Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/323830343a343136343a3a2f33322d313238203d3e20323637343330.roa
File:                     323830343a343136343a3a2f33322d313238203d3e20323637343330.roa (raw, json)
Hash identifier:          GOeatHBXoNPWYj7oi8r1kbVV04IlJ4dkMChBVB3LsxA=
Subject key identifier:   E7:C4:2D:97:D5:DA:49:49:39:A6:8A:13:A2:75:08:9A:50:F2:A8:C3
Certificate issuer:       /CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
Certificate serial:       3854D80395CE09EE4AC196599038EF5580ACDDA9
Authority key identifier: 83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/323830343a343136343a3a2f33322d313238203d3e20323637343330.roa
Signing time:             Thu 23 May 2024 09:48:03 +0000
ROA not before:           Thu 23 May 2024 09:43:03 +0000
ROA not after:            Thu 22 May 2025 09:48:03 +0000
asID:                     267430
IP address blocks:        2804:4164::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl
                          rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:54:d8:03:95:ce:09:ee:4a:c1:96:59:90:38:ef:55:80:ac:dd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
        Validity
            Not Before: May 23 09:43:03 2024 GMT
            Not After : May 22 09:48:03 2025 GMT
        Subject: CN=E7C42D97D5DA494939A68A13A275089A50F2A8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:4e:ed:40:b0:c3:d2:6b:3c:5c:84:38:31:
                    49:21:d8:91:f2:0d:86:51:7d:34:91:3d:67:50:f9:
                    31:3e:3f:c7:d3:39:02:3e:ff:1a:00:9b:27:1e:36:
                    da:60:73:9c:37:8d:35:1a:cb:65:da:03:b0:65:eb:
                    5a:3d:6c:91:95:04:6f:48:ca:85:cf:47:76:25:e4:
                    c5:a4:3d:c9:ad:f3:1e:86:10:8d:7c:11:29:94:90:
                    0f:df:03:6b:2c:04:87:fe:e3:8a:01:16:c6:2b:fa:
                    ea:93:56:96:6a:80:dc:34:76:11:9d:3f:63:4b:c6:
                    8a:11:d9:3d:85:2a:74:af:0f:94:d2:22:b9:35:2f:
                    8f:ff:d2:23:d2:c3:29:94:7d:10:16:73:8d:34:88:
                    d6:1c:15:fb:a0:e3:d0:7d:6b:f4:36:05:b4:52:11:
                    74:f8:ff:f2:7c:33:3e:cd:d0:d6:21:37:45:38:dd:
                    3f:bd:4b:07:37:92:b8:59:14:da:dd:ee:60:de:f5:
                    9f:a0:c5:57:e1:21:0b:7e:94:0b:22:74:db:38:16:
                    c5:01:1e:c8:82:24:cb:22:df:0e:f5:e9:a5:df:fa:
                    29:28:85:32:7b:9d:5e:a8:2c:20:d5:d7:40:24:e1:
                    e3:27:00:07:3f:42:60:e1:8f:aa:ed:c3:47:33:50:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C4:2D:97:D5:DA:49:49:39:A6:8A:13:A2:75:08:9A:50:F2:A8:C3
            X509v3 Authority Key Identifier:
                keyid:83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/323830343a343136343a3a2f33322d313238203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4164::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:81:ca:c1:06:d6:ca:ac:c1:76:30:31:f1:65:15:0a:ee:2d:
