Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33322d3332203d3e20323637313735.roa
File:                     323830343a343934383a3a2f33322d3332203d3e20323637313735.roa (raw, json)
Hash identifier:          NEGqut631qesUatUztUrUPV8uvS+5i/sxBEmsMlBFio=
Subject key identifier:   B4:5B:73:85:14:72:AB:06:06:6E:E4:46:47:6C:A5:80:90:EA:5E:88
Certificate issuer:       /CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
Certificate serial:       1211695739F04768E84223EA178CA7EA84A3AEBB
Authority key identifier: 92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33322d3332203d3e20323637313735.roa
Signing time:             Tue 18 Jun 2024 17:09:09 +0000
ROA not before:           Tue 18 Jun 2024 17:04:09 +0000
ROA not after:            Tue 17 Jun 2025 17:09:09 +0000
asID:                     267175
IP address blocks:        2804:4948::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl
                          rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:11:69:57:39:f0:47:68:e8:42:23:ea:17:8c:a7:ea:84:a3:ae:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
        Validity
            Not Before: Jun 18 17:04:09 2024 GMT
            Not After : Jun 17 17:09:09 2025 GMT
        Subject: CN=B45B73851472AB06066EE446476CA58090EA5E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:f0:d9:df:7c:06:23:cd:db:76:39:cc:de:
                    7a:f4:6d:71:cf:59:3e:64:21:42:13:58:33:c8:04:
                    2a:d8:bf:83:20:94:f0:d6:1f:0f:08:d1:2b:17:c7:
                    b8:82:05:22:68:e2:e9:78:ac:47:97:02:ea:4f:c3:
                    f4:7c:99:84:ba:1b:95:54:9a:d9:54:8b:9f:fc:6c:
                    1c:c3:a9:87:04:71:01:9a:fe:be:ab:87:a5:45:e0:
                    50:3e:e7:63:64:9e:00:5f:1c:c9:76:d2:9a:c9:89:
                    fa:8c:cf:c3:63:78:b4:58:22:6a:d7:b2:75:0e:31:
                    e9:a8:3d:d6:f9:31:75:3a:2b:eb:36:71:d7:dc:a1:
                    32:0a:e3:83:7d:c1:04:dc:41:a4:5a:d3:d9:db:52:
                    d0:33:36:1c:86:47:b0:b5:c7:be:bf:1b:f7:c1:01:
                    b2:fc:52:38:9d:d6:83:d4:c1:c7:6b:a8:6f:04:70:
                    8e:ff:3b:29:b2:7e:22:93:47:04:75:c8:12:f0:7d:
                    ec:fe:dd:3d:e0:98:8c:7a:c8:98:07:4c:3a:9d:3b:
                    4a:a4:d0:67:6d:c3:68:31:c4:34:ab:81:9f:43:ae:
                    74:7b:90:6c:6e:2a:c5:60:13:cf:8d:ae:0f:bc:09:
                    12:19:09:36:96:e3:91:58:d9:4e:60:60:a6:80:79:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5B:73:85:14:72:AB:06:06:6E:E4:46:47:6C:A5:80:90:EA:5E:88
            X509v3 Authority Key Identifier:
                keyid:92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33322d3332203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4948::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:45:d0:20:1c:ed:f8:b8:8b:0d:c1:c3:58:62:82:6b:48:4b:
