Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa
File:                     323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa (raw, json)
Hash identifier:          guf4iS5wCE0m+eT4RZu+Uci1U4Y9qIkoa03k98RpFM8=
Subject key identifier:   07:46:DE:F5:FA:89:8F:FF:0D:22:17:C9:FD:2C:B7:0B:9B:A0:5C:A4
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       33642F2B80787FC8092A592B888F34201536115A
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa
Signing time:             Sat 29 Jun 2024 15:31:28 +0000
ROA not before:           Sat 29 Jun 2024 15:26:28 +0000
ROA not after:            Sat 28 Jun 2025 15:31:28 +0000
asID:                     28572
IP address blocks:        2804:6e3c:4800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:64:2f:2b:80:78:7f:c8:09:2a:59:2b:88:8f:34:20:15:36:11:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Jun 29 15:26:28 2024 GMT
            Not After : Jun 28 15:31:28 2025 GMT
        Subject: CN=0746DEF5FA898FFF0D2217C9FD2CB70B9BA05CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:fa:27:58:90:02:91:69:78:a2:4d:e4:16:
                    4d:aa:d2:ef:bb:4b:13:16:8e:e6:bf:49:fb:a7:25:
                    0f:d1:8d:4f:d6:ca:94:06:11:6d:7a:fb:c0:85:c6:
                    9e:9b:31:dd:d7:03:1f:b7:e9:9b:3a:e1:ec:45:01:
                    7c:26:29:65:85:5b:52:0c:08:6c:db:05:12:1d:69:
                    65:67:d0:70:47:8c:87:a0:a0:17:24:c3:7c:21:ef:
                    76:ad:5b:6d:d2:d9:5a:01:0c:7a:b2:e1:b2:9e:53:
                    c3:dc:75:4a:7d:97:ad:b4:6e:7d:3d:60:0f:66:73:
                    dc:ca:24:c5:7d:84:3a:05:b9:d2:ff:e5:c6:2a:6f:
                    1f:33:7d:23:e9:4d:81:18:24:34:30:6b:e3:dd:78:
                    1f:37:65:01:08:5c:8e:9e:1e:e0:cc:0b:df:e3:0f:
                    a4:99:e6:39:1d:5d:6a:64:4e:97:5e:25:70:d8:02:
                    70:f2:53:fd:be:76:14:71:e4:c7:81:ad:2b:74:ac:
                    90:d0:8b:ed:2c:43:f1:3a:9a:67:cf:02:8a:e5:cb:
                    1c:9c:ef:00:a0:62:87:0a:bf:b0:41:f5:55:fc:8b:
                    46:53:3d:e1:31:dd:a9:df:2c:7e:ee:16:c0:82:8b:
                    03:05:1b:e4:dc:b1:6c:37:9c:d6:75:bd:a1:6e:c1:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:46:DE:F5:FA:89:8F:FF:0D:22:17:C9:FD:2C:B7:0B:9B:A0:5C:A4
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e3c:4800::/38

    Signature Algorithm: sha256WithRSAEncryption
         06:09:4b:6f:57:79:6d:cf:a7:ec:e0:22:2b:6a:24:87:75:ac:
         ff:70:a9:7f:aa:f3:81:0c:9b:1a:37:e4:68:70:c2:1b:1f:64:
         89:7c:da:f5:e4:b6:54:03:72:e9:92:6f:3c:f3:82:33:db:b0:
