Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa (raw, json)
Hash identifier:          JoIrK7AAj/rS9LrLGZJbUjwQ+O0xPszgJHAO2WRuSCQ=
Subject key identifier:   B1:18:F8:3B:F4:39:29:33:65:C9:39:84:4A:00:FE:EB:36:3E:E5:A7
Certificate issuer:       /CN=B82D4FBED9458B4F700D74E565347A95A08877D7
Certificate serial:       4E2CC9D6CAEDC227359F4B9B67BE8007CA9E2E2D
Authority key identifier: B8:2D:4F:BE:D9:45:8B:4F:70:0D:74:E5:65:34:7A:95:A0:88:77:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
Signing time:             Mon 08 Apr 2024 16:36:27 +0000
ROA not before:           Mon 08 Apr 2024 16:31:27 +0000
ROA not after:            Mon 07 Apr 2025 16:36:27 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/B82D4FBED9458B4F700D74E565347A95A08877D7.crl
                          rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/B82D4FBED9458B4F700D74E565347A95A08877D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2c:c9:d6:ca:ed:c2:27:35:9f:4b:9b:67:be:80:07:ca:9e:2e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B82D4FBED9458B4F700D74E565347A95A08877D7
        Validity
            Not Before: Apr  8 16:31:27 2024 GMT
            Not After : Apr  7 16:36:27 2025 GMT
        Subject: CN=B118F83BF439293365C939844A00FEEB363EE5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:8e:c7:c5:1a:d6:86:84:9c:44:b6:27:5d:
                    28:fe:e4:bf:d4:bb:ea:b8:41:69:4d:38:a5:46:65:
                    37:5a:e3:99:37:8b:4c:47:21:09:6c:b3:a3:f4:fe:
                    f1:bb:9b:d3:88:8c:d4:2d:d0:90:96:16:d0:a8:19:
                    d1:ee:5e:68:26:7b:1a:e3:5a:e5:b9:1f:f4:a4:48:
                    f7:a0:48:20:d7:ec:62:62:4f:d7:17:b7:b0:c5:14:
                    5d:c8:f8:1e:4d:19:6f:61:78:18:7b:30:6d:3f:45:
                    28:68:31:67:b8:e3:79:68:85:32:dd:49:bf:1a:19:
                    94:67:0e:6c:74:10:13:a9:7e:3c:82:d1:61:79:29:
                    d6:95:60:59:11:2d:e1:16:ac:3a:3a:e3:6f:3b:14:
                    58:f5:96:b3:b7:7c:3a:5b:b2:ee:4f:d9:fd:b2:36:
                    bd:b0:a6:e8:01:7d:53:98:b4:18:bc:5e:e0:1f:9d:
                    5b:26:d3:ae:59:cc:40:9a:8e:dd:75:e1:75:52:1d:
                    c6:7f:86:28:33:2e:0f:0a:32:83:2d:f5:2b:d2:86:
                    6e:d0:c6:90:7d:1b:0a:9c:d6:83:ba:a1:4f:9a:dc:
                    40:4f:68:f7:1a:67:e3:a8:88:10:a0:5e:2e:cb:62:
                    f5:7e:52:a3:ef:c6:62:da:07:7a:2e:ab:55:88:6f:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:18:F8:3B:F4:39:29:33:65:C9:39:84:4A:00:FE:EB:36:3E:E5:A7
            X509v3 Authority Key Identifier:
                keyid:B8:2D:4F:BE:D9:45:8B:4F:70:0D:74:E5:65:34:7A:95:A0:88:77:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/B82D4FBED9458B4F700D74E565347A95A08877D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:85:c5:5e:27:db:86:e7:0b:79:c0:8f:7b:2a:67:39:82:15:
