Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/323830343a363866343a3a2f33322d3332203d3e20323730323339.roa
File:                     323830343a363866343a3a2f33322d3332203d3e20323730323339.roa (raw, json)
Hash identifier:          DhUi/+xi6PQwf+a7mVqh7tbNgQ9MwExA6UWvBscD3NE=
Subject key identifier:   13:6A:11:70:57:2C:60:9F:EE:1A:CF:8C:ED:22:53:98:66:41:43:75
Certificate issuer:       /CN=10B292084D7C28A59A2C5B196129450D72331CB5
Certificate serial:       6AE539C3D37A0035FB3383BBEDF433E2191194C1
Authority key identifier: 10:B2:92:08:4D:7C:28:A5:9A:2C:5B:19:61:29:45:0D:72:33:1C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/323830343a363866343a3a2f33322d3332203d3e20323730323339.roa
Signing time:             Thu 04 Apr 2024 03:29:25 +0000
ROA not before:           Thu 04 Apr 2024 03:24:25 +0000
ROA not after:            Thu 03 Apr 2025 03:29:25 +0000
asID:                     270239
IP address blocks:        2804:68f4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.crl
                          rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e5:39:c3:d3:7a:00:35:fb:33:83:bb:ed:f4:33:e2:19:11:94:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B292084D7C28A59A2C5B196129450D72331CB5
        Validity
            Not Before: Apr  4 03:24:25 2024 GMT
            Not After : Apr  3 03:29:25 2025 GMT
        Subject: CN=136A1170572C609FEE1ACF8CED22539866414375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:5e:26:0e:62:47:bd:85:1a:5b:ef:66:5c:
                    09:fc:b4:62:88:ff:e0:98:6f:aa:8e:36:26:d8:aa:
                    07:22:41:67:5e:07:dc:2c:77:40:5b:a0:f3:0b:93:
                    dd:5b:5c:74:85:88:6d:21:5b:16:12:0d:ce:6e:48:
                    2c:48:e1:8d:f8:55:23:b4:ae:4f:33:18:6b:dd:35:
                    64:a8:ca:ad:3d:77:de:fb:24:80:76:e4:c4:99:8c:
                    6e:4a:b9:20:d8:2f:0c:6f:41:5b:3a:93:f3:05:ae:
                    95:f9:32:49:50:2f:bc:92:6c:5a:64:29:59:81:f1:
                    2d:b8:57:ff:28:18:6c:95:43:5b:86:ac:ca:2b:ca:
                    c2:10:70:7b:af:92:9a:6c:5c:04:39:5d:9a:ae:62:
                    4d:d0:60:13:e0:6c:0e:5c:a0:bd:21:42:42:0c:60:
                    7d:18:1e:a1:9d:96:81:86:b8:85:8f:d0:46:bf:c7:
                    ab:f4:f9:9d:2c:24:79:84:c0:ef:f7:e2:26:4d:9a:
                    ec:e9:21:22:8e:93:ba:d4:92:f0:de:e9:33:fe:2b:
                    e6:84:28:33:7b:89:3e:ed:d0:91:b8:06:4d:9f:d6:
                    2c:30:8d:ed:b1:3c:4b:fe:37:4f:c7:cd:22:f4:a7:
                    c3:bc:e1:eb:d9:36:86:d7:c1:9c:1e:ca:1b:80:c0:
                    b6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6A:11:70:57:2C:60:9F:EE:1A:CF:8C:ED:22:53:98:66:41:43:75
            X509v3 Authority Key Identifier:
                keyid:10:B2:92:08:4D:7C:28:A5:9A:2C:5B:19:61:29:45:0D:72:33:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/323830343a363866343a3a2f33322d3332203d3e20323730323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:33:93:1b:1b:c7:6c:e7:f8:55:4b:8d:60:74:99:02:2d:
         bc:94:29:fc:12:2f:1a:3a:90:9f:75:d6:7e:ac:5b:ad:43:87:
         02:a5:0e:92:58:f4:12:26:e5:77:3c:b9:12:14:31:3e:ef:6f:
         b5:82:cb:f3:48:50:01:c6:0b:1b:4e:22:99:d6:fb:42:5a:a0:
         a6:fc:68:1d:05:12:b9:8d:99:c7:d9:67:d1:9c:27:2b:e5:e1:
         d4:0a:6f:c0:e0:da:60:f2:b2:22:61:26:10:af:72:bb:07:4b:
         46:07:3c:a8:6b:c4:e9:80:94:01:4a:b2:50:ab:f0:36:16:d9:
         29:61:7a:fd:b4:f6:45:35:4f:6e:c9:ac:77:1b:4a:cd:97:b9:
         1a:b5:fc:1c:27:e5:7f:48:a3:96:a9:39:59:90:16:d2:47:7a:
         9f:a7:a3:59:60:b2:a3:00:b5:47:01:93:d2:b1:f4:4f:08:ec:
         9f:fa:da:af:04:5e:d7:bb:4f:6a:4d:8c:9e:86:02:3f:09:56:
         f6:e0:4e:47:a4:f2:6d:7d:e7:0d:6d:93:5b:b6:41:1b:19:53:
         ed:67:33:21:37:8f:bb:1a:db:0f:b8:cb:e9:04:03:13:32:98:
         32:53:3a:a6:ae:36:fd:bc:f0:6d:48:2a:f4:3c:80:55:41:d0:
         09:df:2f:54
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUauU5w9N6ADX7M4O77fQz4hkRlMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCMjkyMDg0RDdDMjhBNTlBMkM1QjE5NjEyOTQ1MEQ3
MjMzMUNCNTAeFw0yNDA0MDQwMzI0MjVaFw0yNTA0MDMwMzI5MjVaMDMxMTAvBgNV
BAMTKDEzNkExMTcwNTcyQzYwOUZFRTFBQ0Y4Q0VEMjI1Mzk4NjY0MTQzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkHF4mDmJHvYUaW+9mXAn8tGKI
/+CYb6qONibYqgciQWdeB9wsd0BboPMLk91bXHSFiG0hWxYSDc5uSCxI4Y34VSO0
rk8zGGvdNWSoyq09d977JIB25MSZjG5KuSDYLwxvQVs6k/MFrpX5MklQL7ySbFpk
KVmB8S24V/8oGGyVQ1uGrMorysIQcHuvkppsXAQ5XZquYk3QYBPgbA5coL0hQkIM
YH0YHqGdloGGuIWP0Ea/x6v0+Z0sJHmEwO/34iZNmuzpISKOk7rUkvDe6TP+K+aE
KDN7iT7t0JG4Bk2f1iwwje2xPEv+N0/HzSL0p8O84evZNobXwZweyhuAwLbLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUE2oRcFcsYJ/uGs+M7SJTmGZBQ3UwHwYDVR0j
BBgwFoAUELKSCE18KKWaLFsZYSlFDXIzHLUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlViQVZNQzdlUXlFTHFUU3B2YzlCUVlTaFh5d1ZReUV1VkZGZEI1QXdZ
d2IvMS8xMEIyOTIwODREN0MyOEE1OUEyQzVCMTk2MTI5NDUwRDcyMzMxQ0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQjI5MjA4NEQ3QzI4QTU5
QTJDNUIxOTYxMjk0NTBENzIzMzFDQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JVYkFWTUM3ZVF5RUxxVFNwdmM5QlFZU2hYeXdWUXlFdVZGRmRCNUF3WXdiLzEv
MzIzODMwMzQzYTM2Mzg2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARo9DANBgkqhkiG9w0BAQsFAAOCAQEAscczkxsb
x2zn+FVLjWB0mQItvJQp/BIvGjqQn3XWfqxbrUOHAqUOklj0Eibldzy5EhQxPu9v
tYLL80hQAcYLG04imdb7QlqgpvxoHQUSuY2Zx9ln0ZwnK+Xh1ApvwODaYPKyImEm
EK9yuwdLRgc8qGvE6YCUAUqyUKvwNhbZKWF6/bT2RTVPbsmsdxtKzZe5GrX8HCfl
f0ijlqk5WZAW0kd6n6ejWWCyowC1RwGT0rH0Twjsn/rarwRe17tPak2MnoYCPwlW
9uBOR6TybX3nDW2TW7ZBGxlT7WczITePuxrbD7jL6QQDEzKYMlM6pq42/bzwbUgq
9DyAVUHQCd8vVA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org