Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/323830343a343932633a3a2f33322d3430203d3e20323637313638.roa
File:                     323830343a343932633a3a2f33322d3430203d3e20323637313638.roa (raw, json)
Hash identifier:          ZQXJEgwGMhVJEUX46zfkn82/hPYHjwTCBGhoKzKzDFA=
Subject key identifier:   69:DA:E9:17:8A:C4:EC:A4:E4:83:AC:36:D5:03:1B:16:C6:A1:CF:5F
Certificate issuer:       /CN=E4AF52A93147A03E56F1324181051B26FD71F0D6
Certificate serial:       23738FF6DA37C4071BE9385B1C2F453806F30EAA
Authority key identifier: E4:AF:52:A9:31:47:A0:3E:56:F1:32:41:81:05:1B:26:FD:71:F0:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/323830343a343932633a3a2f33322d3430203d3e20323637313638.roa
Signing time:             Thu 04 Apr 2024 01:40:07 +0000
ROA not before:           Thu 04 Apr 2024 01:35:07 +0000
ROA not after:            Thu 03 Apr 2025 01:40:07 +0000
asID:                     267168
IP address blocks:        2804:492c::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.crl
                          rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:73:8f:f6:da:37:c4:07:1b:e9:38:5b:1c:2f:45:38:06:f3:0e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4AF52A93147A03E56F1324181051B26FD71F0D6
        Validity
            Not Before: Apr  4 01:35:07 2024 GMT
            Not After : Apr  3 01:40:07 2025 GMT
        Subject: CN=69DAE9178AC4ECA4E483AC36D5031B16C6A1CF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:43:2d:42:39:12:a7:66:65:28:a0:7f:b0:
                    20:94:01:ed:54:7e:63:cb:47:aa:81:0e:d4:26:eb:
                    d9:35:19:62:72:25:b8:7f:c9:51:5f:9d:26:24:df:
                    63:2e:6d:c6:d3:ac:50:9b:3a:f4:ed:12:8f:8c:51:
                    8d:a5:1f:0f:1b:70:1d:6f:80:d2:c5:f8:24:8b:42:
                    d1:d3:b5:36:bc:2a:f5:21:6d:61:87:29:21:f2:c7:
                    69:52:7a:21:65:b8:9b:e8:1f:72:a7:62:fb:06:0d:
                    9b:34:25:3a:1d:1a:9f:ba:1f:7b:70:0e:63:bf:fd:
                    f1:26:b8:28:f0:93:91:2f:17:cc:2a:d6:17:fd:fd:
                    cc:97:bd:f9:44:49:77:94:b3:44:45:e7:ff:56:09:
                    c6:53:6c:7b:87:34:08:2e:cb:8e:43:66:eb:36:31:
                    30:2b:11:2f:a8:ab:e5:53:71:6f:d2:91:8c:a4:c5:
                    59:02:df:e9:30:d4:12:83:70:62:bc:55:ec:b6:50:
                    32:cd:07:53:bf:e9:6f:34:e9:e1:97:9c:74:8c:eb:
                    ad:b6:4b:1e:7b:78:fa:41:ce:de:d2:ab:d3:2d:59:
                    63:48:e9:be:64:cc:3a:d5:dc:29:17:d1:10:87:cd:
                    02:63:05:ec:70:86:07:d7:78:01:2c:ee:61:a5:54:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:E9:17:8A:C4:EC:A4:E4:83:AC:36:D5:03:1B:16:C6:A1:CF:5F
            X509v3 Authority Key Identifier:
