Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa
File:                     323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (raw, json)
Hash identifier:          eM5OkW3DIWDFUblgZpKcxrWxDOoL4A2b0MPylNG6ANM=
Subject key identifier:   8B:D4:A3:52:89:05:77:3F:58:45:D8:C9:72:9A:FC:EA:96:D3:6A:08
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       58B8D4A947FF3809742127701B6882A212F128F1
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     267334
IP address blocks:        2804:4be0::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b8:d4:a9:47:ff:38:09:74:21:27:70:1b:68:82:a2:12:f1:28:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject: CN=8BD4A3528905773F5845D8C9729AFCEA96D36A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1f:2f:9f:c8:0e:b2:08:9e:04:aa:8c:bb:ae:
                    9f:da:16:af:dc:a8:36:b6:68:73:6a:5f:d3:bb:58:
                    f5:b3:70:76:5a:30:0c:5c:42:44:ac:53:e6:b6:4e:
                    62:8d:f9:47:18:16:b6:d0:08:6b:f2:7a:0c:0e:5f:
                    c0:68:ee:00:b3:f7:e0:19:2b:b3:ef:36:e0:05:dc:
                    ab:b6:a2:05:9e:d0:46:a5:f0:12:86:38:9f:6c:19:
                    08:35:03:70:97:6d:8d:5c:fb:cd:59:45:d5:26:ba:
                    38:4c:e4:1e:58:5f:98:a7:ca:d4:c5:b5:67:43:6e:
                    c6:ca:2e:a3:aa:79:3c:f8:c9:f5:46:17:18:16:cf:
                    c9:6f:58:6e:1d:f4:4e:2d:e3:53:05:73:78:41:19:
                    82:17:39:85:17:d6:36:21:6e:08:58:03:a6:75:25:
                    72:ea:6f:96:a8:97:02:37:c4:31:04:2a:d0:d3:9f:
                    20:09:c6:af:ed:d4:29:36:81:bb:0d:9f:e2:2a:28:
                    9a:c4:e9:1b:0b:bd:1f:61:3f:3f:b1:47:63:5f:e8:
                    a9:4d:48:53:e6:c3:4f:6e:4c:d0:bf:09:1b:87:41:
                    c5:f5:d4:74:7e:15:1c:1e:18:f7:cf:9c:59:8e:51:
                    3a:d4:ea:ac:f2:32:84:cc:91:c3:40:fb:9e:7a:e6:
                    86:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D4:A3:52:89:05:77:3F:58:45:D8:C9:72:9A:FC:EA:96:D3:6A:08
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:a2:36:14:fb:d1:f6:b2:e9:5f:7c:ae:f9:50:ac:2c:7d:6c:
         81:3a:e8:a9:b2:ec:82:67:01:07:d6:37:56:6f:32:06:63:ce:
         93:73:96:e0:69:4b:85:4b:6d:6b:2b:4c:2d:ec:40:9a:05:77:
         d7:0d:96:8c:96:31:51:49:b1:c7:a7:4c:09:d4:66:65:9a:7a:
         45:82:21:c2:59:18:40:88:53:8d:fb:25:31:58:d8:90:db:a8:
         3a:79:fa:4c:9f:33:c9:32:85:59:e8:02:bf:f3:ee:f2:46:89:
         bb:35:44:94:17:26:8a:50:20:d3:66:8a:7b:08:75:d1:22:2e:
         85:ac:a7:0b:31:e3:ca:07:f8:f5:8d:13:f5:5b:0d:ee:97:e9:
         3a:e8:b0:35:c5:a8:74:ed:38:bd:0f:2b:87:3f:7e:b2:7f:fb:
         19:cd:a7:61:e1:7c:8e:98:c9:d9:a8:82:a6:bb:c5:11:55:c8:
         f3:88:e9:a3:83:01:c2:25:b3:d2:63:0f:c1:3c:33:f6:cf:e8:
         ff:67:ec:6f:88:86:aa:2d:86:3d:2c:b6:1a:3a:dc:17:dc:d6:
         dd:cf:71:a4:34:00:e8:4e:fc:7a:91:9b:13:70:0d:ef:cf:26:
         85:59:48:19:d2:3b:9b:75:a4:3d:67:de:b5:70:13:a9:c6:25:
         22:ab:01:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWLjUqUf/OAl0ISdwG2iCohLxKPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGQzg2Mzc2NzJGNjk5NUYxNzFBMjYxRDUxNjc0QTUw
RkU0NTRBNjAeFw0yNDA0MDMxODI1MTZaFw0yNTA0MDIxODMwMTZaMDMxMTAvBgNV
BAMTKDhCRDRBMzUyODkwNTc3M0Y1ODQ1RDhDOTcyOUFGQ0VBOTZEMzZBMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkHy+fyA6yCJ4Eqoy7rp/aFq/c
qDa2aHNqX9O7WPWzcHZaMAxcQkSsU+a2TmKN+UcYFrbQCGvyegwOX8Bo7gCz9+AZ
K7PvNuAF3Ku2ogWe0Eal8BKGOJ9sGQg1A3CXbY1c+81ZRdUmujhM5B5YX5inytTF
tWdDbsbKLqOqeTz4yfVGFxgWz8lvWG4d9E4t41MFc3hBGYIXOYUX1jYhbghYA6Z1
JXLqb5aolwI3xDEEKtDTnyAJxq/t1Ck2gbsNn+IqKJrE6RsLvR9hPz+xR2Nf6KlN
SFPmw09uTNC/CRuHQcX11HR+FRweGPfPnFmOUTrU6qzyMoTMkcNA+5565oYtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi9SjUokFdz9YRdjJcpr86pbTaggwHwYDVR0j
BBgwFoAU0vyGN2cvaZXxcaJh1RZ0pQ/kVKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZNd3k0TnF3ZWo0VWNVOEVMM2tuWjJreXRGbzE5Z0Y2eVBUMVJFaTJN
b3YvMS9EMkZDODYzNzY3MkY2OTk1RjE3MUEyNjFENTE2NzRBNTBGRTQ1NEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyRkM4NjM3NjcyRjY5OTVG
MTcxQTI2MUQ1MTY3NEE1MEZFNDU0QTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmTXd5NE5xd2VqNFVjVThFTDNrbloya3l0Rm8xOWdGNnlQVDFSRWkyTW92LzEv
MzIzODMwMzQzYTM0NjI2NTMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM3
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARL4AAwDQYJKoZIhvcNAQELBQADggEBAB2iNhT7
0fay6V98rvlQrCx9bIE66Kmy7IJnAQfWN1ZvMgZjzpNzluBpS4VLbWsrTC3sQJoF
d9cNloyWMVFJscenTAnUZmWaekWCIcJZGECIU437JTFY2JDbqDp5+kyfM8kyhVno
Ar/z7vJGibs1RJQXJopQINNminsIddEiLoWspwsx48oH+PWNE/VbDe6X6TrosDXF
qHTtOL0PK4c/frJ/+xnNp2HhfI6Yydmogqa7xRFVyPOI6aODAcIls9JjD8E8M/bP
6P9n7G+Ihqothj0stho63Bfc1t3PcaQ0AOhO/HqRmxNwDe/PJoVZSBnSO5t1pD1n
3rVwE6nGJSKrATg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org