Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa
File:                     323830343a343163343a3a2f33342d3334203d3e20323637343535.roa (raw, json)
Hash identifier:          q3pYIyTt4mJrr5U/nzBcZTfZiQc7Iu66A3+ucbRIr5w=
Subject key identifier:   04:26:FC:F7:BB:5D:96:0E:4B:0E:8A:07:B3:72:57:74:38:6B:4C:AD
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       1DC01DAB71F684A95991626A56E2AEE47861E78D
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa
Signing time:             Thu 04 Apr 2024 02:31:18 +0000
ROA not before:           Thu 04 Apr 2024 02:26:18 +0000
ROA not after:            Thu 03 Apr 2025 02:31:18 +0000
asID:                     267455
IP address blocks:        2804:41c4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c0:1d:ab:71:f6:84:a9:59:91:62:6a:56:e2:ae:e4:78:61:e7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Apr  4 02:26:18 2024 GMT
            Not After : Apr  3 02:31:18 2025 GMT
        Subject: CN=0426FCF7BB5D960E4B0E8A07B3725774386B4CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:5e:f5:cc:06:05:31:b4:48:43:a9:17:80:
                    87:89:6c:8c:49:a6:e0:3a:73:94:35:2a:d1:3f:e3:
                    d4:dd:ff:f6:63:8b:91:4f:f2:4c:41:db:1a:df:47:
                    0a:7b:f1:aa:f0:f1:4e:10:3c:a8:e9:16:dd:62:89:
                    e9:25:b6:5b:82:08:ba:15:66:ab:50:a1:a8:84:a2:
                    c4:4e:0e:c9:62:06:ce:d8:7b:66:b4:81:a7:9f:89:
                    d2:7e:b8:a9:79:4c:c6:7e:ff:e2:c9:a6:5b:8e:9f:
                    0b:94:4d:d6:64:4b:d2:d1:91:3a:20:b9:d1:49:4b:
                    6a:b8:a8:35:2d:d4:2f:f3:ed:ff:48:5c:da:4e:bc:
                    4b:f3:00:96:97:a9:be:4e:f5:70:95:6b:3d:9a:5f:
                    44:80:d9:fb:41:21:1d:f1:fd:1c:4b:ee:d4:06:cd:
                    ca:de:6d:50:fa:8f:0d:50:c4:91:b7:a5:79:87:11:
                    73:c7:51:c4:9e:0e:c9:5e:f5:15:a3:25:3d:b9:11:
                    24:13:9c:5f:83:4e:e3:c6:58:8e:8e:b4:61:f7:a8:
                    c9:00:af:f0:8c:de:ef:8a:c6:7b:58:26:b9:b1:e2:
                    bc:88:57:d7:df:2c:54:66:df:be:02:c2:17:c3:1b:
                    5b:7d:d5:cc:02:32:0f:4a:9c:9e:77:be:63:d0:d1:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:26:FC:F7:BB:5D:96:0E:4B:0E:8A:07:B3:72:57:74:38:6B:4C:AD
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:05:68:27:a4:2b:68:41:89:07:a8:69:b3:3b:47:00:c6:
         2e:bd:44:99:5c:a8:62:bb:a8:d2:97:d7:ab:32:73:c6:45:b3:
         27:52:c1:e2:0e:5b:b0:fa:6a:08:98:64:9b:dc:77:23:01:09:
         74:80:1b:82:57:74:36:e3:52:ec:52:89:6c:d4:13:36:da:cd:
         aa:b0:54:9c:a9:6f:e7:c0:c9:bd:fd:b5:5c:e0:3d:17:7b:0b:
         4f:4f:a5:3c:fa:ff:fd:29:b7:c0:ad:02:df:98:bf:92:31:43:
         3c:ac:90:b5:df:5b:25:98:60:ca:0a:d3:cd:eb:7d:19:94:8f:
         ca:81:ca:be:d4:f1:30:b5:ef:fc:98:0e:2f:28:3b:a7:7d:22:
         78:c8:c3:17:ad:a6:62:7f:47:8d:0d:d0:3e:1a:9b:85:1c:ae:
         eb:16:eb:ed:12:c7:b7:39:0e:8b:5b:c4:a6:32:cd:c8:1e:d8:
         60:dd:20:bd:d3:6d:af:8b:56:7b:6c:10:94:46:22:60:60:f3:
         03:25:8b:dd:26:80:9c:a4:59:40:a7:67:07:bf:2c:cc:27:c4:
         bf:b9:a1:85:2c:ac:e7:b4:92:a7:33:80:a6:89:30:29:91:cc:
         1f:bd:36:3f:e0:96:b2:3b:95:87:1e:cc:93:94:b3:93:77:3e:
         6b:bd:ae:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHcAdq3H2hKlZkWJqVuKu5Hhh540wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkzQjI0RERDOEI1NDA1OTVCQ0U3NUZFQzkyMzcyMUJF
ODBGRUExRDAeFw0yNDA0MDQwMjI2MThaFw0yNTA0MDMwMjMxMThaMDMxMTAvBgNV
BAMTKDA0MjZGQ0Y3QkI1RDk2MEU0QjBFOEEwN0IzNzI1Nzc0Mzg2QjRDQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfV71zAYFMbRIQ6kXgIeJbIxJ
puA6c5Q1KtE/49Td//Zji5FP8kxB2xrfRwp78arw8U4QPKjpFt1iiekltluCCLoV
ZqtQoaiEosRODsliBs7Ye2a0gaefidJ+uKl5TMZ+/+LJpluOnwuUTdZkS9LRkTog
udFJS2q4qDUt1C/z7f9IXNpOvEvzAJaXqb5O9XCVaz2aX0SA2ftBIR3x/RxL7tQG
zcrebVD6jw1QxJG3pXmHEXPHUcSeDsle9RWjJT25ESQTnF+DTuPGWI6OtGH3qMkA
r/CM3u+KxntYJrmx4ryIV9ffLFRm374CwhfDG1t91cwCMg9KnJ53vmPQ0VdlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBCb897tdlg5LDooHs3JXdDhrTK0wHwYDVR0j
BBgwFoAUuTsk3ci1QFlbznX+ySNyG+gP6h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVycUtVY0tnOUp2eE1zcFVndTlKamRrZkVyTmhwcTFLRE5nNjhQSnRI
ZzMvMS9COTNCMjREREM4QjU0MDU5NUJDRTc1RkVDOTIzNzIxQkU4MEZFQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5M0IyNEREQzhCNTQwNTk1
QkNFNzVGRUM5MjM3MjFCRTgwRkVBMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcnFLVWNLZzlKdnhNc3BVZ3U5Smpka2ZFck5ocHExS0ROZzY4UEp0SGczLzEv
MzIzODMwMzQzYTM0MzE2MzM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM3
MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARBxAAwDQYJKoZIhvcNAQELBQADggEBAIUuBWgn
pCtoQYkHqGmzO0cAxi69RJlcqGK7qNKX16syc8ZFsydSweIOW7D6agiYZJvcdyMB
CXSAG4JXdDbjUuxSiWzUEzbazaqwVJypb+fAyb39tVzgPRd7C09PpTz6//0pt8Ct
At+Yv5IxQzyskLXfWyWYYMoK083rfRmUj8qByr7U8TC17/yYDi8oO6d9InjIwxet
pmJ/R40N0D4am4UcrusW6+0Sx7c5DotbxKYyzcge2GDdIL3Tba+LVntsEJRGImBg
8wMli90mgJykWUCnZwe/LMwnxL+5oYUsrOe0kqczgKaJMCmRzB+9Nj/glrI7lYce
zJOUs5N3Pmu9riU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org