Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a633030303a3a2f33342d3334203d3e20323638373933.roa
File:                     323830343a356163303a633030303a3a2f33342d3334203d3e20323638373933.roa (raw, json)
Hash identifier:          lPiMJDnC6Qdo4AAUs/PMmL+8OKLukAeyLutHc/eaUsE=
Subject key identifier:   BD:AC:9E:7B:F2:A5:C9:73:16:FC:13:96:44:6F:01:01:B5:EF:62:D9
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       735B3039DE9BDB0E21C969F6A06C7CF782A44ACC
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a633030303a3a2f33342d3334203d3e20323638373933.roa
Signing time:             Mon 13 Jan 2025 18:14:48 +0000
ROA not before:           Mon 13 Jan 2025 18:09:48 +0000
ROA not after:            Mon 12 Jan 2026 18:14:48 +0000
asID:                     268793
IP address blocks:        2804:5ac0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
                          rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 02:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5b:30:39:de:9b:db:0e:21:c9:69:f6:a0:6c:7c:f7:82:a4:4a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Jan 13 18:09:48 2025 GMT
            Not After : Jan 12 18:14:48 2026 GMT
        Subject: CN=BDAC9E7BF2A5C97316FC1396446F0101B5EF62D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:2f:80:81:9e:34:8c:53:5d:90:eb:92:b4:
                    32:ea:ec:2f:1b:a6:43:02:25:86:8b:7d:58:05:db:
                    00:22:3b:7b:3d:8a:03:a3:bf:68:a6:dc:85:1c:37:
                    29:c6:45:51:e5:a3:73:a6:21:fe:e4:7e:5f:e8:08:
                    2f:e7:36:05:d7:4b:b1:e4:85:97:d8:87:d4:d8:21:
                    88:49:9e:58:34:a8:c6:8c:03:b8:5c:8f:7e:68:aa:
                    35:2e:d7:54:72:ac:15:6f:36:d7:02:78:df:f3:e1:
                    88:99:07:5a:21:d2:db:aa:c7:72:49:f2:56:03:10:
                    e4:31:78:8d:3f:92:f6:f1:6b:13:40:b4:be:bc:be:
                    91:25:f8:d8:7c:54:0c:8c:92:53:a5:ed:3d:24:92:
                    42:0e:04:e5:89:82:11:fd:74:94:ff:01:86:33:c9:
                    a0:9e:aa:7a:65:8c:ac:4e:5b:79:59:39:d5:11:69:
                    cb:10:20:3a:d4:02:20:7b:4b:45:1d:9c:25:46:a9:
                    82:28:45:93:6a:41:63:7c:71:38:2b:a4:c7:67:28:
                    01:2a:63:08:f0:88:8b:68:3b:ef:32:35:38:d9:e8:
                    c3:ff:51:4e:0a:93:d1:ee:8f:7c:52:18:66:ed:01:
                    fb:5e:7e:56:5f:02:e4:70:ab:8f:2c:90:0e:cf:be:
                    2f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:9E:7B:F2:A5:C9:73:16:FC:13:96:44:6F:01:01:B5:EF:62:D9
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a633030303a3a2f33342d3334203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:6f:f8:65:26:81:9e:21:86:30:6d:86:ec:f2:ae:ff:35:23:
         e5:3a:6c:73:d1:86:55:79:8e:91:71:d3:31:3f:e9:81:2d:32:
         ca:f1:2e:24:e0:1b:21:91:9a:a9:54:95:f5:b8:7f:00:5d:42:
         b5:e9:9c:7c:91:12:6a:6d:90:24:5c:34:ed:f6:72:3a:84:77:
         f0:f9:f6:e5:18:58:cf:81:19:c9:78:1a:d8:54:10:77:be:26:
         1c:63:26:78:02:66:5b:89:ab:0d:ee:38:d8:b1:2a:ff:cc:f8:
         dc:b7:4a:d7:43:ef:d0:c7:c9:1b:c8:8c:c3:f6:99:59:bd:a7:
         ed:45:4e:71:e9:d9:f4:8d:0e:0a:0e:71:88:cc:66:73:f8:e1:
         d7:46:c3:81:30:c0:71:f3:2e:a4:fa:e7:42:7d:b6:a8:ce:4f:
         8c:8a:f2:92:90:f3:22:16:bd:50:c2:1c:95:ea:6e:c8:ea:98:
         ff:60:ed:2d:5c:bd:59:0a:79:9b:fb:a4:41:ea:ec:37:85:96:
         60:b5:5a:49:df:cf:ab:62:44:a0:96:f0:0c:20:dc:77:89:c6:
         50:24:83:bd:e6:e6:d3:56:d1:c6:48:f4:a9:bb:3e:03:90:d8:
         ab:7d:24:76:cf:9b:5c:67:27:5c:e3:43:48:4d:99:7f:a8:78:
         06:16:33:66
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUc1swOd6b2w4hyWn2oGx894KkSswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx
ODI0RDQ3ODAeFw0yNTAxMTMxODA5NDhaFw0yNjAxMTIxODE0NDhaMDMxMTAvBgNV
BAMTKEJEQUM5RTdCRjJBNUM5NzMxNkZDMTM5NjQ0NkYwMTAxQjVFRjYyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHS+AgZ40jFNdkOuStDLq7C8b
pkMCJYaLfVgF2wAiO3s9igOjv2im3IUcNynGRVHlo3OmIf7kfl/oCC/nNgXXS7Hk
hZfYh9TYIYhJnlg0qMaMA7hcj35oqjUu11RyrBVvNtcCeN/z4YiZB1oh0tuqx3JJ
8lYDEOQxeI0/kvbxaxNAtL68vpEl+Nh8VAyMklOl7T0kkkIOBOWJghH9dJT/AYYz
yaCeqnpljKxOW3lZOdURacsQIDrUAiB7S0UdnCVGqYIoRZNqQWN8cTgrpMdnKAEq
YwjwiItoO+8yNTjZ6MP/UU4Kk9Huj3xSGGbtAfteflZfAuRwq48skA7Pvi9/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUvayee/KlyXMW/BOWRG8BAbXvYtkwHwYDVR0j
BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0
OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5
QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv
MzIzODMwMzQzYTM1NjE2MzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWsDAMA0GCSqGSIb3DQEBCwUA
A4IBAQAAb/hlJoGeIYYwbYbs8q7/NSPlOmxz0YZVeY6RcdMxP+mBLTLK8S4k4Bsh
kZqpVJX1uH8AXUK16Zx8kRJqbZAkXDTt9nI6hHfw+fblGFjPgRnJeBrYVBB3viYc
YyZ4AmZbiasN7jjYsSr/zPjct0rXQ+/Qx8kbyIzD9plZvaftRU5x6dn0jQ4KDnGI
zGZz+OHXRsOBMMBx8y6k+udCfbaozk+MivKSkPMiFr1QwhyV6m7I6pj/YO0tXL1Z
Cnmb+6RB6uw3hZZgtVpJ38+rYkSglvAMINx3icZQJIO95ubTVtHGSPSpuz4DkNir
fSR2z5tcZydc40NITZl/qHgGFjNm
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:23:20 2025 by rpki-client