         01:90:a9:db:22:da:2a:55:ea:b7:cc:ee:2f:e9:8f:3c:2d:18:
         95:16:a9:9c:a9:f8:97:f6:65:aa:87:69:12:6f:a7:66:cf:42:
         cb:31:84:70:da:dd:1f:82:14:fa:76:49:e4:ac:ab:b6:8f:f6:
         09:0a:6a:4a:97:ef:31:75:8d:09:32:ce:7a:b0:80:e9:0b:26:
         aa:18:14:8c:4f:09:67:d5:90:3c:fe:23:b2:88:ab:65:5d:7e:
         24:55:2c:64:93:a7:f8:0c:39:9a:9e:71:30:3d:da:c5:d6:86:
         9b:19:a6:24:df:6f:48:d5:0c:78:b5:eb:0b:8c:b1:8b:5c:01:
         ef:20:9f:49:8f:1c:57:14:24:28:fa:65:a7:2a:95:02:11:af:
         7c:ad:fb:fa:03:26:95:26:22:16:c2:45:f6:9b:5d:d8:4c:dc:
         f0:ec:76:a5:81:8b:ce:5f:db:28:26:93:e8:17:62:d0:be:50:
         8e:32:eb:3b:b7:3d:95:1c:a3:91:d8:70:b1:bf:e8:78:6d:73:
         d6:b9:e7:b0:52:4f:06:3b:85:b4:99:79:82:24:9b:13:d2:40:
         d8:12:41:dc:78:da:dd:0b:44:cc:75:49:ad:fd:19:02:27:b3:
         a2:3f:ec:66
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUTizJ1srtwic1n0ubZ76AB8qeLi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyRDRGQkVEOTQ1OEI0RjcwMEQ3NEU1NjUzNDdBOTVB
MDg4NzdENzAeFw0yNDA0MDgxNjMxMjdaFw0yNTA0MDcxNjM2MjdaMDMxMTAvBgNV
BAMTKEIxMThGODNCRjQzOTI5MzM2NUM5Mzk4NDRBMDBGRUVCMzYzRUU1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgo7HxRrWhoScRLYnXSj+5L/U
u+q4QWlNOKVGZTda45k3i0xHIQlss6P0/vG7m9OIjNQt0JCWFtCoGdHuXmgmexrj
WuW5H/SkSPegSCDX7GJiT9cXt7DFFF3I+B5NGW9heBh7MG0/RShoMWe443lohTLd
Sb8aGZRnDmx0EBOpfjyC0WF5KdaVYFkRLeEWrDo64287FFj1lrO3fDpbsu5P2f2y
Nr2wpugBfVOYtBi8XuAfnVsm065ZzECajt114XVSHcZ/higzLg8KMoMt9SvShm7Q
xpB9Gwqc1oO6oU+a3EBPaPcaZ+OoiBCgXi7LYvV+UqPvxmLaB3ouq1WIbwI/AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUsRj4O/Q5KTNlyTmESgD+6zY+5acwHwYDVR0j
BBgwFoAUuC1PvtlFi09wDXTlZTR6laCId9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnB4VTFrSDdXUnB1R29HR25hSDdmVWpNM0pvY2F4cnNTcjdLZTJBV3lQ
bm8vMi9CODJENEZCRUQ5NDU4QjRGNzAwRDc0RTU2NTM0N0E5NUEwODg3N0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MkQ0RkJFRDk0NThCNEY3
MDBENzRFNTY1MzQ3QTk1QTA4ODc3RDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JweFUxa0g3V1JwdUdvR0duYUg3ZlVqTTNKb2NheHJzU3I3S2UyQVd5UG5vLzIv
MzIzODMwMzEzYTM4MzAzYTM0MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzIzNzMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEAgEAwDQYJKoZIhvcNAQELBQADggEB
ABGFxV4n24bnC3nAj3sqZzmCFQGQqdsi2ipV6rfM7i/pjzwtGJUWqZyp+Jf2ZaqH
aRJvp2bPQssxhHDa3R+CFPp2SeSsq7aP9gkKakqX7zF1jQkyznqwgOkLJqoYFIxP
CWfVkDz+I7KIq2VdfiRVLGSTp/gMOZqecTA92sXWhpsZpiTfb0jVDHi16wuMsYtc
Ae8gn0mPHFcUJCj6ZacqlQIRr3yt+/oDJpUmIhbCRfabXdhM3PDsdqWBi85f2ygm
k+gXYtC+UI4y6zu3PZUco5HYcLG/6Hhtc9a557BSTwY7hbSZeYIkmxPSQNgSQdx4
2t0LRMx1Sa39GQIns6I/7GY=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:42 2024 by rpki-client on console-fra.rpki-client.org