         01:cb:f7:0e:0a:0d:ec:ca:ac:ac:b4:64:b2:d8:a6:5d:2f:a5:
         ae:a1:4a:ed:08:53:39:0c:6b:88:60:ef:f6:18:31:04:0c:08:
         00:48:79:85:91:25:25:99:75:11:d8:53:f0:4e:c3:0c:2b:a2:
         02:15:eb:c9:20:ca:34:7d:96:25:9e:6b:a0:86:c8:a6:13:e0:
         3e:3d:f2:27:11:4b:9a:e6:1e:9a:20:37:69:d6:43:fb:bf:20:
         a6:88:c9:eb:92:4c:0c:23:6b:33:b0:56:4b:1b:99:71:a9:52:
         b2:0b:4c:58:9b:11:01:e8:7a:90:39:a2:89:a9:e1:1c:06:66:
         04:ba:b5:93:f8:f7:4c:b2:c4:a5:c4:4c:c9:d7:25:df:da:0f:
         92:2e:49:8d:48:7c:4b:84:ac:6f:e6:7d:78:98:39:b6:43:e8:
         dc:e8:bd:e1:86:56:eb:3a:27:db:e0:72:8d:50:79:7e:18:8c:
         33:f2:c2:fe:62:79:db:7b:09:65:6e:21:75:eb:ce:62:b4:f5:
         70:e9:04:46:3b:f6:34:6c:8d:5a:40:1e:6d:ca:dd:1f:bd:b4:
         2a:8b:55:3b:8f:0d:d2:9a:90:30:88:bb:01:0a:51:f0:85:3b:
         04:97:f9:44
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEhFpVznwR2joQiPqF4yn6oSjrrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1QjFBNzkzQ0M3MUIzMTg0OThGODRGN0JGRTYyQzRF
RDc3M0Y2NTAeFw0yNDA2MTgxNzA0MDlaFw0yNTA2MTcxNzA5MDlaMDMxMTAvBgNV
BAMTKEI0NUI3Mzg1MTQ3MkFCMDYwNjZFRTQ0NjQ3NkNBNTgwOTBFQTVFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdq/DZ33wGI83bdjnM3nr0bXHP
WT5kIUITWDPIBCrYv4MglPDWHw8I0SsXx7iCBSJo4ul4rEeXAupPw/R8mYS6G5VU
mtlUi5/8bBzDqYcEcQGa/r6rh6VF4FA+52NkngBfHMl20prJifqMz8NjeLRYImrX
snUOMemoPdb5MXU6K+s2cdfcoTIK44N9wQTcQaRa09nbUtAzNhyGR7C1x76/G/fB
AbL8Ujid1oPUwcdrqG8EcI7/OymyfiKTRwR1yBLwfez+3T3gmIx6yJgHTDqdO0qk
0Gdtw2gxxDSrgZ9DrnR7kGxuKsVgE8+Nrg+8CRIZCTaW45FY2U5gYKaAeV8fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtFtzhRRyqwYGbuRGR2ylgJDqXogwHwYDVR0j
BBgwFoAUklsaeTzHGzGEmPhPe/5ixO13P2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1IRUJKV1J6Qk5vY1ZRV1NCVnJoREFFeXhhdlgzeVNVcUp2WUVOdFdY
S3kvMC85MjVCMUE3OTNDQzcxQjMxODQ5OEY4NEY3QkZFNjJDNEVENzczRjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyNUIxQTc5M0NDNzFCMzE4
NDk4Rjg0RjdCRkU2MkM0RUQ3NzNGNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FtSEVCSldSekJOb2NWUVdTQlZyaERBRXl4YXZYM3lTVXFKdllFTnRXWEt5LzAv
MzIzODMwMzQzYTM0MzkzNDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARJSDANBgkqhkiG9w0BAQsFAAOCAQEARUXQIBzt
+LiLDcHDWGKCa0hLAcv3DgoN7MqsrLRkstimXS+lrqFK7QhTOQxriGDv9hgxBAwI
AEh5hZElJZl1EdhT8E7DDCuiAhXrySDKNH2WJZ5roIbIphPgPj3yJxFLmuYemiA3
adZD+78gpojJ65JMDCNrM7BWSxuZcalSsgtMWJsRAeh6kDmiianhHAZmBLq1k/j3
TLLEpcRMydcl39oPki5JjUh8S4Ssb+Z9eJg5tkPo3Oi94YZW6zon2+ByjVB5fhiM
M/LC/mJ523sJZW4hdevOYrT1cOkERjv2NGyNWkAebcrdH720KotVO48N0pqQMIi7
AQpR8IU7BJf5RA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:39 2024 by rpki-client on console-fra.rpki-client.org