Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
File:                     323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (raw, json)
Hash identifier:          0Og/iy6kveiMI5ikAfz288HWEN16FRDq2M6wftpX1Tc=
Subject key identifier:   68:46:67:BB:4F:26:49:E2:C0:4B:4B:02:B3:D4:DB:0A:C3:7A:11:61
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       5C48320C2E621B8188CB6FDA04BC25C4F57BF674
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
Signing time:             Wed 03 Apr 2024 18:32:55 +0000
ROA not before:           Wed 03 Apr 2024 18:27:55 +0000
ROA not after:            Wed 02 Apr 2025 18:32:55 +0000
asID:                     270279
IP address blocks:        2804:6994::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:48:32:0c:2e:62:1b:81:88:cb:6f:da:04:bc:25:c4:f5:7b:f6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Apr  3 18:27:55 2024 GMT
            Not After : Apr  2 18:32:55 2025 GMT
        Subject: CN=684667BB4F2649E2C04B4B02B3D4DB0AC37A1161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:43:e7:08:a4:cf:c6:ea:95:4a:de:2c:c9:
                    b0:1b:27:58:a9:cc:3d:80:ee:ba:2b:db:5c:3a:22:
                    b0:c6:a3:19:cc:e0:e1:6c:56:8a:ac:10:17:16:10:
                    45:9e:df:c0:de:b1:17:43:80:ae:10:a1:25:16:16:
                    c8:a4:87:21:1c:79:d1:21:66:5c:ca:46:ff:75:3f:
                    da:75:43:41:a3:ba:c9:77:fb:24:02:b1:84:04:86:
                    88:f5:95:64:87:0d:82:06:a8:cf:fa:91:3b:00:e1:
                    cd:9e:5e:b1:5d:11:0b:8e:99:91:3a:31:32:69:86:
                    a0:02:5f:1a:8e:e2:74:d2:1e:0e:ec:2b:df:7c:85:
                    3c:69:8d:15:05:4f:82:fd:26:a6:cd:8e:c9:d9:47:
                    61:63:2a:7a:e2:eb:53:e3:f8:a1:c5:74:39:1a:c1:
                    c8:01:c3:b9:5b:02:6e:46:d1:73:88:a6:ea:47:b9:
                    1c:82:7a:45:73:0e:84:b2:49:98:06:54:33:fc:94:
                    62:0d:79:01:37:b5:17:d5:ab:a3:ae:d8:5c:fe:00:
                    1f:17:4b:15:e6:3b:48:5c:05:82:c8:2e:ac:2a:19:
                    a2:9b:5b:77:b7:5e:0b:fd:16:ca:2f:1e:c1:d7:a6:
                    ae:f9:4f:a0:f4:20:c3:f9:fa:4a:09:42:7d:97:63:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:46:67:BB:4F:26:49:E2:C0:4B:4B:02:B3:D4:DB:0A:C3:7A:11:61
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6994::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:41:af:74:5a:97:09:73:ab:dc:54:ee:1a:28:98:d3:e6:5c:
         dc:5c:ce:7d:66:a9:72:b0:7f:6f:ec:ba:44:bf:72:05:7e:02:
         87:fb:21:bf:10:88:9b:5e:84:f1:c4:be:2d:97:11:66:90:4a:
