Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa
File:                     323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa (raw, json)
Hash identifier:          T+I9NvJFkmewMsj105oTtmXBkGDWDCa+WvSHINZ7rYg=
Subject key identifier:   5B:60:48:B7:AD:42:43:BF:3F:30:62:8B:0E:D2:E3:15:12:05:4F:28
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       46BF3E6D634700C3239A7E53F49C71F4E44446BD
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa
Signing time:             Thu 04 Apr 2024 04:01:09 +0000
ROA not before:           Thu 04 Apr 2024 03:56:09 +0000
ROA not after:            Thu 03 Apr 2025 04:01:09 +0000
asID:                     263415
IP address blocks:        2804:4bc8:100::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bf:3e:6d:63:47:00:c3:23:9a:7e:53:f4:9c:71:f4:e4:44:46:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  4 03:56:09 2024 GMT
            Not After : Apr  3 04:01:09 2025 GMT
        Subject: CN=5B6048B7AD4243BF3F30628B0ED2E31512054F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:63:cb:f3:5f:44:ed:32:40:d4:83:15:1d:
                    3b:78:ce:c4:f0:88:45:b3:9b:01:0a:55:47:34:a5:
                    8c:a3:27:a9:ad:1e:7a:de:db:c1:75:2f:33:0d:37:
                    aa:9e:4e:8e:28:ea:0e:72:a4:04:46:43:fe:70:8a:
                    db:da:43:7d:03:68:7f:10:33:48:29:7b:0c:85:92:
                    09:bc:7d:1f:ec:4e:d2:38:bd:19:57:50:79:14:f3:
                    2d:64:38:98:f1:e4:b2:58:b0:1b:89:3b:8e:42:64:
                    f3:51:4f:14:b3:a4:ca:bf:36:cc:a6:28:82:ab:46:
                    46:fc:43:66:8a:c1:5d:ba:41:9d:87:78:10:81:33:
                    79:73:ff:b0:54:0b:90:11:b5:1e:38:fe:82:74:d9:
                    ab:11:66:b5:6b:d9:2c:b6:ea:0b:87:6c:23:05:4a:
                    6f:06:f6:84:ee:00:ba:6e:06:d9:3b:01:d5:23:d8:
                    74:3a:8d:1e:27:91:a3:df:e0:43:01:5b:eb:6d:36:
                    50:96:02:ca:b7:06:3a:3d:95:20:d3:18:ef:9f:16:
                    96:33:64:82:43:8e:69:6c:cb:ce:78:e5:d1:4c:d7:
                    e4:30:ee:17:15:c9:70:0c:08:8d:08:3a:80:2f:18:
                    07:35:81:9b:79:9d:47:bb:fd:55:51:b8:1e:bc:91:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:48:B7:AD:42:43:BF:3F:30:62:8B:0E:D2:E3:15:12:05:4F:28
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:74:71:a3:1f:57:94:53:21:f8:80:a7:72:52:f8:1d:42:
         41:16:f0:07:a8:67:58:55:ac:16:c8:f0:be:44:80:aa:88:c0:
         b1:e2:24:a5:84:13:12:20:4e:74:7b:6b:c7:4b:0c:b9:94:21:
         ef:a3:4b:f8:0a:36:05:15:23:66:ac:0e:da:cc:6d:71:b4:5d:
         71:b8:30:60:80:aa:3a:7a:8f:2c:8c:a5:ff:a8:18:6e:62:e0:
         25:ab:8d:ce:72:33:c0:54:dd:5e:91:3d:11:5b:1a:58:b0:1e:
         cc:f7:97:20:5c:6d:8a:3b:9c:d4:9c:91:87:5a:ef:4f:59:e1:
         70:7e:1a:83:e5:30:db:b2:59:11:bf:09:e3:cb:cb:fd:90:dd:
         f8:1f:60:83:9e:92:f6:c6:45:57:c6:7f:33:db:f9:b2:eb:c0:
         ac:1a:2c:3d:b7:6b:27:c2:0c:d2:8b:63:d3:e7:18:ae:9f:47:
         1c:15:b6:f1:8b:4e:6a:8f:f9:e0:9b:eb:17:fe:92:fd:7a:6d:
         a9:dc:01:58:49:bf:81:a8:d9:ae:a8:c9:61:47:09:bc:1d:32:
         8b:fe:b5:84:3d:eb:1a:ff:6c:c3:90:e5:31:9d:83:db:fb:11:
         24:57:ff:1c:15:0b:9b:99:c5:49:af:c8:8c:20:4f:72:bd:d4:
         84:30:12:3f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIURr8+bWNHAMMjmn5T9Jxx9ORERr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJDOUY3QUQ0MkYyMkI5RjA1OTlERURFRjdERjYwNzE4
RENFMTA2MjAeFw0yNDA0MDQwMzU2MDlaFw0yNTA0MDMwNDAxMDlaMDMxMTAvBgNV
BAMTKDVCNjA0OEI3QUQ0MjQzQkYzRjMwNjI4QjBFRDJFMzE1MTIwNTRGMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpGPL819E7TJA1IMVHTt4zsTw
iEWzmwEKVUc0pYyjJ6mtHnre28F1LzMNN6qeTo4o6g5ypARGQ/5witvaQ30DaH8Q
M0gpewyFkgm8fR/sTtI4vRlXUHkU8y1kOJjx5LJYsBuJO45CZPNRTxSzpMq/Nsym
KIKrRkb8Q2aKwV26QZ2HeBCBM3lz/7BUC5ARtR44/oJ02asRZrVr2Sy26guHbCMF
Sm8G9oTuALpuBtk7AdUj2HQ6jR4nkaPf4EMBW+ttNlCWAsq3Bjo9lSDTGO+fFpYz
ZIJDjmlsy8545dFM1+Qw7hcVyXAMCI0IOoAvGAc1gZt5nUe7/VVRuB68kdxzAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUW2BIt61CQ78/MGKLDtLjFRIFTygwHwYDVR0j
BBgwFoAUi8n3rULyK58Fmd7e999gcY3OEGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VTRmlBSGh2WTd5aTFDZjlGNXFxc1I0RnluUTRuVHlXS3duUURudEEy
Y1AvMS84QkM5RjdBRDQyRjIyQjlGMDU5OURFREVGN0RGNjA3MThEQ0UxMDYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQzlGN0FENDJGMjJCOUYw
NTk5REVERUY3REY2MDcxOERDRTEwNjIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFU0ZpQUhodlk3eWkxQ2Y5RjVxcXNSNEZ5blE0blR5V0t3blFEbnRBMmNQLzEv
MzIzODMwMzQzYTM0NjI2MzM4M2EzMTMwMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl
MjAzMjM2MzMzNDMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBEvIAQAwDQYJKoZIhvcNAQELBQAD
ggEBAEv7dHGjH1eUUyH4gKdyUvgdQkEW8AeoZ1hVrBbI8L5EgKqIwLHiJKWEExIg
TnR7a8dLDLmUIe+jS/gKNgUVI2asDtrMbXG0XXG4MGCAqjp6jyyMpf+oGG5i4CWr
jc5yM8BU3V6RPRFbGliwHsz3lyBcbYo7nNSckYda709Z4XB+GoPlMNuyWRG/CePL
y/2Q3fgfYIOekvbGRVfGfzPb+bLrwKwaLD23ayfCDNKLY9PnGK6fRxwVtvGLTmqP
+eCb6xf+kv16bancAVhJv4Go2a6oyWFHCbwdMov+tYQ96xr/bMOQ5TGdg9v7ESRX
/xwVC5uZxUmvyIwgT3K91IQwEj8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org