Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a3630303a3a2f34382d3438203d3e20323632393737.roa
File:                     323830343a313661343a3630303a3a2f34382d3438203d3e20323632393737.roa (raw, json)
Hash identifier:          d0TvNyF0rtaM37OgAZyzoB/c+HK2wy0EXr85artwN4U=
Subject key identifier:   25:CD:CE:47:66:4D:04:C6:99:5B:28:74:93:1A:99:DB:B0:9E:79:54
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       3467851636BA1EE3127028B54B86BC4938D47CE7
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a3630303a3a2f34382d3438203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:45:31 +0000
ROA not before:           Wed 22 May 2024 17:40:31 +0000
ROA not after:            Wed 21 May 2025 17:45:31 +0000
asID:                     262977
IP address blocks:        2804:16a4:600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl
                          rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 12:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:67:85:16:36:ba:1e:e3:12:70:28:b5:4b:86:bc:49:38:d4:7c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:40:31 2024 GMT
            Not After : May 21 17:45:31 2025 GMT
        Subject: CN=25CDCE47664D04C6995B2874931A99DBB09E7954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:b0:a2:67:53:8c:a3:df:7f:ab:cd:af:ea:
                    94:e5:a5:51:09:e5:8c:70:7b:11:0f:0c:de:40:64:
                    6f:8b:2f:d5:38:e6:79:fa:5b:9a:ac:2e:a5:a8:2f:
                    ea:87:55:da:e9:e3:ce:76:d3:9b:50:1e:b5:52:b5:
                    3d:b2:c2:e0:9c:73:2d:d3:c4:d6:fa:eb:5d:b6:45:
                    5a:0e:15:77:7e:3d:2f:ff:35:50:59:48:f3:7e:88:
                    13:16:dd:e5:e6:f6:9b:c0:3c:74:7e:67:6c:53:68:
                    15:ec:0d:ba:9f:76:05:26:7b:f3:17:a2:98:55:01:
                    8b:ac:c4:aa:7b:e0:98:f4:6e:be:5d:64:3b:2d:89:
                    0d:c0:14:2a:e0:5e:90:85:5c:ee:fd:b0:b4:59:65:
                    e3:eb:a8:71:89:51:5b:ff:8c:ea:23:82:a8:2b:64:
                    52:c4:be:4e:55:8e:1e:91:19:6b:da:fb:95:2e:1b:
                    38:58:11:72:ef:17:45:32:6b:08:24:5f:59:ae:14:
                    df:81:05:0d:2d:c5:a3:0c:55:75:16:00:f8:00:92:
                    94:6c:15:06:77:84:48:5b:00:dd:fd:a6:cc:0d:2e:
                    d3:80:9c:6d:10:da:bf:0b:26:13:4d:ed:90:30:cd:
                    d5:39:3b:d8:91:84:b7:ec:97:66:a0:bd:c7:dd:e7:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CD:CE:47:66:4D:04:C6:99:5B:28:74:93:1A:99:DB:B0:9E:79:54
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a3630303a3a2f34382d3438203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:c1:05:2f:cb:93:25:af:83:9d:df:ea:de:57:bc:08:ee:2f:
         3c:db:ed:85:a3:ac:46:0e:5c:1b:8d:65:cc:e6:1c:a2:2d:c9:
         b4:4c:39:0b:93:14:9b:ed:14:f4:20:a7:52:61:7d:ad:43:4d:
         9c:de:16:fd:39:1c:64:3d:f0:c0:86:97:66:9d:43:34:04:34:
         af:be:e5:87:22:99:ed:81:23:81:3c:b9:9a:17:0b:04:27:60:
         4b:a7:62:b9:80:a1:dc:a7:4f:21:e7:4a:d6:99:74:b6:5e:7e:
         c0:fe:1e:88:fa:5b:11:36:53:b1:08:f3:67:a2:8f:bc:6b:26:
         6a:4e:b5:db:66:a4:e2:37:d2:38:e3:cf:73:4f:28:03:41:c4:
         96:7a:c6:b6:6c:49:0c:73:dc:17:6b:2d:b9:18:bb:4d:57:4d:
         0b:f7:8b:57:c2:bc:9a:1d:51:42:a1:0f:d7:30:21:eb:30:c2:
         38:a9:68:83:76:0c:fb:d9:1b:f8:d6:d7:ac:d7:33:10:c3:fe:
         7e:28:b2:f2:c5:b0:f0:b3:ca:f0:9f:19:4a:9d:4b:aa:fa:6c:
         85:90:fe:09:23:25:c5:6b:5b:3e:57:ad:b7:19:a7:3b:ef:99:
         5c:d0:0f:bb:ff:5a:66:34:b1:9f:3c:8c:e4:55:fc:42:bd:29:
         54:30:28:5d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUNGeFFja6HuMScCi1S4a8STjUfOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0
RjcwOTA4QjAeFw0yNDA1MjIxNzQwMzFaFw0yNTA1MjExNzQ1MzFaMDMxMTAvBgNV
BAMTKDI1Q0RDRTQ3NjY0RDA0QzY5OTVCMjg3NDkzMUE5OURCQjA5RTc5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzLCiZ1OMo99/q82v6pTlpVEJ
5YxwexEPDN5AZG+LL9U45nn6W5qsLqWoL+qHVdrp485205tQHrVStT2ywuCccy3T
xNb66122RVoOFXd+PS//NVBZSPN+iBMW3eXm9pvAPHR+Z2xTaBXsDbqfdgUme/MX
ophVAYusxKp74Jj0br5dZDstiQ3AFCrgXpCFXO79sLRZZePrqHGJUVv/jOojgqgr
ZFLEvk5Vjh6RGWva+5UuGzhYEXLvF0UyawgkX1muFN+BBQ0txaMMVXUWAPgAkpRs
FQZ3hEhbAN39pswNLtOAnG0Q2r8LJhNN7ZAwzdU5O9iRhLfsl2agvcfd5yrdAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUJc3OR2ZNBMaZWyh0kxqZ27CeeVQwHwYDVR0j
BBgwFoAUsk5Qvu9x0WQy0oXe2a6vj09wkIswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzAvQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0RjcwOTA4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CMjRFNTBCRUVGNzFEMTY0MzJE
Mjg1REVEOUFFQUY4RjRGNzA5MDhCLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzAvMzIz
ODMwMzQzYTMxMzY2MTM0M2EzNjMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MjM2MzIzOTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBakBgAwDQYJKoZIhvcNAQELBQADggEB
AJXBBS/LkyWvg53f6t5XvAjuLzzb7YWjrEYOXBuNZczmHKItybRMOQuTFJvtFPQg
p1Jhfa1DTZzeFv05HGQ98MCGl2adQzQENK++5Ycime2BI4E8uZoXCwQnYEunYrmA
odynTyHnStaZdLZefsD+Hoj6WxE2U7EI82eij7xrJmpOtdtmpOI30jjjz3NPKANB
xJZ6xrZsSQxz3BdrLbkYu01XTQv3i1fCvJodUUKhD9cwIeswwjipaIN2DPvZG/jW
16zXMxDD/n4osvLFsPCzyvCfGUqdS6r6bIWQ/gkjJcVrWz5XrbcZpzvvmVzQD7v/
WmY0sZ88jORV/EK9KVQwKF0=
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:20 2024 by rpki-client on console-ams.rpki-client.org