Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa
File:                     323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa (raw, json)
Hash identifier:          kSEIGpETq+G+RxmdPiKLw2qYkYxJXhKoRwNnVz/6ciw=
Subject key identifier:   A4:EF:1A:B6:F6:4F:5A:59:48:6F:E3:99:E6:69:DD:8A:78:E8:42:65
Certificate issuer:       /CN=10B292084D7C28A59A2C5B196129450D72331CB5
Certificate serial:       7B63FF0ED548DFDF413A4672F1EB4C097491FA94
Authority key identifier: 10:B2:92:08:4D:7C:28:A5:9A:2C:5B:19:61:29:45:0D:72:33:1C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa
Signing time:             Thu 04 Apr 2024 03:29:26 +0000
ROA not before:           Thu 04 Apr 2024 03:24:26 +0000
ROA not after:            Thu 03 Apr 2025 03:29:26 +0000
asID:                     270239
IP address blocks:        2804:68f4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.crl
                          rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:63:ff:0e:d5:48:df:df:41:3a:46:72:f1:eb:4c:09:74:91:fa:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B292084D7C28A59A2C5B196129450D72331CB5
        Validity
            Not Before: Apr  4 03:24:26 2024 GMT
            Not After : Apr  3 03:29:26 2025 GMT
        Subject: CN=A4EF1AB6F64F5A59486FE399E669DD8A78E84265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:2c:10:9b:c1:f6:69:17:a0:c9:ec:ba:0f:
                    16:75:d9:cc:d2:d6:c4:cd:b9:a3:30:81:25:30:12:
                    90:7c:9e:a5:98:a5:08:5d:9a:6a:94:c6:30:83:e0:
                    6b:f9:69:31:3f:24:fb:f1:5c:ff:e9:84:b4:02:9d:
                    e8:ae:8d:a8:45:6f:fe:a3:5f:23:4a:cd:f4:cb:9d:
                    ce:61:e5:97:af:02:a0:b2:e4:cc:02:45:ae:9a:0d:
                    80:6c:32:79:0d:5d:90:cd:c7:d2:8d:bf:7a:04:60:
                    b5:0d:94:b5:26:0f:21:94:30:59:cb:5f:06:bc:2f:
                    b5:64:73:73:c5:1a:f5:6a:4e:30:39:b8:c5:c7:77:
                    9a:75:16:ee:ab:63:4a:e2:e0:32:d9:0b:e6:30:de:
                    18:84:f9:1a:ef:0f:59:ac:39:2c:86:23:77:b8:98:
                    7c:30:5a:28:27:2f:ce:45:20:d7:e2:c9:d0:f3:b1:
                    b8:25:d7:21:9d:f7:c8:88:04:19:85:56:c3:83:cd:
                    7d:6c:ec:bf:67:49:2a:44:d5:cc:b0:31:86:c3:d4:
                    0d:3c:d4:58:98:03:85:a7:12:7a:95:ba:9f:0f:49:
                    ba:60:eb:72:6d:2a:25:c0:60:e0:17:55:10:75:37:
                    61:45:50:c0:7d:74:b0:80:b3:e2:30:10:0d:b0:75:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EF:1A:B6:F6:4F:5A:59:48:6F:E3:99:E6:69:DD:8A:78:E8:42:65
            X509v3 Authority Key Identifier:
                keyid:10:B2:92:08:4D:7C:28:A5:9A:2C:5B:19:61:29:45:0D:72:33:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:73:71:36:05:ad:6f:e3:56:d6:4f:6e:f8:73:5d:44:ce:2c:
         c0:62:30:37:a6:b9:ef:da:80:57:dd:e0:72:3c:9b:66:55:dc:
         c2:4d:4f:f7:74:81:e7:f3:b2:9e:22:e3:a2:26:be:79:71:a7:
         3f:7f:df:2b:21:60:3e:8b:72:69:d1:7a:09:78:d7:02:c4:27:
         f5:00:87:eb:0e:95:63:3b:32:2f:fd:5e:6f:72:54:37:e4:58:
         94:f2:f8:4f:e8:ee:e6:a2:e3:2f:ad:84:5f:1d:c0:03:8d:df:
         2e:cf:dd:68:ab:16:75:a6:99:b5:0d:41:48:06:86:22:0d:50:
         69:13:d4:45:7a:d4:d9:a6:a2:9b:58:a1:60:95:05:e9:47:b3:
         31:03:92:9c:95:10:e2:8e:46:44:15:04:a3:28:49:bc:d9:a5:
         48:5c:3b:50:f8:cd:97:5f:93:b0:60:d9:67:0c:71:f9:97:42:
         bf:6b:35:71:8b:0c:1c:ff:74:69:e7:69:88:45:1d:7b:5b:9b:
         1e:46:87:e2:40:d0:31:d6:ae:92:b1:80:26:a1:c5:eb:d5:6d:
         b0:bb:9d:2b:7e:ba:5e:89:8d:ca:43:74:58:38:8b:1e:06:00:
         b2:a1:f8:8e:78:43:1b:ea:80:25:7b:b1:e1:31:1e:22:88:25:
         03:1c:d5:b5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe2P/DtVI399BOkZy8etMCXSR+pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCMjkyMDg0RDdDMjhBNTlBMkM1QjE5NjEyOTQ1MEQ3
MjMzMUNCNTAeFw0yNDA0MDQwMzI0MjZaFw0yNTA0MDMwMzI5MjZaMDMxMTAvBgNV
BAMTKEE0RUYxQUI2RjY0RjVBNTk0ODZGRTM5OUU2NjlERDhBNzhFODQyNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0iwQm8H2aRegyey6DxZ12czS
1sTNuaMwgSUwEpB8nqWYpQhdmmqUxjCD4Gv5aTE/JPvxXP/phLQCneiujahFb/6j
XyNKzfTLnc5h5ZevAqCy5MwCRa6aDYBsMnkNXZDNx9KNv3oEYLUNlLUmDyGUMFnL
Xwa8L7Vkc3PFGvVqTjA5uMXHd5p1Fu6rY0ri4DLZC+Yw3hiE+RrvD1msOSyGI3e4
mHwwWignL85FINfiydDzsbgl1yGd98iIBBmFVsODzX1s7L9nSSpE1cywMYbD1A08
1FiYA4WnEnqVup8PSbpg63JtKiXAYOAXVRB1N2FFUMB9dLCAs+IwEA2wdU/JAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpO8atvZPWllIb+OZ5mndinjoQmUwHwYDVR0j
BBgwFoAUELKSCE18KKWaLFsZYSlFDXIzHLUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlViQVZNQzdlUXlFTHFUU3B2YzlCUVlTaFh5d1ZReUV1VkZGZEI1QXdZ
d2IvMS8xMEIyOTIwODREN0MyOEE1OUEyQzVCMTk2MTI5NDUwRDcyMzMxQ0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQjI5MjA4NEQ3QzI4QTU5
QTJDNUIxOTYxMjk0NTBENzIzMzFDQjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JVYkFWTUM3ZVF5RUxxVFNwdmM5QlFZU2hYeXdWUXlFdVZGRmRCNUF3WXdiLzEv
MzIzODMwMzQzYTM2Mzg2NjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDMyMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEaPRAMA0GCSqGSIb3DQEBCwUA
A4IBAQCUc3E2Ba1v41bWT274c11EzizAYjA3prnv2oBX3eByPJtmVdzCTU/3dIHn
87KeIuOiJr55cac/f98rIWA+i3Jp0XoJeNcCxCf1AIfrDpVjOzIv/V5vclQ35FiU
8vhP6O7mouMvrYRfHcADjd8uz91oqxZ1ppm1DUFIBoYiDVBpE9RFetTZpqKbWKFg
lQXpR7MxA5KclRDijkZEFQSjKEm82aVIXDtQ+M2XX5OwYNlnDHH5l0K/azVxiwwc
/3Rp52mIRR17W5seRofiQNAx1q6SsYAmocXr1W2wu50rfrpeiY3KQ3RYOIseBgCy
ofiOeEMb6oAle7HhMR4iiCUDHNW1
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org