Subject: CN=BB1400923A15B71C57F15766004A8BA3489EB8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:a2:5f:23:41:df:3c:9c:90:06:c9:5e:68:
                    27:af:48:0a:72:ca:f5:3d:0a:cb:5c:d3:60:cc:02:
                    75:a4:a3:d3:3f:f5:c2:84:4c:6f:88:35:c5:97:66:
                    40:4a:5e:79:95:64:a9:2a:d8:45:55:76:05:59:91:
                    12:aa:8a:01:3e:02:01:89:a4:ed:b6:32:a0:44:a2:
                    38:3e:67:d6:17:6a:18:3b:e4:2d:cf:de:23:84:31:
                    7c:18:2d:8b:84:d9:dc:0b:53:3c:e6:e4:67:b1:9b:
                    20:f6:e7:09:b5:97:63:dd:17:77:f9:6f:0c:cd:3c:
                    ff:56:79:10:3c:66:97:41:d2:a4:2f:7b:b7:54:2f:
                    24:e4:25:48:6f:21:39:17:f2:86:ef:eb:e8:6b:73:
                    db:40:30:32:a3:b8:3f:9b:c1:f6:00:67:d8:95:c2:
                    d4:35:80:fe:13:e2:9b:f3:4e:4f:8b:07:cf:5d:b8:
                    08:cd:71:1a:08:f5:14:e0:c0:01:e5:7a:67:9c:54:
                    c2:28:f3:69:7b:f3:9d:c9:f6:4e:6a:c1:77:72:31:
                    0a:19:98:83:4e:f5:2a:14:d4:4d:7d:8e:c5:f9:5e:
                    57:0a:b0:9c:6e:c2:0e:99:dd:60:f5:62:d5:df:45:
                    97:9a:74:cf:a4:fe:82:48:40:bc:62:f2:96:6b:a2:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:14:00:92:3A:15:B7:1C:57:F1:57:66:00:4A:8B:A3:48:9E:B8:F8
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3631303a3a2f34342d3434203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:610::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:cb:cb:86:69:5b:10:ed:a3:5e:14:46:6f:f7:9a:fd:df:
         ed:97:8d:5c:b1:bc:b6:96:bb:7a:e4:41:06:fc:00:63:4d:3c:
         2d:fe:1d:86:c6:f5:9c:43:4e:7d:07:31:11:fe:72:f0:24:f0:
         9c:65:f7:63:22:bc:04:f6:f1:f9:f4:88:4e:40:bb:a5:76:20:
         e7:19:ed:7c:3d:a8:63:04:8a:1c:3d:dc:5d:a3:c2:4f:03:48:
         bd:ee:28:72:d0:59:33:f6:d8:84:00:b9:6a:65:62:cd:0b:99:
         81:1b:75:37:cf:76:c0:8d:f4:47:cd:de:b1:21:cc:88:46:39:
         79:20:9e:75:1c:1e:5a:26:00:0d:04:23:c5:b7:6f:18:b8:6d:
         98:18:2d:26:00:b4:fe:c7:a0:d2:07:d7:4a:25:17:a8:25:4c:
         dd:16:de:c2:14:8d:98:31:a4:0a:16:e2:e3:40:33:e1:88:1d:
         7c:d1:cb:7f:43:6a:96:d5:43:77:11:1c:cc:c8:49:eb:bc:84:
         92:10:48:c3:ac:ea:47:e4:d8:d3:12:81:57:1a:4a:ac:75:ec:
         5a:f0:4b:93:ab:68:c1:62:eb:6b:7a:27:bc:80:14:38:2c:0a:
         24:9d:5c:72:42:64:7b:41:e9:ce:99:32:a1:20:1f:3a:8f:c6:
         45:02:1e:ee
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUOQfr8rsubVYl6f7BF7JV7NyaH7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjhFQUNCOUY3OEE1NjRBNTU5NDU0RTM1N0UxRTMx
MzQ0QjFDODAeFw0yNDA0MzAyMjA1MDJaFw0yNTA0MjkyMjEwMDJaMDMxMTAvBgNV
BAMTKEJCMTQwMDkyM0ExNUI3MUM1N0YxNTc2NjAwNEE4QkEzNDg5RUI4RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVMqJfI0HfPJyQBsleaCevSApy
yvU9Cstc02DMAnWko9M/9cKETG+INcWXZkBKXnmVZKkq2EVVdgVZkRKqigE+AgGJ
pO22MqBEojg+Z9YXahg75C3P3iOEMXwYLYuE2dwLUzzm5GexmyD25wm1l2PdF3f5
bwzNPP9WeRA8ZpdB0qQve7dULyTkJUhvITkX8obv6+hrc9tAMDKjuD+bwfYAZ9iV
wtQ1gP4T4pvzTk+LB89duAjNcRoI9RTgwAHlemecVMIo82l7853J9k5qwXdyMQoZ
mINO9SoU1E19jsX5XlcKsJxuwg6Z3WD1YtXfRZeadM+k/oJIQLxi8pZroix9AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUuxQAkjoVtxxX8VdmAEqLo0ieuPgwHwYDVR0j
BBgwFoAUuduOrLn3ilZKVZRU41fh4xNEscgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4
d2kvMC9COURCOEVBQ0I5Rjc4QTU2NEE1NTk0NTRFMzU3RTFFMzEzNDRCMUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REI4RUFDQjlGNzhBNTY0
QTU1OTQ1NEUzNTdFMUUzMTM0NEIxQzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv
MzIzODMwMzQzYTMyMzA2NjYzM2EzNjMxMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNl
MjAzMjM2MzQzNTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBCD8BhAwDQYJKoZIhvcNAQELBQAD
ggEBAGovy8uGaVsQ7aNeFEZv95r93+2XjVyxvLaWu3rkQQb8AGNNPC3+HYbG9ZxD
Tn0HMRH+cvAk8Jxl92MivAT28fn0iE5Au6V2IOcZ7Xw9qGMEihw93F2jwk8DSL3u
KHLQWTP22IQAuWplYs0LmYEbdTfPdsCN9EfN3rEhzIhGOXkgnnUcHlomAA0EI8W3
bxi4bZgYLSYAtP7HoNIH10olF6glTN0W3sIUjZgxpAoW4uNAM+GIHXzRy39DapbV
Q3cRHMzISeu8hJIQSMOs6kfk2NMSgVcaSqx17FrwS5OraMFi62t6J7yAFDgsCiSd
XHJCZHtB6c6ZMqEgHzqPxkUCHu4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org