Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
File:                     323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (raw, json)
Hash identifier:          tsOYH76BfqT8mY4MadK531UC5ikBGOXeTaV5dqn1iMM=
Subject key identifier:   92:9D:BC:8D:3D:76:47:70:E8:D0:E2:3F:CE:BE:C6:DD:24:6F:6E:A6
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       4BEE346AAAA0B8CBC101E1CBC89A4156226EE107
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
Signing time:             Wed 25 Dec 2024 09:59:24 +0000
ROA not before:           Wed 25 Dec 2024 09:54:24 +0000
ROA not after:            Wed 24 Dec 2025 09:59:24 +0000
asID:                     268878
IP address blocks:        2804:5bf0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ee:34:6a:aa:a0:b8:cb:c1:01:e1:cb:c8:9a:41:56:22:6e:e1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Dec 25 09:54:24 2024 GMT
            Not After : Dec 24 09:59:24 2025 GMT
        Subject: CN=929DBC8D3D764770E8D0E23FCEBEC6DD246F6EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:10:ac:98:d0:c4:00:5f:9b:07:04:83:b8:
                    cf:6f:6e:79:0d:b7:cb:03:0b:c7:6f:22:75:e5:43:
                    17:8b:f4:3a:08:f1:c1:e1:57:58:92:56:70:45:f6:
                    85:3c:e5:53:1b:25:94:3c:03:42:e8:d6:df:f7:7e:
                    8a:2e:12:15:d0:c3:81:5b:16:a0:53:ec:66:c7:f5:
                    cb:bd:ba:17:b6:d5:10:7a:fe:08:9a:26:4b:78:dd:
                    80:23:46:8b:63:01:03:45:8e:5b:8d:c0:85:d6:71:
                    18:a3:63:cd:6e:93:5e:33:de:79:3b:f9:32:23:d3:
                    02:c2:d3:05:d7:4c:3c:9f:fe:f2:dd:be:b5:9d:3b:
                    72:52:fa:8b:0c:b3:84:3a:7b:e0:6a:f2:cf:56:7e:
                    91:45:a4:4b:3b:3e:15:35:97:44:db:82:a5:55:b5:
                    0e:de:19:00:27:cc:79:d9:5f:50:92:fe:79:3f:73:
                    b2:5c:38:7e:9b:02:c7:cd:74:6c:29:92:cd:c8:35:
                    68:05:fc:b9:34:45:74:e2:86:fb:db:b7:c2:fc:8e:
                    f0:b3:73:77:cf:3c:46:50:a7:5a:63:52:80:68:bd:
                    ab:80:02:93:15:41:10:41:e3:47:b4:8f:83:77:0d:
                    02:be:08:6f:96:63:91:31:31:34:68:6a:ff:9e:0d:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:BC:8D:3D:76:47:70:E8:D0:E2:3F:CE:BE:C6:DD:24:6F:6E:A6
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:f9:c0:93:b6:be:15:49:10:19:82:ff:85:8b:9a:79:2f:
         8b:2a:d8:ae:8e:66:2d:8e:aa:2c:99:7e:0a:7c:ea:a5:6c:b6:
         b4:0c:e8:cb:0c:a8:98:54:fc:9d:3e:8f:a6:51:fc:27:84:60:
         ff:74:74:34:11:11:c9:f0:2d:96:c8:55:00:22:9b:cb:e4:75:
         b1:b5:59:b9:4b:9f:71:ff:b5:cf:3d:ac:18:2a:2b:e1:c4:45:
         24:56:8a:a4:08:31:49:31:32:65:3a:3d:19:ff:b3:3e:92:67:
         9a:9c:05:4c:ef:0a:a5:1d:d5:3b:ef:10:78:a5:ff:9e:f3:ef:
         fb:a9:2b:62:3f:77:eb:4b:cc:70:58:09:d8:d5:2f:a6:96:cc:
         8d:23:22:44:1b:30:50:19:17:c5:94:97:9d:57:b8:e7:a0:ab:
         b1:05:16:77:8a:98:b6:a6:c0:59:6e:3e:b1:21:7f:3a:d8:ae:
         13:94:b4:a6:ef:c5:f0:6d:0b:15:b2:05:c9:ba:df:b6:26:ab:
         d5:dc:c9:00:a2:66:8a:0d:53:8e:50:24:1a:8c:21:5c:2d:e8:
         f7:e8:e2:e5:87:8e:62:85:bd:c2:99:d2:8a:64:de:ee:3c:b4:
         db:6b:1b:54:3e:fe:4d:c8:90:7e:40:85:62:65:a2:7b:f2:99:
         b7:2d:33:cb
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUS+40aqqguMvBAeHLyJpBViJu4QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3
RkFCNzgyMDAeFw0yNDEyMjUwOTU0MjRaFw0yNTEyMjQwOTU5MjRaMDMxMTAvBgNV
BAMTKDkyOURCQzhEM0Q3NjQ3NzBFOEQwRTIzRkNFQkVDNkREMjQ2RjZFQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsxCsmNDEAF+bBwSDuM9vbnkN
t8sDC8dvInXlQxeL9DoI8cHhV1iSVnBF9oU85VMbJZQ8A0Lo1t/3foouEhXQw4Fb
FqBT7GbH9cu9uhe21RB6/giaJkt43YAjRotjAQNFjluNwIXWcRijY81uk14z3nk7
+TIj0wLC0wXXTDyf/vLdvrWdO3JS+osMs4Q6e+Bq8s9WfpFFpEs7PhU1l0TbgqVV
tQ7eGQAnzHnZX1CS/nk/c7JcOH6bAsfNdGwpks3INWgF/Lk0RXTihvvbt8L8jvCz
c3fPPEZQp1pjUoBovauAApMVQRBB40e0j4N3DQK+CG+WY5ExMTRoav+eDYPlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUkp28jT12R3Do0OI/zr7G3SRvbqYwHwYDVR0j
BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw
N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzIzODMwMzQzYTM1NjI2NjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFvwMA0GCSqGSIb3DQEBCwUAA4IBAQBhx/nA
k7a+FUkQGYL/hYuaeS+LKtiujmYtjqosmX4KfOqlbLa0DOjLDKiYVPydPo+mUfwn
hGD/dHQ0ERHJ8C2WyFUAIpvL5HWxtVm5S59x/7XPPawYKivhxEUkVoqkCDFJMTJl
Oj0Z/7M+kmeanAVM7wqlHdU77xB4pf+e8+/7qStiP3frS8xwWAnY1S+mlsyNIyJE
GzBQGRfFlJedV7jnoKuxBRZ3ipi2psBZbj6xIX862K4TlLSm78XwbQsVsgXJut+2
JqvV3MkAomaKDVOOUCQajCFcLej36OLlh45ihb3CmdKKZN7uPLTbaxtUPv5NyJB+
QIViZaJ78pm3LTPL
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:40 2025 by rpki-client