Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a343030303a3a2f33342d3334203d3e20323633333338.roa
File:                     323830343a313439343a343030303a3a2f33342d3334203d3e20323633333338.roa (raw, json)
Hash identifier:          BOW1uZ3nTefoQiUjUCvOCe0VMZGCJig0jlTGAVbylPM=
Subject key identifier:   48:37:9F:8E:B6:FE:86:5A:D5:D7:6A:7A:89:F9:A2:DE:7A:78:12:B5
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       52B0EAB502773DDD37F93FA2DDCA2E1FE011C17E
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a343030303a3a2f33342d3334203d3e20323633333338.roa
Signing time:             Mon 21 Oct 2024 13:03:54 +0000
ROA not before:           Mon 21 Oct 2024 12:58:54 +0000
ROA not after:            Mon 20 Oct 2025 13:03:54 +0000
asID:                     263338
IP address blocks:        2804:1494:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b0:ea:b5:02:77:3d:dd:37:f9:3f:a2:dd:ca:2e:1f:e0:11:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 21 12:58:54 2024 GMT
            Not After : Oct 20 13:03:54 2025 GMT
        Subject: CN=48379F8EB6FE865AD5D76A7A89F9A2DE7A7812B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:37:a8:d5:48:9e:17:1a:08:69:7e:8d:c9:
                    24:5c:14:2c:de:71:6e:91:3a:29:32:70:9b:57:f3:
                    8b:e9:6e:fc:ae:79:56:7f:3a:07:bc:28:39:8b:a2:
                    6f:76:ad:97:38:09:ba:7e:06:6a:54:1a:38:f2:e5:
                    c8:cb:1a:15:78:19:07:3e:b0:10:3f:7b:8e:ef:1e:
                    4a:8f:93:a6:60:60:1f:3f:c8:53:d2:59:43:5e:62:
                    e5:20:21:b9:8a:d6:b7:0c:52:dd:b6:a8:66:df:05:
                    6e:a0:1b:38:b3:f6:ce:b2:63:cd:be:7e:2c:35:29:
                    87:bd:17:52:e1:83:4e:72:bf:90:0c:81:96:95:24:
                    95:c8:9e:ae:5f:44:46:41:de:b3:b7:67:0b:3a:b1:
                    d9:d6:67:b1:ae:fc:66:18:af:8c:29:4a:8a:a2:00:
                    7c:d6:60:48:56:6a:51:47:d0:22:48:72:fe:db:46:
                    e0:34:99:78:4e:79:2b:6a:0d:32:ee:01:d4:7a:56:
                    2f:60:26:76:b1:c4:8d:b8:09:c1:8f:e6:d7:18:f2:
                    9b:bc:21:39:a1:ba:02:70:a8:2f:00:a0:08:56:88:
                    0b:ce:a7:cc:d2:f1:b7:75:c0:98:1a:07:5d:0d:1b:
                    92:c9:b9:5e:05:fa:a9:ec:54:39:38:09:bf:08:d8:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:37:9F:8E:B6:FE:86:5A:D5:D7:6A:7A:89:F9:A2:DE:7A:78:12:B5
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a343030303a3a2f33342d3334203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:94:ba:a3:8d:18:10:9e:83:7f:59:f2:f6:a9:ae:b3:da:0f:
         60:67:7d:13:66:dc:5d:6a:8a:4b:e4:35:8f:ac:7e:f3:1d:b6:
         00:84:94:64:18:ac:01:30:34:8c:17:a9:88:04:46:99:4d:0a:
         e0:82:4f:c1:04:dc:29:25:93:0f:48:90:73:bb:0e:68:f8:7b:
         a8:08:b5:b8:92:e0:42:24:0e:f1:14:31:71:7d:4f:48:cf:e9:
         71:61:8d:e2:c4:d8:75:80:31:1b:c2:90:ba:88:1e:20:25:0f:
         dc:63:2a:ad:cd:d2:ea:2e:a5:a2:2c:72:f4:9e:55:15:a8:9f:
         72:8c:15:f0:09:9a:64:9f:11:64:96:b5:f8:68:f8:e6:ab:e5:
         64:b5:aa:5d:2a:68:8f:0c:88:ab:6f:20:66:4b:63:70:a0:d8:
         33:21:df:bb:c9:d8:41:e7:3b:d4:cc:0f:a6:76:59:ff:c6:d8:
         7a:d7:0e:46:1e:e8:b4:07:cb:7d:e5:80:d9:f3:fb:8d:16:99:
         4c:71:62:8f:92:cd:09:97:98:6b:33:31:0b:13:c3:cd:6d:43:
         c9:a8:c2:32:ae:5f:0b:fd:19:e4:a2:de:01:a8:05:8c:5c:95:
         61:2c:df:d8:26:82:0f:e6:da:3b:5f:de:14:8f:7e:b3:2d:5c:
         75:7d:bc:05
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUrDqtQJ3Pd03+T+i3couH+ARwX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDEwMjExMjU4NTRaFw0yNTEwMjAxMzAzNTRaMDMxMTAvBgNV
BAMTKDQ4Mzc5RjhFQjZGRTg2NUFENUQ3NkE3QTg5RjlBMkRFN0E3ODEyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfzeo1UieFxoIaX6NySRcFCze
cW6ROikycJtX84vpbvyueVZ/Oge8KDmLom92rZc4Cbp+BmpUGjjy5cjLGhV4GQc+
sBA/e47vHkqPk6ZgYB8/yFPSWUNeYuUgIbmK1rcMUt22qGbfBW6gGziz9s6yY82+
fiw1KYe9F1Lhg05yv5AMgZaVJJXInq5fREZB3rO3Zws6sdnWZ7Gu/GYYr4wpSoqi
AHzWYEhWalFH0CJIcv7bRuA0mXhOeStqDTLuAdR6Vi9gJnaxxI24CcGP5tcY8pu8
ITmhugJwqC8AoAhWiAvOp8zS8bd1wJgaB10NG5LJuV4F+qnsVDk4Cb8I2OIxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSDefjrb+hlrV12p6ifmi3np4ErUwHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzIzODMwMzQzYTMxMzQzOTM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMzMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEFJRAMA0GCSqGSIb3DQEBCwUA
A4IBAQADlLqjjRgQnoN/WfL2qa6z2g9gZ30TZtxdaopL5DWPrH7zHbYAhJRkGKwB
MDSMF6mIBEaZTQrggk/BBNwpJZMPSJBzuw5o+HuoCLW4kuBCJA7xFDFxfU9Iz+lx
YY3ixNh1gDEbwpC6iB4gJQ/cYyqtzdLqLqWiLHL0nlUVqJ9yjBXwCZpknxFklrX4
aPjmq+VktapdKmiPDIirbyBmS2NwoNgzId+7ydhB5zvUzA+mdln/xth61w5GHui0
B8t95YDZ8/uNFplMcWKPks0Jl5hrMzELE8PNbUPJqMIyrl8L/Rnkot4BqAWMXJVh
LN/YJoIP5to7X94Uj36zLVx1fbwF
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org