         7a:e9:29:a1:ab:7b:67:50:04:7e:8f:3d:4d:05:4d:3f:16:32:
         4b:43:01:90:a2:5e:fb:04:5e:63:f5:55:0d:dd:7b:54:dc:97:
         83:2f:a1:ba:ab:b9:40:0a:91:23:dc:65:41:d3:e1:c7:85:85:
         fb:3a:22:9c:9f:e7:20:16:7c:d4:f5:53:0d:b2:8b:67:64:a1:
         a2:42:b5:19:c0:c0:dc:c7:c3:6d:05:36:3d:1c:36:ea:07:76:
         e7:58:65:8a:3a:46:3e:62:37:31:fb:15:97:02:39:ba:6e:2d:
         0d:06:e8:37:58:e1:af:85:5f:cd:4e:b4:8f:f5:7c:b7:41:c0:
         37:76:45:4b:34:7f:84:cf:ff:65:f6:8b:ff:f1:b8:05:d3:fa:
         ab:6e:ad:de:c8:a7:3a:ec:cf:a0:e1:8e:2c:e0:96:e0:d1:d5:
         c8:60:89:df:37:9b:15:76:9e:b0:27:66:11:27:e4:c2:5a:49:
         07:25:4c:e8:57:e8:7e:86:04:f2:6d:eb:c9:79:ca:46:49:a6:
         9c:a7:51:fa:4c:dd:33:96:a5:27:6a:f8:3e:78:3d:83:3d:f8:
         2d:15:d6:ab:a6:62:6b:54:74:6e:bf:3a:76:5b:35:e3:a4:32:
         05:f8:76:5b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOFTYA5XOCe5KwZZZkDjvVYCs3akwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNDOTBFMTVGQUQ4MjQ3Mzg2N0QzOEMwMzBEM0Y0MUUx
MTkyRjVBMjAeFw0yNDA1MjMwOTQzMDNaFw0yNTA1MjIwOTQ4MDNaMDMxMTAvBgNV
BAMTKEU3QzQyRDk3RDVEQTQ5NDkzOUE2OEExM0EyNzUwODlBNTBGMkE4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bU7tQLDD0ms8XIQ4MUkh2JHy
DYZRfTSRPWdQ+TE+P8fTOQI+/xoAmyceNtpgc5w3jTUay2XaA7Bl61o9bJGVBG9I
yoXPR3Yl5MWkPcmt8x6GEI18ESmUkA/fA2ssBIf+44oBFsYr+uqTVpZqgNw0dhGd
P2NLxooR2T2FKnSvD5TSIrk1L4//0iPSwymUfRAWc400iNYcFfug49B9a/Q2BbRS
EXT4//J8Mz7N0NYhN0U43T+9Swc3krhZFNrd7mDe9Z+gxVfhIQt+lAsidNs4FsUB
HsiCJMsi3w716aXf+ikohTJ7nV6oLCDV10Ak4eMnAAc/QmDhj6rtw0czUG7zAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU58Qtl9XaSUk5pooTonUImlDyqMMwHwYDVR0j
BBgwFoAUg8kOFfrYJHOGfTjAMNP0HhGS9aIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlBNTFFCYWVyaGpnMXE1SnVqdWJzWFhBWUZ5OWtYR1JMNU1VaTRDcWtU
Y2YvMi84M0M5MEUxNUZBRDgyNDczODY3RDM4QzAzMEQzRjQxRTExOTJGNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzQzkwRTE1RkFEODI0NzM4
NjdEMzhDMDMwRDNGNDFFMTE5MkY1QTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JQTUxRQmFlcmhqZzFxNUp1anVic1hYQVlGeTlrWEdSTDVNVWk0Q3FrVGNmLzIv
MzIzODMwMzQzYTM0MzEzNjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNDMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEFkMA0GCSqGSIb3DQEBCwUAA4IBAQAQgcrB
BtbKrMF2MDHxZRUK7i166Smhq3tnUAR+jz1NBU0/FjJLQwGQol77BF5j9VUN3XtU
3JeDL6G6q7lACpEj3GVB0+HHhYX7OiKcn+cgFnzU9VMNsotnZKGiQrUZwMDcx8Nt
BTY9HDbqB3bnWGWKOkY+Yjcx+xWXAjm6bi0NBug3WOGvhV/NTrSP9Xy3QcA3dkVL
NH+Ez/9l9ov/8bgF0/qrbq3eyKc67M+g4Y4s4Jbg0dXIYInfN5sVdp6wJ2YRJ+TC
WkkHJUzoV+h+hgTybevJecpGSaacp1H6TN0zlqUnavg+eD2DPfgtFdarpmJrVHRu
vzp2WzXjpDIF+HZb
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org