         ae:a4:a0:e7:75:4c:f6:f6:82:51:a7:a0:8a:bb:a9:9a:2f:04:
         61:49:e2:88:2b:63:19:ea:e5:30:a7:9d:68:9b:b4:c6:b2:31:
         c4:38:99:a2:da:8d:8a:35:c6:40:f3:cf:d8:76:80:de:f2:6e:
         0f:fd:3d:39:64:84:8e:7c:ee:c7:0a:02:bc:e2:fa:6a:f6:3b:
         40:e7:21:73:07:5b:4f:c4:ad:1b:66:56:75:39:ac:3d:74:77:
         70:a9:65:d2:5c:da:04:04:af:67:99:7c:c9:25:73:f9:7c:93:
         20:43:36:fe:ef:da:04:ed:09:cf:0c:9e:04:65:a1:3a:ea:80:
         2a:6b:72:54:2e:0b:28:b3:92:29:c0:76:e8:5d:b7:21:83:6a:
         c3:1d:7c:79:c8:e6:53:0c:66:b7:95:09:ce:41:73:05:99:a7:
         62:27:3e:a3:0d:0a:87:7c:28:e4:fc:6f:79:20:6d:ae:86:c4:
         5e:06:a4:db:c0:a2:2d:8d:0b:db:2e:e1:d1:17:fd:19:94:e1:
         59:b1:2f:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM2QvK4B4f8gJKlkriI80IBU2EVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlFQUUzOEQxNUY1ODk5RDM2MDlDNDExRUIxQTFDNkI0
MkRGQjAwOTAeFw0yNDA2MjkxNTI2MjhaFw0yNTA2MjgxNTMxMjhaMDMxMTAvBgNV
BAMTKDA3NDZERUY1RkE4OThGRkYwRDIyMTdDOUZEMkNCNzBCOUJBMDVDQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDx/onWJACkWl4ok3kFk2q0u+7
SxMWjua/SfunJQ/RjU/WypQGEW16+8CFxp6bMd3XAx+36Zs64exFAXwmKWWFW1IM
CGzbBRIdaWVn0HBHjIegoBckw3wh73atW23S2VoBDHqy4bKeU8PcdUp9l620bn09
YA9mc9zKJMV9hDoFudL/5cYqbx8zfSPpTYEYJDQwa+PdeB83ZQEIXI6eHuDMC9/j
D6SZ5jkdXWpkTpdeJXDYAnDyU/2+dhRx5MeBrSt0rJDQi+0sQ/E6mmfPAorlyxyc
7wCgYocKv7BB9VX8i0ZTPeEx3anfLH7uFsCCiwMFG+TcsWw3nNZ1vaFuwc8ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUB0be9fqJj/8NIhfJ/Sy3C5ugXKQwHwYDVR0j
BBgwFoAUGerjjRX1iZ02CcQR6xoca0LfsAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5abWZjelg4eExwVUxDQVhXQnhhamt3QkhESkprc0poSks0UG9hd3hB
U1EvMC8xOUVBRTM4RDE1RjU4OTlEMzYwOUM0MTFFQjFBMUM2QjQyREZCMDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RUFFMzhEMTVGNTg5OUQz
NjA5QzQxMUVCMUExQzZCNDJERkIwMDkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOWm1mY3pYOHhMcFVMQ0FYV0J4YWprd0JIREpKa3NKaEpLNFBvYXd4QVNRLzAv
MzIzODMwMzQzYTM2NjUzMzYzM2EzNDM4MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzgzNTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIoBG48SDANBgkqhkiG9w0BAQsFAAOC
AQEABglLb1d5bc+n7OAiK2okh3Ws/3Cpf6rzgQybGjfkaHDCGx9kiXza9eS2VANy
6ZJvPPOCM9uwrqSg53VM9vaCUaegirupmi8EYUniiCtjGerlMKedaJu0xrIxxDiZ
otqNijXGQPPP2HaA3vJuD/09OWSEjnzuxwoCvOL6avY7QOchcwdbT8StG2ZWdTms
PXR3cKll0lzaBASvZ5l8ySVz+XyTIEM2/u/aBO0JzwyeBGWhOuqAKmtyVC4LKLOS
KcB26F23IYNqwx18ecjmUwxmt5UJzkFzBZmnYic+ow0Kh3wo5PxveSBtrobEXgak
28CiLY0L2y7h0Rf9GZThWbEvkw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:52 2024 by rpki-client on console-ams.rpki-client.org