Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa
File:                     323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (raw, json)
Hash identifier:          OXrpzDapbBO8PUy+PtSJ8r/CO/cajogyoFdnT17tOo0=
Subject key identifier:   B7:ED:FF:57:D5:B2:90:3B:81:98:47:1E:A6:4D:FE:78:11:F2:A2:97
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       61F141CE64B930EFC49379790CC2A85826A99E09
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa
Signing time:             Wed 03 Apr 2024 18:31:25 +0000
ROA not before:           Wed 03 Apr 2024 18:26:25 +0000
ROA not after:            Wed 02 Apr 2025 18:31:25 +0000
asID:                     264126
IP address blocks:        2804:22d8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f1:41:ce:64:b9:30:ef:c4:93:79:79:0c:c2:a8:58:26:a9:9e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Apr  3 18:26:25 2024 GMT
            Not After : Apr  2 18:31:25 2025 GMT
        Subject: CN=B7EDFF57D5B2903B8198471EA64DFE7811F2A297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:86:6f:a7:14:6e:fd:5f:bd:28:da:24:71:
                    92:cb:44:b1:85:17:99:3a:14:0b:8e:a2:27:db:92:
                    2b:23:a3:97:bb:6c:12:12:e5:ec:52:dc:89:f8:1b:
                    af:b8:f1:fb:5b:ab:c1:5b:c7:e4:e9:67:7d:1e:dc:
                    93:97:06:0d:c3:54:91:e2:33:cd:40:f4:3a:3c:ec:
                    a1:36:fa:01:3e:43:14:c8:da:7f:cb:88:73:b4:6f:
                    1f:61:4f:4a:13:be:1a:3a:e2:9f:60:2e:d4:2e:92:
                    22:dc:b6:4b:43:a6:46:ce:6f:b6:69:c2:48:c2:46:
                    fe:2e:a5:a9:4a:2f:78:a8:9e:5f:69:c2:74:b2:c0:
                    1e:60:89:bd:a1:de:f7:72:50:81:14:15:da:4d:63:
                    d8:3d:d0:49:8f:e3:c0:94:1a:3f:19:1c:68:7e:aa:
                    b5:05:87:35:78:59:8e:0f:c9:e2:47:0d:0c:9a:10:
                    b2:be:5a:2b:fd:c2:22:77:a2:9c:41:90:22:71:b7:
                    b5:b5:c0:e6:fe:23:34:af:75:5e:74:ec:12:7d:b7:
                    22:e2:20:08:82:00:ee:ca:f9:97:1a:fc:bb:3f:2d:
                    eb:d5:73:b4:81:8e:1c:f2:0b:3d:b7:d6:ea:0d:47:
                    5d:70:6e:4d:ee:76:ac:93:b3:9d:13:b4:bd:cf:99:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:FF:57:D5:B2:90:3B:81:98:47:1E:A6:4D:FE:78:11:F2:A2:97
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:3a:26:0b:be:17:89:f2:78:b6:fa:c1:b1:2c:42:b8:69:b6:
         b1:00:5b:5a:53:b3:29:48:85:36:6b:f8:c6:a0:03:d6:23:0c:
         ef:91:cc:99:44:ed:ab:76:6d:f5:97:86:7c:52:d5:99:08:5e:
         5b:68:f3:fb:5a:0c:fe:2c:e5:c7:99:ad:a6:43:ce:e8:b0:79:
         1e:e6:0c:8a:fd:a8:44:8d:96:c6:71:e8:fc:1a:e1:ef:d5:f4:
         a8:4c:aa:f7:e7:43:9d:91:f1:55:1b:fc:40:2f:d8:45:31:74:
         68:a7:60:65:03:41:1f:bd:6e:3c:c7:4c:b6:81:99:46:ba:4d:
         b3:d8:ec:9b:51:65:81:9e:8f:c7:27:12:75:02:97:98:41:bc:
         b4:ba:5e:b7:10:84:14:3e:c1:bb:1b:94:f4:ff:51:48:68:9e:
         c7:9e:7a:91:37:3a:c9:bd:a2:24:10:a4:de:01:c7:52:26:fa:
         1f:1a:6d:9d:7d:7a:26:81:77:29:0a:21:af:07:75:39:f1:f9:
         e6:22:29:53:27:9a:cd:30:71:1b:76:d3:b1:38:67:3a:8d:4b:
         94:4b:40:64:32:29:26:c6:69:08:e6:ab:52:ef:df:2c:cc:6f:
         25:0b:b8:75:68:84:5e:b2:4a:68:8d:a1:a7:84:aa:df:34:e2:
         d5:bf:b9:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYfFBzmS5MO/Ek3l5DMKoWCapngkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx
MjMzOEQ5QzAeFw0yNDA0MDMxODI2MjVaFw0yNTA0MDIxODMxMjVaMDMxMTAvBgNV
BAMTKEI3RURGRjU3RDVCMjkwM0I4MTk4NDcxRUE2NERGRTc4MTFGMkEyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5YZvpxRu/V+9KNokcZLLRLGF
F5k6FAuOoifbkisjo5e7bBIS5exS3In4G6+48ftbq8Fbx+TpZ30e3JOXBg3DVJHi
M81A9Do87KE2+gE+QxTI2n/LiHO0bx9hT0oTvho64p9gLtQukiLctktDpkbOb7Zp
wkjCRv4upalKL3ionl9pwnSywB5gib2h3vdyUIEUFdpNY9g90EmP48CUGj8ZHGh+
qrUFhzV4WY4PyeJHDQyaELK+Wiv9wiJ3opxBkCJxt7W1wOb+IzSvdV507BJ9tyLi
IAiCAO7K+Zca/Ls/LevVc7SBjhzyCz231uoNR11wbk3udqyTs50TtL3PmcRRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUt+3/V9WykDuBmEcepk3+eBHyopcwHwYDVR0j
BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW
azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux
RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIQTJoY0c0ZUF1WERHQlBhWXR0S2hjdEZndndid0Y1UEdNNUQyVVJ4Vms5LzEv
MzIzODMwMzQzYTMyMzI2NDM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEItjAMA0GCSqGSIb3DQEBCwUA
A4IBAQCLOiYLvheJ8ni2+sGxLEK4abaxAFtaU7MpSIU2a/jGoAPWIwzvkcyZRO2r
dm31l4Z8UtWZCF5baPP7Wgz+LOXHma2mQ87osHke5gyK/ahEjZbGcej8GuHv1fSo
TKr350OdkfFVG/xAL9hFMXRop2BlA0EfvW48x0y2gZlGuk2z2OybUWWBno/HJxJ1
ApeYQby0ul63EIQUPsG7G5T0/1FIaJ7HnnqRNzrJvaIkEKTeAcdSJvofGm2dfXom
gXcpCiGvB3U58fnmIilTJ5rNMHEbdtOxOGc6jUuUS0BkMikmxmkI5qtS798szG8l
C7h1aIReskpojaGnhKrfNOLVv7md
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:14 2024 by rpki-client on console-fra.rpki-client.org