         8d:be:6b:ca:a4:4a:73:75:f6:5e:10:a3:35:d5:bf:3a:0a:e0:
         36:63:e5:b6:13:af:c6:ed:1c:16:bd:53:2f:95:2c:03:f8:a0:
         97:c3:9e:0d:1e:a7:93:76:ca:3f:bb:5e:b0:47:38:2e:2b:fc:
         68:dc:e4:fa:cf:e7:6d:8b:ff:56:6d:13:cc:7d:48:8e:15:14:
         bb:66:ce:c2:6b:b6:7c:31:f1:c4:79:a6:64:58:52:17:7c:26:
         db:a8:51:46:29:1f:6d:92:93:a3:11:c5:e7:8e:7b:de:60:b4:
         17:b5:73:65:54:bf:35:b8:4c:ce:fc:6d:d9:73:c5:fa:a2:30:
         4b:b1:01:d4:57:81:be:97:49:5b:72:2b:f9:d4:d0:88:78:8a:
         87:97:db:45:f5:ef:32:ef:d0:1d:52:b6:7f:32:6e:b1:19:3c:
         33:a7:1f:97:a3:d7:a4:3a:a8:30:6b:07:db:16:28:25:b1:d0:
         93:83:15:73:20:1c:e4:de:02:8b:ae:a2:b6:35:97:06:96:ef:
         39:b7:73:fa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXEgyDC5iG4GIy2/aBLwlxPV79nQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U0MDg2QzUzQTBFMUExOUFFNUFBMDBBOTg3NEFCQkQ3
ODU2M0E5NjAeFw0yNDA0MDMxODI3NTVaFw0yNTA0MDIxODMyNTVaMDMxMTAvBgNV
BAMTKDY4NDY2N0JCNEYyNjQ5RTJDMDRCNEIwMkIzRDREQjBBQzM3QTExNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfEPnCKTPxuqVSt4sybAbJ1ip
zD2A7ror21w6IrDGoxnM4OFsVoqsEBcWEEWe38DesRdDgK4QoSUWFsikhyEcedEh
ZlzKRv91P9p1Q0Gjusl3+yQCsYQEhoj1lWSHDYIGqM/6kTsA4c2eXrFdEQuOmZE6
MTJphqACXxqO4nTSHg7sK998hTxpjRUFT4L9JqbNjsnZR2FjKnri61Pj+KHFdDka
wcgBw7lbAm5G0XOIpupHuRyCekVzDoSySZgGVDP8lGINeQE3tRfVq6Ou2Fz+AB8X
SxXmO0hcBYLILqwqGaKbW3e3Xgv9FsovHsHXpq75T6D0IMP5+koJQn2XY6flAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUaEZnu08mSeLAS0sCs9TbCsN6EWEwHwYDVR0j
BBgwFoAUzkCGxToOGhmuWqAKmHSrvXhWOpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkt4ZVVXaVlLb3ZCQlZBVjU5Q2NRQXVDWVFaNHN6ZXFBRGNkM2hwUmZM
Q1IvMS9DRTQwODZDNTNBMEUxQTE5QUU1QUEwMEE5ODc0QUJCRDc4NTYzQTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDA4NkM1M0EwRTFBMTlB
RTVBQTAwQTk4NzRBQkJENzg1NjNBOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLeGVVV2lZS292QkJWQVY1OUNjUUF1Q1lRWjRzemVxQURjZDNocFJmTENSLzEv
MzIzODMwMzQzYTM2MzkzOTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzIzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARplDANBgkqhkiG9w0BAQsFAAOCAQEAOEGvdFqX
CXOr3FTuGiiY0+Zc3FzOfWapcrB/b+y6RL9yBX4Ch/shvxCIm16E8cS+LZcRZpBK
jb5ryqRKc3X2XhCjNdW/OgrgNmPlthOvxu0cFr1TL5UsA/igl8OeDR6nk3bKP7te
sEc4Liv8aNzk+s/nbYv/Vm0TzH1IjhUUu2bOwmu2fDHxxHmmZFhSF3wm26hRRikf
bZKToxHF54573mC0F7VzZVS/NbhMzvxt2XPF+qIwS7EB1FeBvpdJW3Ir+dTQiHiK
h5fbRfXvMu/QHVK2fzJusRk8M6cfl6PXpDqoMGsH2xYoJbHQk4MVcyAc5N4Ci66i
tjWXBpbvObdz+g==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:51 2024 by rpki-client on console-fra.rpki-client.org