                keyid:E4:AF:52:A9:31:47:A0:3E:56:F1:32:41:81:05:1B:26:FD:71:F0:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/323830343a343932633a3a2f33322d3430203d3e20323637313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:492c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:69:41:7b:36:d2:ef:30:d5:f3:a1:09:c3:5b:f3:fd:de:5c:
         23:c4:89:21:1a:87:d5:0f:bd:b1:58:58:3a:e2:2d:11:4e:21:
         4a:f6:ba:ec:70:d9:40:ea:a9:26:bb:de:0e:2a:66:4d:e5:f5:
         78:2e:38:49:94:d6:87:97:6f:22:5d:11:25:96:a7:12:98:ae:
         ff:f4:1d:9d:6b:97:bf:4a:14:e5:c0:6b:99:6e:7d:8b:b6:6a:
         ae:a3:da:65:ad:c5:4d:a9:9e:8f:0f:c2:e2:c0:4b:d6:8f:4b:
         87:fa:58:99:e2:fb:63:7e:c4:97:61:0e:c9:15:fa:37:91:21:
         81:09:3f:6b:83:95:3d:cf:72:68:69:ee:fe:5d:10:4c:0d:ca:
         8b:7b:2e:af:f5:66:88:81:43:1e:10:55:38:0b:0e:49:0b:00:
         58:da:fa:f8:52:17:9f:ce:f7:ee:11:ad:66:c6:92:38:8c:ac:
         ad:dc:65:a6:83:5a:53:34:c7:11:4f:72:ab:71:50:c0:ca:50:
         7d:de:dd:b4:93:85:c9:5b:3f:09:81:30:5d:d9:f4:e4:06:43:
         f5:58:dc:8d:f0:ff:2a:d7:9b:9d:55:2a:51:1a:e8:53:2d:f8:
         16:6a:32:4f:be:aa:97:83:4f:3b:c4:9b:10:28:0b:59:1e:23:
         69:50:1d:84
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUI3OP9to3xAcb6ThbHC9FOAbzDqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRBRjUyQTkzMTQ3QTAzRTU2RjEzMjQxODEwNTFCMjZG
RDcxRjBENjAeFw0yNDA0MDQwMTM1MDdaFw0yNTA0MDMwMTQwMDdaMDMxMTAvBgNV
BAMTKDY5REFFOTE3OEFDNEVDQTRFNDgzQUMzNkQ1MDMxQjE2QzZBMUNGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPEMtQjkSp2ZlKKB/sCCUAe1U
fmPLR6qBDtQm69k1GWJyJbh/yVFfnSYk32MubcbTrFCbOvTtEo+MUY2lHw8bcB1v
gNLF+CSLQtHTtTa8KvUhbWGHKSHyx2lSeiFluJvoH3KnYvsGDZs0JTodGp+6H3tw
DmO//fEmuCjwk5EvF8wq1hf9/cyXvflESXeUs0RF5/9WCcZTbHuHNAguy45DZus2
MTArES+oq+VTcW/SkYykxVkC3+kw1BKDcGK8Vey2UDLNB1O/6W806eGXnHSM6622
Sx57ePpBzt7Sq9MtWWNI6b5kzDrV3CkX0RCHzQJjBexwhgfXeAEs7mGlVDVDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUadrpF4rE7KTkg6w21QMbFsahz18wHwYDVR0j
BBgwFoAU5K9SqTFHoD5W8TJBgQUbJv1x8NYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjg2TEJqb1doVkJWajdrTHRHcXJFS0JSQUdwZXE4UWlvZ3JHcjFLR0dF
RnIvMS9FNEFGNTJBOTMxNDdBMDNFNTZGMTMyNDE4MTA1MUIyNkZENzFGMEQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QUY1MkE5MzE0N0EwM0U1
NkYxMzI0MTgxMDUxQjI2RkQ3MUYwRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4NkxCam9XaFZCVmo3a0x0R3FyRUtCUkFHcGVxOFFpb2dyR3IxS0dHRUZyLzEv
MzIzODMwMzQzYTM0MzkzMjYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM3
MzEzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARJLDANBgkqhkiG9w0BAQsFAAOCAQEAaGlBezbS
7zDV86EJw1vz/d5cI8SJIRqH1Q+9sVhYOuItEU4hSva67HDZQOqpJrveDipmTeX1
eC44SZTWh5dvIl0RJZanEpiu//QdnWuXv0oU5cBrmW59i7ZqrqPaZa3FTamejw/C
4sBL1o9Lh/pYmeL7Y37El2EOyRX6N5EhgQk/a4OVPc9yaGnu/l0QTA3Ki3sur/Vm
iIFDHhBVOAsOSQsAWNr6+FIXn8737hGtZsaSOIysrdxlpoNaUzTHEU9yq3FQwMpQ
fd7dtJOFyVs/CYEwXdn05AZD9VjcjfD/KtebnVUqURroUy34FmoyT76ql4NPO8Sb
ECgLWR4jaVAdhA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:51 2024 by rpki-client on console-ams.rpki-client.org