Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa
File:                     323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa (raw, json)
Hash identifier:          1A96RIbpE2/PzfZXH/pLlsRb2WvywreO7K1u4ef5qok=
Subject key identifier:   53:4D:A7:B1:3D:4E:5D:20:37:B0:6D:18:5C:46:FC:9A:CC:C0:1C:86
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       0503B14A84BBA7CFA02527946962BCB333B38377
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     267334
IP address blocks:        2804:4be0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:03:b1:4a:84:bb:a7:cf:a0:25:27:94:69:62:bc:b3:33:b3:83:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject: CN=534DA7B13D4E5D2037B06D185C46FC9ACCC01C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:f1:d6:87:63:0e:ea:f9:5b:33:ba:94:fb:
                    c2:b1:d8:c6:4f:ac:e5:73:46:24:a1:2e:bf:53:c8:
                    ad:07:a1:86:9a:39:e3:79:64:dc:04:38:9d:fc:cc:
                    6f:4a:33:71:82:99:e7:2c:90:b9:85:01:b5:93:ad:
                    70:0e:e2:09:db:37:3d:84:85:3a:37:33:ea:73:1a:
                    ce:47:17:0e:61:6a:76:d9:53:35:ab:fc:65:b3:b4:
                    f5:9b:9b:4f:db:7b:51:0e:22:49:e9:ab:b4:fe:5a:
                    6c:41:b1:a8:09:56:67:01:c9:0b:0c:15:ca:68:9d:
                    4d:65:5b:17:1d:e5:19:2c:d2:99:54:6f:ee:cd:f5:
                    29:a0:c3:16:e6:9a:b6:7b:4c:78:b3:35:b0:78:17:
                    fc:97:0f:92:0f:67:a9:64:47:c7:94:ed:38:5a:c4:
                    5f:6d:af:c3:51:e3:41:b7:94:1b:a1:dd:99:b3:c5:
                    63:5d:6b:41:eb:71:10:15:d2:e6:2c:78:ab:0b:f2:
                    9a:39:19:ed:af:19:e7:3e:c8:0d:0d:a7:9c:7f:00:
                    97:23:5f:38:86:0c:84:00:bf:f2:d7:6d:69:ce:48:
                    08:08:27:8e:57:dd:52:46:b7:05:36:ba:dd:ab:6c:
                    c2:9d:14:c1:29:b1:16:b2:e3:77:ce:18:ce:07:5c:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4D:A7:B1:3D:4E:5D:20:37:B0:6D:18:5C:46:FC:9A:CC:C0:1C:86
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:68:4a:f5:f4:97:24:dd:e6:a4:6c:55:ca:ba:34:b7:59:
         fb:21:a0:d1:9a:d5:4d:56:92:ce:74:64:b5:37:64:27:b1:b1:
         64:bd:a2:c4:0d:d1:92:ed:b0:b7:b4:f8:68:cc:bc:5a:b0:b4:
         68:e9:58:07:c6:77:92:45:93:4e:2e:81:50:5d:a2:34:85:07:
         4a:b9:cb:7f:d4:35:10:61:79:5b:08:ea:c9:c1:44:61:da:73:
         02:81:34:cd:e1:2d:4b:ea:d8:0f:2f:cd:12:0d:ed:a1:bb:9e:
         6e:c1:bd:7b:09:c3:9d:e8:a5:b2:8b:44:3b:6c:af:38:56:29:
         a6:f4:ea:cd:e8:8a:80:88:d1:6c:ff:26:5e:fa:b7:41:34:fb:
         16:37:31:44:a6:e3:b4:6e:6e:3e:98:46:48:39:43:e9:98:08:
         13:fb:81:a1:79:d6:8c:24:95:34:52:0b:68:d9:c3:9a:e4:0b:
         84:c5:88:83:c4:d6:6a:06:2b:aa:eb:d7:91:f9:68:84:18:43:
         5d:40:90:ab:a3:d7:17:a3:2c:0b:48:b3:89:56:b2:e3:08:f6:
         62:3f:ab:63:b4:1d:b8:f6:92:8d:fa:28:98:2f:c6:2e:8d:f8:
         d9:e6:e8:c3:b5:f0:a7:56:a7:83:92:15:6d:2c:53:ac:78:2c:
         69:3d:e2:01
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBQOxSoS7p8+gJSeUaWK8szOzg3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGQzg2Mzc2NzJGNjk5NUYxNzFBMjYxRDUxNjc0QTUw
RkU0NTRBNjAeFw0yNDA0MDMxODI1MTRaFw0yNTA0MDIxODMwMTRaMDMxMTAvBgNV
BAMTKDUzNERBN0IxM0Q0RTVEMjAzN0IwNkQxODVDNDZGQzlBQ0NDMDFDODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhiPHWh2MO6vlbM7qU+8Kx2MZP
rOVzRiShLr9TyK0HoYaaOeN5ZNwEOJ38zG9KM3GCmecskLmFAbWTrXAO4gnbNz2E
hTo3M+pzGs5HFw5hanbZUzWr/GWztPWbm0/be1EOIknpq7T+WmxBsagJVmcByQsM
FcponU1lWxcd5Rks0plUb+7N9SmgwxbmmrZ7THizNbB4F/yXD5IPZ6lkR8eU7Tha
xF9tr8NR40G3lBuh3ZmzxWNda0HrcRAV0uYseKsL8po5Ge2vGec+yA0Np5x/AJcj
XziGDIQAv/LXbWnOSAgIJ45X3VJGtwU2ut2rbMKdFMEpsRay43fOGM4HXOYvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUU02nsT1OXSA3sG0YXEb8mszAHIYwHwYDVR0j
BBgwFoAU0vyGN2cvaZXxcaJh1RZ0pQ/kVKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZNd3k0TnF3ZWo0VWNVOEVMM2tuWjJreXRGbzE5Z0Y2eVBUMVJFaTJN
b3YvMS9EMkZDODYzNzY3MkY2OTk1RjE3MUEyNjFENTE2NzRBNTBGRTQ1NEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyRkM4NjM3NjcyRjY5OTVG
MTcxQTI2MUQ1MTY3NEE1MEZFNDU0QTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmTXd5NE5xd2VqNFVjVThFTDNrbloya3l0Rm8xOWdGNnlQVDFSRWkyTW92LzEv
MzIzODMwMzQzYTM0NjI2NTMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigES+DAMA0GCSqGSIb3DQEBCwUA
A4IBAQCix2hK9fSXJN3mpGxVyro0t1n7IaDRmtVNVpLOdGS1N2QnsbFkvaLEDdGS
7bC3tPhozLxasLRo6VgHxneSRZNOLoFQXaI0hQdKuct/1DUQYXlbCOrJwURh2nMC
gTTN4S1L6tgPL80SDe2hu55uwb17CcOd6KWyi0Q7bK84Vimm9OrN6IqAiNFs/yZe
+rdBNPsWNzFEpuO0bm4+mEZIOUPpmAgT+4GhedaMJJU0Ugto2cOa5AuExYiDxNZq
Biuq69eR+WiEGENdQJCro9cXoywLSLOJVrLjCPZiP6tjtB249pKN+iiYL8YujfjZ
5ujDtfCnVqeDkhVtLFOseCxpPeIB
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org