Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/323830343a326262303a666630303a3a2f34302d3430203d3e20323635313639.roa
File:                     323830343a326262303a666630303a3a2f34302d3430203d3e20323635313639.roa (raw, json)
Hash identifier:          pBU0OYDwNYrFafznzL0RggMHmiw7o4x9Ryb2ZNlNqhc=
Subject key identifier:   43:2F:1D:CC:F0:DD:72:96:BC:BA:0D:03:A3:0A:B5:B4:79:4B:67:EA
Certificate issuer:       /CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
Certificate serial:       1EE10DDD05356D437EB8FCA26AD20D0FF42CD44B
Authority key identifier: E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/323830343a326262303a666630303a3a2f34302d3430203d3e20323635313639.roa
Signing time:             Thu 04 Apr 2024 00:22:48 +0000
ROA not before:           Thu 04 Apr 2024 00:17:48 +0000
ROA not after:            Thu 03 Apr 2025 00:22:48 +0000
asID:                     265169
IP address blocks:        2804:2bb0:ff00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl
                          rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e1:0d:dd:05:35:6d:43:7e:b8:fc:a2:6a:d2:0d:0f:f4:2c:d4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
        Validity
            Not Before: Apr  4 00:17:48 2024 GMT
            Not After : Apr  3 00:22:48 2025 GMT
        Subject: CN=432F1DCCF0DD7296BCBA0D03A30AB5B4794B67EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:1d:02:11:25:87:1e:db:27:40:c9:e5:3e:
                    2d:36:7a:6c:71:92:a2:4e:1d:ca:ad:fb:5f:68:5c:
                    37:e4:cb:d7:a3:92:22:76:b0:fd:14:76:dc:60:1a:
                    3f:0d:13:c3:57:93:6b:a8:a7:2b:70:c5:69:cb:8c:
                    16:41:a8:89:bb:cd:fd:d9:55:24:45:a9:14:37:a2:
                    e6:55:fe:0d:56:1d:6f:4e:cc:1f:b0:a3:d9:82:e2:
                    e2:e4:85:1a:36:07:c8:4e:39:14:f5:34:f4:bf:06:
                    19:4d:c0:7b:95:3e:63:f0:98:6a:7c:20:bf:1d:63:
                    46:90:66:34:a2:d9:d2:5a:db:4c:11:d6:65:44:70:
                    b5:58:80:29:93:08:dd:f2:ee:6b:c3:80:2c:2f:c4:
                    05:e2:b1:1d:08:c8:39:7a:fa:f6:94:0c:e6:9b:68:
                    52:ce:fb:29:99:e3:c8:1b:05:80:b2:ab:e3:11:0c:
                    11:78:72:8c:99:75:0f:39:62:76:82:1b:2c:10:35:
                    f0:18:13:4e:2f:74:04:2b:4b:09:4a:12:6c:cd:7e:
                    59:83:a5:93:0e:c3:26:54:ce:bb:0c:8c:28:fa:3b:
                    fe:68:2f:50:84:f6:f8:5e:1f:94:e4:80:65:55:07:
                    f8:57:0c:be:e1:e4:23:ee:fe:8a:5e:82:f4:6b:78:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2F:1D:CC:F0:DD:72:96:BC:BA:0D:03:A3:0A:B5:B4:79:4B:67:EA
            X509v3 Authority Key Identifier:
                keyid:E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/323830343a326262303a666630303a3a2f34302d3430203d3e20323635313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bb0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:80:1d:46:c9:7f:a8:7f:a1:e5:ef:de:93:1f:e7:59:53:
         2d:e5:53:89:ca:37:af:bf:b7:ba:a7:9f:1f:99:97:75:52:1c:
         4a:41:0d:f6:e1:04:ca:79:53:c3:57:36:38:ed:07:27:7d:24:
         d1:85:c8:66:5f:0c:a7:2a:f5:06:4e:bf:bb:49:b5:1a:c0:f2:
         6a:fa:e0:63:bb:ab:21:c7:bb:7a:34:7a:ea:d2:78:4a:9e:2b:
         97:b7:91:63:1b:6b:5f:c1:05:7d:d8:af:83:da:25:5f:0b:a8:
         82:c6:18:9f:f7:72:12:0a:29:88:fe:88:c6:25:a1:12:a1:3f:
         ab:97:6f:c1:ec:43:e8:6f:bf:82:0d:6a:00:62:64:3e:6c:33:
         3a:48:f9:21:ac:ad:48:6c:b8:38:ff:96:2d:1f:5b:ce:7b:15:
         22:e2:46:9f:ee:3b:f5:fa:9b:84:8c:12:74:57:10:5a:21:8f:
         1e:f2:46:c0:ac:fe:f9:89:f3:da:49:a2:ce:ac:77:fd:db:c3:
         f1:e8:4b:dd:bd:3c:94:23:7e:0b:fc:50:0c:4b:e1:0d:8b:21:
         1a:08:81:9b:eb:41:72:63:d8:94:7d:57:a3:56:a3:b8:8a:2a:
         5e:4d:27:92:9e:a9:bb:14:37:60:d4:77:ae:06:1a:4b:9f:40:
         3c:32:43:b0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHuEN3QU1bUN+uPyiatIND/Qs1EswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzQTA0MUJFNEVDOUE3M0MzNDJDMTBFRUNCMjA3NTRC
NUJEMjQ4RDAeFw0yNDA0MDQwMDE3NDhaFw0yNTA0MDMwMDIyNDhaMDMxMTAvBgNV
BAMTKDQzMkYxRENDRjBERDcyOTZCQ0JBMEQwM0EzMEFCNUI0Nzk0QjY3RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ux0CESWHHtsnQMnlPi02emxx
kqJOHcqt+19oXDfky9ejkiJ2sP0UdtxgGj8NE8NXk2uopytwxWnLjBZBqIm7zf3Z
VSRFqRQ3ouZV/g1WHW9OzB+wo9mC4uLkhRo2B8hOORT1NPS/BhlNwHuVPmPwmGp8
IL8dY0aQZjSi2dJa20wR1mVEcLVYgCmTCN3y7mvDgCwvxAXisR0IyDl6+vaUDOab
aFLO+ymZ48gbBYCyq+MRDBF4coyZdQ85YnaCGywQNfAYE04vdAQrSwlKEmzNflmD
pZMOwyZUzrsMjCj6O/5oL1CE9vheH5TkgGVVB/hXDL7h5CPu/opegvRreEa7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQy8dzPDdcpa8ug0Dowq1tHlLZ+owHwYDVR0j
BBgwFoAU5joEG+TsmnPDQsEO7LIHVLW9JI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlh2Y3dUbUhZWEFjR0dtbjRaUFhVVkptNng5VlBBbWJwYlVBUmdqdkhK
UkgvMS9FNjNBMDQxQkU0RUM5QTczQzM0MkMxMEVFQ0IyMDc1NEI1QkQyNDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2M0EwNDFCRTRFQzlBNzND
MzQyQzEwRUVDQjIwNzU0QjVCRDI0OEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JYdmN3VG1IWVhBY0dHbW40WlBYVVZKbTZ4OVZQQW1icGJVQVJnanZISlJILzEv
MzIzODMwMzQzYTMyNjI2MjMwM2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTMxMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEK7D/MA0GCSqGSIb3DQEBCwUA
A4IBAQAaGoAdRsl/qH+h5e/ekx/nWVMt5VOJyjevv7e6p58fmZd1UhxKQQ324QTK
eVPDVzY47QcnfSTRhchmXwynKvUGTr+7SbUawPJq+uBju6shx7t6NHrq0nhKniuX
t5FjG2tfwQV92K+D2iVfC6iCxhif93ISCimI/ojGJaESoT+rl2/B7EPob7+CDWoA
YmQ+bDM6SPkhrK1IbLg4/5YtH1vOexUi4kaf7jv1+puEjBJ0VxBaIY8e8kbArP75
ifPaSaLOrHf928Px6EvdvTyUI34L/FAMS+ENiyEaCIGb60FyY9iUfVejVqO4iipe
TSeSnqm7FDdg1HeuBhpLn0A8MkOw
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org