Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa
File:                     323830343a323036343a3a2f33322d3438203d3e20323632343333.roa (raw, json)
Hash identifier:          Af0c6RIXxWG0nmR1BAu94mGHu5xe7mmmZIwxSB6YRAE=
Subject key identifier:   0B:22:9C:DA:0A:B6:4E:7C:6C:2F:E3:CB:5A:0F:4F:33:85:2C:DD:B5
Certificate issuer:       /CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Certificate serial:       1F99DD4E074D2CC6F34C1F92DA8D5B41B0E5B504
Authority key identifier: 44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa
Signing time:             Thu 04 Apr 2024 19:13:05 +0000
ROA not before:           Thu 04 Apr 2024 19:08:05 +0000
ROA not after:            Thu 03 Apr 2025 19:13:05 +0000
asID:                     262433
IP address blocks:        2804:2064::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
                          rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:99:dd:4e:07:4d:2c:c6:f3:4c:1f:92:da:8d:5b:41:b0:e5:b5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474057A30776C0D117A5958EDE5DB8636FA5342
        Validity
            Not Before: Apr  4 19:08:05 2024 GMT
            Not After : Apr  3 19:13:05 2025 GMT
        Subject: CN=0B229CDA0AB64E7C6C2FE3CB5A0F4F33852CDDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:39:a2:cc:0e:e4:86:e6:26:74:bc:f4:39:
                    c4:95:44:52:67:0c:66:fd:29:41:e6:41:2c:14:e2:
                    d5:63:75:e8:5c:2f:f9:0d:ae:92:88:59:60:99:24:
                    33:9f:8a:40:4a:0c:32:69:ee:ec:55:1b:ef:11:3f:
                    c5:57:78:a3:76:3a:a0:aa:78:bf:79:ae:d0:4b:e7:
                    60:ca:fd:a2:e3:14:2d:fa:ec:8f:ba:5d:f8:b3:de:
                    ae:91:aa:32:ea:b8:23:91:c4:b3:dc:c0:d4:12:a1:
                    e0:62:b5:f4:96:78:26:9c:14:ef:a5:88:67:c3:c0:
                    7c:23:07:5a:a9:88:d8:eb:51:82:9c:a1:fd:18:ff:
                    b9:3e:c8:6e:cf:ec:ef:b8:ea:53:2f:e2:c7:f6:75:
                    4d:c7:d5:91:fb:0d:bc:78:2c:14:97:83:eb:07:fc:
                    13:9b:38:a0:2b:c5:d1:f3:c1:dc:76:0b:9c:8a:1e:
                    a9:fc:35:ae:ac:e6:e3:1f:69:cf:00:20:bd:d0:3c:
                    33:a6:6f:72:f9:0b:d1:1c:f0:b7:81:6b:e8:b1:09:
                    41:67:23:4d:18:ba:1f:67:bc:1e:bc:97:f7:10:55:
                    14:c5:a2:8d:bf:f2:0d:6f:68:be:62:8a:78:59:92:
                    e1:bc:28:4e:ff:43:d8:2b:51:a2:ac:de:b5:74:8e:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:22:9C:DA:0A:B6:4E:7C:6C:2F:E3:CB:5A:0F:4F:33:85:2C:DD:B5
            X509v3 Authority Key Identifier:
                keyid:44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2064::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:72:09:d3:b7:81:c8:63:5b:97:66:9f:26:10:5f:bb:63:
         16:25:5d:e5:66:7b:08:01:a2:69:4a:e2:de:42:af:20:75:ab:
         f5:5a:1c:0e:fd:de:91:f4:0b:4a:14:6e:c1:76:1e:0d:7c:67:
         1b:bf:a9:0d:73:60:4d:cb:74:2d:f6:c0:37:75:c3:89:01:b8:
         8a:30:18:68:bd:ea:9b:c5:7d:69:85:69:ca:9f:72:8a:3f:77:
         d6:9b:bf:cf:e3:bf:7e:39:68:f8:a1:f8:b2:b8:4c:c2:df:ac:
         e7:18:53:b5:bc:21:6a:a8:8d:ec:08:5c:6a:f0:c0:58:9a:d5:
         5c:ea:8b:94:82:b2:92:a5:48:f2:54:7a:3d:8f:80:dc:3d:1a:
         6f:97:4b:89:c6:71:f8:2a:35:f9:1d:62:38:a5:04:0e:44:89:
         22:21:95:5a:00:a5:d7:ff:c1:05:be:eb:52:b4:38:99:1a:ea:
         3a:f9:c3:23:1f:f9:b1:73:5f:1d:99:ac:d1:fe:84:16:08:74:
         27:e1:9d:0d:35:23:68:ae:b8:f4:b9:40:83:4e:c1:e1:50:29:
         67:fa:05:35:54:b4:ce:cb:0b:89:60:52:bd:95:74:54:60:a4:
         1a:82:45:d1:97:07:8f:2c:d6:af:c5:7d:57:53:f0:5a:37:e6:
         36:be:d4:a0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH5ndTgdNLMbzTB+S2o1bQbDltQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NDA1N0EzMDc3NkMwRDExN0E1OTU4RURFNURCODYz
NkZBNTM0MjAeFw0yNDA0MDQxOTA4MDVaFw0yNTA0MDMxOTEzMDVaMDMxMTAvBgNV
BAMTKDBCMjI5Q0RBMEFCNjRFN0M2QzJGRTNDQjVBMEY0RjMzODUyQ0REQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRTmizA7khuYmdLz0OcSVRFJn
DGb9KUHmQSwU4tVjdehcL/kNrpKIWWCZJDOfikBKDDJp7uxVG+8RP8VXeKN2OqCq
eL95rtBL52DK/aLjFC367I+6Xfiz3q6RqjLquCORxLPcwNQSoeBitfSWeCacFO+l
iGfDwHwjB1qpiNjrUYKcof0Y/7k+yG7P7O+46lMv4sf2dU3H1ZH7Dbx4LBSXg+sH
/BObOKArxdHzwdx2C5yKHqn8Na6s5uMfac8AIL3QPDOmb3L5C9Ec8LeBa+ixCUFn
I00Yuh9nvB68l/cQVRTFoo2/8g1vaL5iinhZkuG8KE7/Q9grUaKs3rV0joMXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCyKc2gq2TnxsL+PLWg9PM4Us3bUwHwYDVR0j
BBgwFoAURHQFejB3bA0RellY7eXbhjb6U0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNIOW9tdzVVWEpDWEUxdG5ydFJXUzFoeTFGenUxZEZkdFRVQkcyUlVL
TGcvMS80NDc0MDU3QTMwNzc2QzBEMTE3QTU5NThFREU1REI4NjM2RkE1MzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NzQwNTdBMzA3NzZDMEQx
MTdBNTk1OEVERTVEQjg2MzZGQTUzNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjSDlvbXc1VVhKQ1hFMXRucnRSV1MxaHkxRnp1MWRGZHRUVUJHMlJVS0xnLzEv
MzIzODMwMzQzYTMyMzAzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzQzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQgZDANBgkqhkiG9w0BAQsFAAOCAQEAnmtyCdO3
gchjW5dmnyYQX7tjFiVd5WZ7CAGiaUri3kKvIHWr9VocDv3ekfQLShRuwXYeDXxn
G7+pDXNgTct0LfbAN3XDiQG4ijAYaL3qm8V9aYVpyp9yij931pu/z+O/fjlo+KH4
srhMwt+s5xhTtbwhaqiN7AhcavDAWJrVXOqLlIKykqVI8lR6PY+A3D0ab5dLicZx
+Co1+R1iOKUEDkSJIiGVWgCl1//BBb7rUrQ4mRrqOvnDIx/5sXNfHZms0f6EFgh0
J+GdDTUjaK649LlAg07B4VApZ/oFNVS0zssLiWBSvZV0VGCkGoJF0ZcHjyzWr8V9
V1PwWjfmNr7UoA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org