Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/323830343a343839633a3a2f33322d313238203d3e20323637313333.roa
File:                     323830343a343839633a3a2f33322d313238203d3e20323637313333.roa (raw, json)
Hash identifier:          AzDB84NAvvT5I+3yhluJIUrAYVU+qqrcdGhFEqylN9I=
Subject key identifier:   95:5F:25:47:E9:5C:BB:28:6E:67:D1:18:9B:50:88:7D:07:49:8A:39
Certificate issuer:       /CN=6247EC2E5F532DBE5991DF683B8E94EA128B117F
Certificate serial:       76D4E123DDE6136597DA96247174839EE0076387
Authority key identifier: 62:47:EC:2E:5F:53:2D:BE:59:91:DF:68:3B:8E:94:EA:12:8B:11:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6247EC2E5F532DBE5991DF683B8E94EA128B117F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/323830343a343839633a3a2f33322d313238203d3e20323637313333.roa
Signing time:             Thu 16 May 2024 15:15:01 +0000
ROA not before:           Thu 16 May 2024 15:10:01 +0000
ROA not after:            Thu 15 May 2025 15:15:01 +0000
asID:                     267133
IP address blocks:        2804:489c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/6247EC2E5F532DBE5991DF683B8E94EA128B117F.crl
                          rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/6247EC2E5F532DBE5991DF683B8E94EA128B117F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6247EC2E5F532DBE5991DF683B8E94EA128B117F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d4:e1:23:dd:e6:13:65:97:da:96:24:71:74:83:9e:e0:07:63:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6247EC2E5F532DBE5991DF683B8E94EA128B117F
        Validity
            Not Before: May 16 15:10:01 2024 GMT
            Not After : May 15 15:15:01 2025 GMT
        Subject: CN=955F2547E95CBB286E67D1189B50887D07498A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:e3:80:0e:54:b4:b0:b1:c7:32:16:5f:29:
                    a5:7c:73:92:e8:59:b5:71:ed:ce:c9:01:72:13:bb:
                    5a:62:60:fa:d3:d6:ca:1c:dd:6c:3b:96:13:b9:88:
                    68:aa:af:39:d6:43:00:c6:70:e1:90:86:e3:d0:c5:
                    8f:b0:38:2b:a7:42:59:82:53:ce:10:f8:ea:9c:ab:
                    a1:98:a1:da:3b:de:dd:ee:a8:71:64:aa:99:1f:26:
                    a5:87:13:79:8a:6a:39:6e:0c:8b:17:c9:70:a0:f8:
                    6d:e9:6d:23:5c:75:07:0e:68:41:98:00:78:1b:73:
                    b0:06:b5:4a:86:58:d6:86:2e:bf:2c:b9:3b:7d:53:
                    12:8f:68:bb:3d:81:dc:99:aa:27:53:33:38:9b:b0:
                    c3:7a:66:c0:ef:c6:a7:fb:8e:ad:aa:b6:ea:a5:d0:
                    8e:0e:fb:8e:0f:4f:66:14:70:d7:91:a2:36:26:0a:
                    19:ce:28:8c:b8:e8:5a:d5:37:cc:39:2e:b5:de:57:
                    a7:b0:1d:af:19:d2:4c:96:42:83:8a:b9:d1:85:41:
                    01:fc:b1:24:a5:17:4c:4c:23:75:41:53:6a:78:e9:
                    e4:ad:e3:f4:ea:b8:d2:d2:10:52:2b:41:00:5b:fc:
                    8d:11:0d:ed:28:84:dd:f5:8b:8b:5a:ab:3e:21:7a:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:25:47:E9:5C:BB:28:6E:67:D1:18:9B:50:88:7D:07:49:8A:39
            X509v3 Authority Key Identifier:
                keyid:62:47:EC:2E:5F:53:2D:BE:59:91:DF:68:3B:8E:94:EA:12:8B:11:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/6247EC2E5F532DBE5991DF683B8E94EA128B117F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6247EC2E5F532DBE5991DF683B8E94EA128B117F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/323830343a343839633a3a2f33322d313238203d3e20323637313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:489c::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:b2:47:4d:f0:7c:c8:e3:ea:05:3c:95:3b:70:ef:cd:90:ce:
         1f:ff:6d:1f:b3:a7:11:01:e1:25:e4:86:64:42:70:53:08:e8:
         d0:ab:8b:0d:c7:1f:fe:d3:86:0c:30:ee:00:40:73:dd:83:81:
         6f:4f:4f:35:01:af:87:3b:3c:f6:93:1b:23:35:ef:67:ff:2e:
         33:68:f7:88:c0:e9:c1:30:34:5f:14:9b:04:dd:5f:b1:2d:67:
         40:d5:70:40:dd:b3:df:a2:61:82:d1:60:1c:2a:a9:a0:0b:8c:
         44:f7:1d:ac:3d:c4:ea:d8:9e:2b:e6:2b:ee:6b:8a:c3:6a:ef:
         05:03:b4:e1:b4:16:cd:89:b1:25:b2:7a:31:33:bc:30:fa:57:
         11:ab:fd:c1:4b:3e:30:db:2a:04:99:4e:78:ef:ec:f9:d8:af:
         6e:db:5a:67:1f:27:dc:64:eb:32:fe:1c:44:a3:0b:5e:75:63:
         57:4b:61:e4:64:64:ab:7b:60:fc:4c:39:82:66:3f:cb:1a:e0:
         54:6b:3a:96:d0:9a:40:8e:23:12:9d:4b:f3:dd:cc:92:4a:16:
         1c:23:1f:91:e5:3f:ac:bb:f0:29:68:c0:d3:c7:aa:31:80:f8:
         d5:15:c5:53:d1:0f:23:5a:c9:f1:66:0f:37:ee:e1:79:22:da:
         be:cb:8a:3c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdtThI93mE2WX2pYkcXSDnuAHY4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI0N0VDMkU1RjUzMkRCRTU5OTFERjY4M0I4RTk0RUEx
MjhCMTE3RjAeFw0yNDA1MTYxNTEwMDFaFw0yNTA1MTUxNTE1MDFaMDMxMTAvBgNV
BAMTKDk1NUYyNTQ3RTk1Q0JCMjg2RTY3RDExODlCNTA4ODdEMDc0OThBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzuOADlS0sLHHMhZfKaV8c5Lo
WbVx7c7JAXITu1piYPrT1soc3Ww7lhO5iGiqrznWQwDGcOGQhuPQxY+wOCunQlmC
U84Q+Oqcq6GYodo73t3uqHFkqpkfJqWHE3mKajluDIsXyXCg+G3pbSNcdQcOaEGY
AHgbc7AGtUqGWNaGLr8suTt9UxKPaLs9gdyZqidTMzibsMN6ZsDvxqf7jq2qtuql
0I4O+44PT2YUcNeRojYmChnOKIy46FrVN8w5LrXeV6ewHa8Z0kyWQoOKudGFQQH8
sSSlF0xMI3VBU2p46eSt4/TquNLSEFIrQQBb/I0RDe0ohN31i4taqz4hehZBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUlV8lR+lcuyhuZ9EYm1CIfQdJijkwHwYDVR0j
BBgwFoAUYkfsLl9TLb5Zkd9oO46U6hKLEX8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG01SHkxOGh3WEVDM1JRODJ5NW8zMVplbkhDUkx6OUV4aG1Fb3dRS0Ni
VWkvMC82MjQ3RUMyRTVGNTMyREJFNTk5MURGNjgzQjhFOTRFQTEyOEIxMTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNDdFQzJFNUY1MzJEQkU1
OTkxREY2ODNCOEU5NEVBMTI4QjExN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtNUh5MThod1hFQzNSUTgyeTVvMzFaZW5IQ1JMejlFeGhtRW93UUtDYlVpLzAv
MzIzODMwMzQzYTM0MzgzOTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMTMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEicMA0GCSqGSIb3DQEBCwUAA4IBAQAJskdN
8HzI4+oFPJU7cO/NkM4f/20fs6cRAeEl5IZkQnBTCOjQq4sNxx/+04YMMO4AQHPd
g4FvT081Aa+HOzz2kxsjNe9n/y4zaPeIwOnBMDRfFJsE3V+xLWdA1XBA3bPfomGC
0WAcKqmgC4xE9x2sPcTq2J4r5ivua4rDau8FA7ThtBbNibElsnoxM7ww+lcRq/3B
Sz4w2yoEmU547+z52K9u21pnHyfcZOsy/hxEowtedWNXS2HkZGSre2D8TDmCZj/L
GuBUazqW0JpAjiMSnUvz3cySShYcIx+R5T+su/ApaMDTx6oxgPjVFcVT0Q8jWsnx
Zg837uF5Itq+y4o8
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:36 2024 by rpki-client on console-ams.rpki-client.org