Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a3a2f33322d313238203d3e20323637323837.roa
File:                     323830343a346232383a3a2f33322d313238203d3e20323637323837.roa (raw, json)
Hash identifier:          h+myaBof2ybwSg8/QbhahxDZHKYWOT7xfXNJ33nCUDo=
Subject key identifier:   E8:89:33:14:A3:69:D5:7D:B5:F4:41:47:D7:16:D1:C7:3E:FF:E7:B6
Certificate issuer:       /CN=698C63C0B116FDB7C67589592569AFB3F854EBAE
Certificate serial:       3854F2598325BAE7DFF62868E251D0D6ADF29B43
Authority key identifier: 69:8C:63:C0:B1:16:FD:B7:C6:75:89:59:25:69:AF:B3:F8:54:EB:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698C63C0B116FDB7C67589592569AFB3F854EBAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a3a2f33322d313238203d3e20323637323837.roa
Signing time:             Sat 11 May 2024 13:44:18 +0000
ROA not before:           Sat 11 May 2024 13:39:18 +0000
ROA not after:            Sat 10 May 2025 13:44:18 +0000
asID:                     267287
IP address blocks:        2804:4b28::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/698C63C0B116FDB7C67589592569AFB3F854EBAE.crl
                          rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/698C63C0B116FDB7C67589592569AFB3F854EBAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698C63C0B116FDB7C67589592569AFB3F854EBAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:54:f2:59:83:25:ba:e7:df:f6:28:68:e2:51:d0:d6:ad:f2:9b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698C63C0B116FDB7C67589592569AFB3F854EBAE
        Validity
            Not Before: May 11 13:39:18 2024 GMT
            Not After : May 10 13:44:18 2025 GMT
        Subject: CN=E8893314A369D57DB5F44147D716D1C73EFFE7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:b1:1a:97:58:54:99:08:05:cc:41:c2:2a:
                    b1:e1:99:8e:9b:88:c4:6a:ac:95:d1:82:3f:6d:ce:
                    24:d9:a7:64:65:47:20:56:ce:bc:33:ae:8b:27:97:
                    c3:51:63:4d:0f:b3:cb:44:1d:85:ab:6b:ab:d5:ed:
                    be:82:d8:2c:94:94:75:df:6d:23:dc:a8:ec:d7:9c:
                    6a:cd:f8:ae:24:dc:18:fd:ce:46:3a:0d:01:71:c9:
                    ae:79:1d:99:f7:78:d1:14:e9:ae:93:3a:de:3f:40:
                    cc:ed:9f:9e:c6:55:4f:dc:78:df:3d:c2:4e:93:f0:
                    83:f9:ea:3f:68:69:80:4b:c1:fb:76:3b:04:16:df:
                    86:31:58:c1:0e:ef:3d:f9:93:1a:20:77:53:3b:49:
                    6e:95:73:20:f4:75:83:27:55:7f:b0:f3:d3:83:23:
                    48:b3:71:43:db:44:3e:9d:83:44:a9:1c:63:41:0b:
                    28:cb:20:33:ac:16:25:7a:c4:53:5a:fb:83:a1:c7:
                    75:a0:54:a7:69:3b:c3:b1:ff:59:46:17:2d:d9:a0:
                    5c:fc:6d:dc:f8:3d:78:40:f1:96:69:33:97:f8:73:
                    a0:5a:f0:16:12:92:ad:34:fc:b7:d2:c5:64:da:71:
                    a1:1b:8d:b9:b3:91:9b:38:10:9f:b7:d9:f3:bb:22:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:89:33:14:A3:69:D5:7D:B5:F4:41:47:D7:16:D1:C7:3E:FF:E7:B6
            X509v3 Authority Key Identifier:
