Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa
File:                     323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa (raw, json)
Hash identifier:          mYSTczhX1mKy3rC8l+Me6QQmjYZxrx7qRJ9t4z0jM58=
Subject key identifier:   08:67:6A:87:9B:EE:63:71:7B:48:8A:A3:66:63:3A:0C:CA:FD:B2:61
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       1DC6CBB24FC5CB67B4CC543BAA580D63BC2086E8
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:26 +0000
ROA not before:           Wed 02 Oct 2024 14:53:26 +0000
ROA not after:            Wed 01 Oct 2025 14:58:26 +0000
asID:                     264344
IP address blocks:        2804:2674:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c6:cb:b2:4f:c5:cb:67:b4:cc:54:3b:aa:58:0d:63:bc:20:86:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:26 2024 GMT
            Not After : Oct  1 14:58:26 2025 GMT
        Subject: CN=08676A879BEE63717B488AA366633A0CCAFDB261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:7c:33:e0:ff:30:c3:58:3a:8a:d8:ac:55:
                    d8:73:f9:db:62:02:f0:7c:a4:40:81:97:5a:34:31:
                    6f:59:cb:7a:98:51:aa:03:f1:d0:5f:48:2b:bf:06:
                    4c:23:5c:7f:87:08:dd:73:33:77:79:96:1d:54:20:
                    3d:17:ad:f5:16:ec:b6:c4:bf:9b:ba:bb:9a:63:94:
                    7d:8f:4f:5b:26:9c:11:ff:13:a2:ea:4a:19:6d:bd:
                    69:39:47:03:a6:c4:43:00:48:19:73:f7:f3:89:03:
                    4a:dd:1d:11:f0:8c:c6:22:44:f4:a7:9d:a8:33:d0:
                    a2:a3:56:ee:75:f6:b2:a2:01:f2:09:dc:fa:21:04:
                    7d:98:8c:ef:7f:d0:d8:af:f5:97:bf:b1:ff:e9:6a:
                    43:c5:d9:74:a7:bf:23:ae:ec:29:46:05:39:c9:1a:
                    4d:19:7b:ee:52:1e:f9:b8:40:4a:05:5f:fe:f4:ff:
                    ad:51:2e:58:79:3d:f7:99:c0:43:db:82:ef:4e:c5:
                    af:63:52:38:8d:3a:6f:ea:1e:c0:8b:07:b4:ef:4e:
                    03:7b:42:5c:80:ea:51:59:ae:ad:42:70:e0:f3:a7:
                    a0:83:e7:df:0b:50:6b:fd:db:1d:e5:c9:ed:96:26:
                    c3:f8:49:88:f9:e4:b5:9a:4a:8d:ba:41:d6:fe:34:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:67:6A:87:9B:EE:63:71:7B:48:8A:A3:66:63:3A:0C:CA:FD:B2:61
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:fe:a1:5e:84:02:e7:f3:d1:d3:c6:2c:1e:64:47:5e:62:26:
         d6:3c:6d:16:cd:29:a8:16:f1:b1:bb:c9:fa:35:93:84:63:4b:
         7d:6e:27:68:a9:4e:d8:5c:60:15:58:15:40:fc:d5:5a:11:b1:
         06:ab:ee:e0:57:96:41:2b:cc:06:cf:72:2d:cf:b8:cd:c2:23:
         19:a6:53:48:08:a3:a7:7d:ff:f4:0b:2e:7b:74:7a:08:75:6e:
         7d:b6:8b:38:ee:80:6d:3e:c4:c3:8c:38:e2:38:a7:dc:1c:a4:
         2f:6c:d9:df:41:60:32:3e:23:7c:4e:12:1d:62:99:2b:1f:7a:
         0d:c8:8c:9e:02:19:46:5a:88:23:0d:aa:d0:49:b4:40:5c:63:
         44:2f:6c:77:9d:70:fd:58:2f:f7:55:76:0d:7d:c3:f2:dd:d8:
         4a:4a:71:d8:bb:02:c2:ab:56:f2:89:aa:88:f7:51:56:a7:41:
         c5:09:dc:9e:c2:8e:39:a2:25:25:43:76:b3:b3:28:eb:25:3e:
         3f:36:42:6b:0f:6b:f8:04:3b:0c:cb:b4:e6:83:bc:7b:07:e8:
         94:ae:ac:8a:1d:a0:51:ce:43:d1:bc:c6:8c:9f:26:8e:ab:f6:
         0f:64:1d:83:be:aa:65:7b:2a:a0:60:18:9a:5f:52:92:33:f2:
         dd:b4:04:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHcbLsk/Fy2e0zFQ7qlgNY7wghugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzQ0U0QTgxNzk2Rjk0NDQ5NzQxMEI4MzJDNzY0RDJG
RUYyRTQzQTAeFw0yNDEwMDIxNDUzMjZaFw0yNTEwMDExNDU4MjZaMDMxMTAvBgNV
BAMTKDA4Njc2QTg3OUJFRTYzNzE3QjQ4OEFBMzY2NjMzQTBDQ0FGREIyNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sHwz4P8ww1g6itisVdhz+dti
AvB8pECBl1o0MW9Zy3qYUaoD8dBfSCu/BkwjXH+HCN1zM3d5lh1UID0XrfUW7LbE
v5u6u5pjlH2PT1smnBH/E6LqShltvWk5RwOmxEMASBlz9/OJA0rdHRHwjMYiRPSn
nagz0KKjVu519rKiAfIJ3PohBH2YjO9/0Niv9Ze/sf/pakPF2XSnvyOu7ClGBTnJ
Gk0Ze+5SHvm4QEoFX/70/61RLlh5PfeZwEPbgu9Oxa9jUjiNOm/qHsCLB7TvTgN7
QlyA6lFZrq1CcODzp6CD598LUGv92x3lye2WJsP4SYj55LWaSo26Qdb+NJh3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCGdqh5vuY3F7SIqjZmM6DMr9smEwHwYDVR0j
BBgwFoAUUTzkqBeW+URJdBC4Msdk0v7y5DowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC81MTNDRTRBODE3OTZGOTQ0NDk3NDEwQjgzMkM3NjREMkZFRjJFNDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxM0NFNEE4MTc5NkY5NDQ0
OTc0MTBCODMyQzc2NEQyRkVGMkU0M0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJnSQMA0GCSqGSIb3DQEBCwUA
A4IBAQA1/qFehALn89HTxiweZEdeYibWPG0WzSmoFvGxu8n6NZOEY0t9bidoqU7Y
XGAVWBVA/NVaEbEGq+7gV5ZBK8wGz3Itz7jNwiMZplNICKOnff/0Cy57dHoIdW59
tos47oBtPsTDjDjiOKfcHKQvbNnfQWAyPiN8ThIdYpkrH3oNyIyeAhlGWogjDarQ
SbRAXGNEL2x3nXD9WC/3VXYNfcPy3dhKSnHYuwLCq1byiaqI91FWp0HFCdyewo45
oiUlQ3azsyjrJT4/NkJrD2v4BDsMy7Tmg7x7B+iUrqyKHaBRzkPRvMaMnyaOq/YP
ZB2DvqpleyqgYBiaX1KSM/LdtAQ/
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org