Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6463303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6463303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          sg8K7+66fNNMgeYHMu+q9Fq0QPVt3cOPokh3ExiLiTI=
Subject key identifier:   51:4E:BF:88:53:27:94:0B:60:D1:71:68:5B:7F:09:98:1D:12:A2:89
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       40CD81CD233FC8B3CB10534E1BBB9F61AE2B0E70
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6463303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:23 +0000
ROA not before:           Thu 16 May 2024 11:33:23 +0000
ROA not after:            Thu 15 May 2025 11:38:23 +0000
asID:                     263338
IP address blocks:        2804:1494:dc0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cd:81:cd:23:3f:c8:b3:cb:10:53:4e:1b:bb:9f:61:ae:2b:0e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:23 2024 GMT
            Not After : May 15 11:38:23 2025 GMT
        Subject: CN=514EBF885327940B60D171685B7F09981D12A289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:7e:58:01:01:2b:71:31:28:00:dd:f8:ae:
                    6d:7a:8a:78:9d:bb:49:98:94:1d:54:84:20:3b:cc:
                    fa:d4:91:25:75:d8:75:ea:90:87:15:f4:1a:38:d4:
                    7b:bd:41:60:82:0f:5f:70:ab:96:d6:9c:c7:33:70:
                    3c:c7:c1:e2:2b:3f:f3:28:29:4e:7e:11:8a:b0:e8:
                    f6:d1:e0:d4:a6:df:ca:0c:ec:e4:eb:25:92:06:0f:
                    49:ae:c9:ac:0b:0a:10:27:c5:19:c3:66:3c:f3:7c:
                    f8:c0:b3:f7:6c:85:a4:14:3c:8f:73:3f:94:38:34:
                    b8:a2:a7:9d:18:32:b8:87:80:cc:ea:15:42:e0:59:
                    96:96:86:1b:05:e4:44:88:31:c5:e1:a9:34:c5:d1:
                    af:62:6f:ff:2c:7f:39:77:15:07:c3:e9:d8:9c:b3:
                    52:b4:8e:14:69:54:f4:db:75:2b:6c:6e:00:63:fd:
                    04:05:85:d0:5d:5c:7f:e8:f9:b8:b1:42:a4:f9:0d:
                    e4:4e:b4:9d:25:7a:c5:77:48:82:49:3d:bc:1f:c5:
                    1e:52:4c:df:67:a1:b1:86:41:68:60:9d:97:3a:50:
                    cf:a3:f4:de:92:a5:d5:d7:68:34:d4:a3:fc:12:96:
                    e8:f8:34:d2:97:c5:ae:28:43:7b:38:22:31:91:8e:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:BF:88:53:27:94:0B:60:D1:71:68:5B:7F:09:98:1D:12:A2:89
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6463303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:dc0::/45

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:18:15:6a:b6:84:d8:61:09:99:eb:cb:98:1b:99:86:2d:
         08:4a:90:58:2f:2d:e2:d9:82:0b:3f:f6:84:46:dd:d3:d4:b9:
         9c:05:77:03:a6:8e:a8:e7:7c:bd:a4:b8:55:54:31:ad:15:0a:
         32:bf:e8:7d:cf:d9:72:b8:c2:d7:9c:fc:82:5c:db:65:ab:55:
         65:ca:3a:80:bb:cf:a6:0c:e2:ca:1b:22:95:49:49:72:2f:cc:
         e3:08:01:96:e6:88:18:a1:92:40:50:78:41:3e:45:38:97:ea:
         50:d2:83:3f:d2:0c:0b:72:04:30:63:12:b9:90:fb:cf:e7:d6:
         cf:4f:09:bd:de:b8:41:7a:ac:30:de:87:49:b6:74:96:40:53:
         fc:82:ae:84:a5:7f:ce:c2:60:c4:ba:9b:1a:f0:81:ac:d9:23:
         92:6e:77:69:e0:4f:6c:32:ca:c3:54:e2:df:d3:30:67:0d:6b:
         e0:74:83:3b:09:f8:3a:46:ac:92:44:ac:dc:04:1a:00:24:4c:
         2a:f7:3e:a5:0e:d6:0e:38:3f:fc:00:68:cb:79:9b:70:12:e7:
         b9:d5:2c:02:00:d9:71:9a:8a:02:ce:d2:01:47:c0:73:78:78:
         04:80:b8:2e:ec:a3:16:97:1c:ce:d4:21:04:0c:5a:00:57:4f:
         19:06:4f:0a
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUQM2BzSM/yLPLEFNOG7ufYa4rDnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDA1MTYxMTMzMjNaFw0yNTA1MTUxMTM4MjNaMDMxMTAvBgNV
BAMTKDUxNEVCRjg4NTMyNzk0MEI2MEQxNzE2ODVCN0YwOTk4MUQxMkEyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdX5YAQErcTEoAN34rm16inid
u0mYlB1UhCA7zPrUkSV12HXqkIcV9Bo41Hu9QWCCD19wq5bWnMczcDzHweIrP/Mo
KU5+EYqw6PbR4NSm38oM7OTrJZIGD0muyawLChAnxRnDZjzzfPjAs/dshaQUPI9z
P5Q4NLiip50YMriHgMzqFULgWZaWhhsF5ESIMcXhqTTF0a9ib/8sfzl3FQfD6dic
s1K0jhRpVPTbdStsbgBj/QQFhdBdXH/o+bixQqT5DeROtJ0lesV3SIJJPbwfxR5S
TN9nobGGQWhgnZc6UM+j9N6SpdXXaDTUo/wSluj4NNKXxa4oQ3s4IjGRjp8ZAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUUU6/iFMnlAtg0XFoW38JmB0SookwHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzIzODMwMzQzYTMxMzQzOTM0M2E2NDYzMzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM2MzMzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBBSUDcAwDQYJKoZIhvcNAQELBQAD
ggEBAFhsGBVqtoTYYQmZ68uYG5mGLQhKkFgvLeLZggs/9oRG3dPUuZwFdwOmjqjn
fL2kuFVUMa0VCjK/6H3P2XK4wtec/IJc22WrVWXKOoC7z6YM4sobIpVJSXIvzOMI
AZbmiBihkkBQeEE+RTiX6lDSgz/SDAtyBDBjErmQ+8/n1s9PCb3euEF6rDDeh0m2
dJZAU/yCroSlf87CYMS6mxrwgazZI5Jud2ngT2wyysNU4t/TMGcNa+B0gzsJ+DpG
rJJErNwEGgAkTCr3PqUO1g44P/wAaMt5m3AS57nVLAIA2XGaigLO0gFHwHN4eASA
uC7soxaXHM7UIQQMWgBXTxkGTwo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org