                keyid:69:8C:63:C0:B1:16:FD:B7:C6:75:89:59:25:69:AF:B3:F8:54:EB:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/698C63C0B116FDB7C67589592569AFB3F854EBAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698C63C0B116FDB7C67589592569AFB3F854EBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a3a2f33322d313238203d3e20323637323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:11:2c:fd:84:d5:58:66:9a:ff:f0:b4:50:c3:bb:4c:33:70:
         e7:a2:fa:58:69:97:27:85:61:2f:57:32:85:b5:ca:23:b3:45:
         10:2d:0f:01:3f:cb:f7:0d:5c:5b:d9:de:84:97:e9:66:5a:e4:
         57:8c:33:57:26:e9:1e:1d:73:1f:dc:77:c3:10:11:36:b8:6b:
         a9:dc:b5:e8:bc:78:43:bf:9a:eb:b7:0d:f7:1f:f7:93:03:cd:
         7e:95:b1:50:be:36:5b:30:f2:c7:e4:9c:2c:53:c0:da:c7:e9:
         25:f5:e5:c9:7d:9b:77:29:f8:ce:33:cc:6b:ab:11:38:c4:2b:
         0c:0d:d5:ff:db:01:77:de:5e:b3:33:93:be:b8:6b:e7:ea:90:
         fe:4e:c8:4e:f9:29:05:38:39:cd:c9:98:cf:e1:04:5f:de:2f:
         29:55:17:47:d3:54:15:3e:87:60:04:5e:67:86:6d:89:15:0b:
         4e:37:20:0c:78:5a:23:fd:e4:bf:f6:c4:c3:3a:30:98:04:6e:
         8c:00:79:4f:bc:05:87:1f:60:51:34:28:d2:1f:78:b8:67:24:
         12:0a:00:ab:95:d7:7a:03:4e:b8:f7:83:98:25:6d:96:63:9d:
         01:28:30:e5:9a:2e:14:ed:dc:c9:53:c5:ef:4e:5f:9b:7a:58:
         0e:00:c8:11
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOFTyWYMluuff9iho4lHQ1q3ym0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4QzYzQzBCMTE2RkRCN0M2NzU4OTU5MjU2OUFGQjNG
ODU0RUJBRTAeFw0yNDA1MTExMzM5MThaFw0yNTA1MTAxMzQ0MThaMDMxMTAvBgNV
BAMTKEU4ODkzMzE0QTM2OUQ1N0RCNUY0NDE0N0Q3MTZEMUM3M0VGRkU3QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6rEal1hUmQgFzEHCKrHhmY6b
iMRqrJXRgj9tziTZp2RlRyBWzrwzrosnl8NRY00Ps8tEHYWra6vV7b6C2CyUlHXf
bSPcqOzXnGrN+K4k3Bj9zkY6DQFxya55HZn3eNEU6a6TOt4/QMztn57GVU/ceN89
wk6T8IP56j9oaYBLwft2OwQW34YxWMEO7z35kxogd1M7SW6VcyD0dYMnVX+w89OD
I0izcUPbRD6dg0SpHGNBCyjLIDOsFiV6xFNa+4Ohx3WgVKdpO8Ox/1lGFy3ZoFz8
bdz4PXhA8ZZpM5f4c6Ba8BYSkq00/LfSxWTacaEbjbmzkZs4EJ+32fO7InMhAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU6IkzFKNp1X219EFH1xbRxz7/57YwHwYDVR0j
BBgwFoAUaYxjwLEW/bfGdYlZJWmvs/hU664wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk52U0d0U0ZCYzh1azhEbTRqR212NHpZMTVLUE5YU2Z0aG8yTFRXdmdG
eGIvMC82OThDNjNDMEIxMTZGREI3QzY3NTg5NTkyNTY5QUZCM0Y4NTRFQkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5OEM2M0MwQjExNkZEQjdD
Njc1ODk1OTI1NjlBRkIzRjg1NEVCQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOdlNHdFNGQmM4dWs4RG00akdtdjR6WTE1S1BOWFNmdGhvMkxUV3ZnRnhiLzAv
MzIzODMwMzQzYTM0NjIzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEsoMA0GCSqGSIb3DQEBCwUAA4IBAQAXESz9
hNVYZpr/8LRQw7tMM3DnovpYaZcnhWEvVzKFtcojs0UQLQ8BP8v3DVxb2d6El+lm
WuRXjDNXJukeHXMf3HfDEBE2uGup3LXovHhDv5rrtw33H/eTA81+lbFQvjZbMPLH
5JwsU8Dax+kl9eXJfZt3KfjOM8xrqxE4xCsMDdX/2wF33l6zM5O+uGvn6pD+TshO
+SkFODnNyZjP4QRf3i8pVRdH01QVPodgBF5nhm2JFQtONyAMeFoj/eS/9sTDOjCY
BG6MAHlPvAWHH2BRNCjSH3i4ZyQSCgCrldd6A06494OYJW2WY50BKDDlmi4U7dzJ
U8XvTl+belgOAMgR
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:07 2024 by rpki-client on console-ams.rpki-client.org