Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/323830343a323037383a3a2f33322d313238203d3e20323634343932.roa
File:                     323830343a323037383a3a2f33322d313238203d3e20323634343932.roa (raw, json)
Hash identifier:          XkNd3Til+ojrlKTGVqNK3lnE3moUk47jalH/Wk245H4=
Subject key identifier:   27:7E:4B:C0:DF:38:2F:39:E2:88:C2:FB:76:AD:21:05:9D:F9:51:95
Certificate issuer:       /CN=258DCD12D49ACC6C188C511F71E74D6E692B16BD
Certificate serial:       0293310BAB9752469BD307B213265350F2CB311E
Authority key identifier: 25:8D:CD:12:D4:9A:CC:6C:18:8C:51:1F:71:E7:4D:6E:69:2B:16:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/323830343a323037383a3a2f33322d313238203d3e20323634343932.roa
Signing time:             Thu 04 Apr 2024 06:17:50 +0000
ROA not before:           Thu 04 Apr 2024 06:12:50 +0000
ROA not after:            Thu 03 Apr 2025 06:17:50 +0000
asID:                     264492
IP address blocks:        2804:2078::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.crl
                          rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:93:31:0b:ab:97:52:46:9b:d3:07:b2:13:26:53:50:f2:cb:31:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258DCD12D49ACC6C188C511F71E74D6E692B16BD
        Validity
            Not Before: Apr  4 06:12:50 2024 GMT
            Not After : Apr  3 06:17:50 2025 GMT
        Subject: CN=277E4BC0DF382F39E288C2FB76AD21059DF95195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:26:9e:f9:04:04:2c:80:19:71:45:1e:52:
                    cb:2b:cb:ba:68:b0:6c:a9:dc:6d:af:43:9a:d3:3b:
                    5c:55:df:2f:58:e3:fe:03:b2:b4:eb:15:56:e7:12:
                    3e:2f:9c:5b:ae:d8:65:02:a7:15:9f:d4:88:98:1f:
                    dc:cb:f5:ce:c9:d1:a4:9e:fd:f8:54:37:27:2e:8a:
                    60:b6:d3:d7:35:73:48:5b:0f:a2:40:de:98:d9:55:
                    05:bb:60:3f:ac:ee:0d:36:be:f7:32:27:e4:fb:45:
                    6d:16:33:dd:bd:96:cc:ef:96:cc:40:89:48:1f:17:
                    d5:cc:06:f9:e4:94:90:96:d0:65:9d:23:0a:7e:56:
                    35:cf:21:b1:4c:cc:f0:88:1f:f2:0c:f8:05:0e:17:
                    e2:88:e4:0e:56:a6:81:5b:26:08:58:f9:f9:d8:91:
                    ca:67:0f:76:7f:68:47:27:27:00:ce:6c:4a:8d:be:
                    fc:c1:8e:07:cd:71:41:a6:df:ad:f0:b6:9f:1d:11:
                    25:6c:a4:60:cd:01:8c:8d:98:c6:a8:33:ab:6a:3d:
                    4f:b0:ac:c1:09:be:65:7b:e7:6a:2d:cc:0d:d1:e9:
                    54:8d:60:f7:8e:5f:35:c1:89:73:06:c1:69:10:c8:
                    d0:bb:92:9c:4b:c8:ea:0f:95:78:b8:33:50:f4:61:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7E:4B:C0:DF:38:2F:39:E2:88:C2:FB:76:AD:21:05:9D:F9:51:95
            X509v3 Authority Key Identifier:
                keyid:25:8D:CD:12:D4:9A:CC:6C:18:8C:51:1F:71:E7:4D:6E:69:2B:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258DCD12D49ACC6C188C511F71E74D6E692B16BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/1/323830343a323037383a3a2f33322d313238203d3e20323634343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2078::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:7b:43:7a:e4:28:b9:98:c9:0e:46:74:b4:8f:59:00:68:
         d5:2a:c7:84:8f:be:eb:26:39:7f:d4:47:67:1d:77:e1:2e:e6:
         76:66:2a:35:38:56:c3:bf:cf:c0:45:33:ba:81:64:5d:13:13:
         eb:be:5f:80:f2:dd:67:e1:08:33:86:60:a2:5a:2d:69:fe:76:
         8c:bc:ab:b0:2e:9a:ef:bd:83:54:3b:69:b8:8a:4b:e7:97:52:
         0f:58:21:ec:d1:3c:d8:a9:fd:1a:d2:94:b6:c1:92:46:f3:6f:
         78:c4:ba:90:2f:9b:b5:15:77:04:fd:af:6b:3b:1d:b7:64:f8:
         b1:17:c9:fa:f3:07:a7:f9:3a:ed:da:da:85:3f:7e:6d:0f:76:
         16:50:fb:60:1e:3d:7f:f1:19:9c:ac:25:64:db:59:1a:b2:89:
         92:02:45:25:e4:0e:42:3f:ec:7d:79:60:33:10:e5:87:8f:86:
         53:9c:ec:71:58:2b:27:84:e9:6b:97:85:f9:59:61:99:93:b1:
         f5:8c:82:cc:55:f4:71:48:fa:c4:39:74:95:a6:da:1e:04:6c:
         49:b0:2f:2e:f4:40:58:c0:c9:6f:6c:9b:d6:5e:31:c4:80:79:
         5d:6d:89:98:ba:9a:b7:f7:37:7f:f6:1d:23:d2:a2:18:63:c8:
         8e:c8:45:90
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUApMxC6uXUkab0weyEyZTUPLLMR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4RENEMTJENDlBQ0M2QzE4OEM1MTFGNzFFNzRENkU2
OTJCMTZCRDAeFw0yNDA0MDQwNjEyNTBaFw0yNTA0MDMwNjE3NTBaMDMxMTAvBgNV
BAMTKDI3N0U0QkMwREYzODJGMzlFMjg4QzJGQjc2QUQyMTA1OURGOTUxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6yae+QQELIAZcUUeUssry7po
sGyp3G2vQ5rTO1xV3y9Y4/4DsrTrFVbnEj4vnFuu2GUCpxWf1IiYH9zL9c7J0aSe
/fhUNycuimC209c1c0hbD6JA3pjZVQW7YD+s7g02vvcyJ+T7RW0WM929lszvlsxA
iUgfF9XMBvnklJCW0GWdIwp+VjXPIbFMzPCIH/IM+AUOF+KI5A5WpoFbJghY+fnY
kcpnD3Z/aEcnJwDObEqNvvzBjgfNcUGm363wtp8dESVspGDNAYyNmMaoM6tqPU+w
rMEJvmV752otzA3R6VSNYPeOXzXBiXMGwWkQyNC7kpxLyOoPlXi4M1D0YUtpAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUJ35LwN84LzniiML7dq0hBZ35UZUwHwYDVR0j
BBgwFoAUJY3NEtSazGwYjFEfcedNbmkrFr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnE2OTlKSmRyb1VRRUVkeWQ4dDhkSjR5alQ2VWpua2RueDdienJaYUZ2
cGMvMS8yNThEQ0QxMkQ0OUFDQzZDMTg4QzUxMUY3MUU3NEQ2RTY5MkIxNkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1OERDRDEyRDQ5QUNDNkMx
ODhDNTExRjcxRTc0RDZFNjkyQjE2QkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JxNjk5Skpkcm9VUUVFZHlkOHQ4ZEo0eWpUNlVqbmtkbng3YnpyWmFGdnBjLzEv
MzIzODMwMzQzYTMyMzAzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCB4MA0GCSqGSIb3DQEBCwUAA4IBAQCXnHtD
euQouZjJDkZ0tI9ZAGjVKseEj77rJjl/1EdnHXfhLuZ2Zio1OFbDv8/ARTO6gWRd
ExPrvl+A8t1n4QgzhmCiWi1p/naMvKuwLprvvYNUO2m4ikvnl1IPWCHs0TzYqf0a
0pS2wZJG8294xLqQL5u1FXcE/a9rOx23ZPixF8n68wen+Trt2tqFP35tD3YWUPtg
Hj1/8RmcrCVk21kasomSAkUl5A5CP+x9eWAzEOWHj4ZTnOxxWCsnhOlrl4X5WWGZ
k7H1jILMVfRxSPrEOXSVptoeBGxJsC8u9EBYwMlvbJvWXjHEgHldbYmYupq39zd/
9h0j0qIYY8iOyEWQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:35 2024 by rpki-client on console-fra.rpki-client.org