Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/323830343a343666343a3a2f33322d3438203d3e20323637303232.roa
File:                     323830343a343666343a3a2f33322d3438203d3e20323637303232.roa (raw, json)
Hash identifier:          OWp0wgOuyFAJAZPqilEu+jqslXksT3zFnVtSz251Gkk=
Subject key identifier:   59:2E:32:20:58:71:09:EB:76:C1:B7:B0:5B:2A:18:EB:E6:91:76:AC
Certificate issuer:       /CN=B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957
Certificate serial:       075227613894006982EA58A4642A292B001BE224
Authority key identifier: B0:BE:4B:AA:F3:EE:81:E7:D0:28:A3:5D:2B:12:0F:B1:2C:F7:E9:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/323830343a343666343a3a2f33322d3438203d3e20323637303232.roa
Signing time:             Thu 04 Apr 2024 08:10:33 +0000
ROA not before:           Thu 04 Apr 2024 08:05:33 +0000
ROA not after:            Thu 03 Apr 2025 08:10:33 +0000
asID:                     267022
IP address blocks:        2804:46f4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.crl
                          rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:52:27:61:38:94:00:69:82:ea:58:a4:64:2a:29:2b:00:1b:e2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957
        Validity
            Not Before: Apr  4 08:05:33 2024 GMT
            Not After : Apr  3 08:10:33 2025 GMT
        Subject: CN=592E3220587109EB76C1B7B05B2A18EBE69176AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:c4:56:9c:39:a7:6a:7f:a5:10:15:7c:d0:
                    c7:d5:dd:e0:b3:f0:84:6e:12:8e:30:3f:3b:87:94:
                    b0:42:bb:76:0c:82:7d:27:55:31:e9:12:f0:6c:8e:
                    8f:93:a0:e3:d2:4b:04:65:45:34:12:dc:d6:1f:1a:
                    02:43:34:6c:0e:f8:7a:04:f9:1c:a4:31:92:75:97:
                    75:6b:51:9f:90:61:90:7e:43:05:8d:76:58:28:2e:
                    98:45:6e:db:59:c4:98:41:ff:bf:9e:bf:1b:f3:ae:
                    a5:c4:8e:29:72:57:22:4e:74:5a:48:98:c1:62:6c:
                    f7:a8:91:4b:bb:29:13:7d:8a:40:c7:52:25:57:88:
                    17:f8:59:0a:1d:2d:58:2c:01:82:79:b3:8b:fc:f5:
                    3a:b1:03:74:43:d8:35:6d:8f:6e:a3:fb:de:71:08:
                    02:8a:f2:a0:b0:d0:07:62:c2:11:2e:4f:2b:97:4e:
                    2b:9e:24:05:14:d1:64:61:7e:95:0c:08:11:c1:b2:
                    96:99:0a:ae:90:c2:90:5d:3c:43:b4:9e:16:03:09:
                    33:77:d3:e1:ce:ea:0f:91:29:e1:13:e7:b7:8e:56:
                    e6:65:ac:8a:92:56:04:46:d3:8b:65:a2:91:a5:d9:
                    83:6e:e9:60:6c:e3:17:43:5d:21:1d:b2:bb:fb:62:
                    40:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2E:32:20:58:71:09:EB:76:C1:B7:B0:5B:2A:18:EB:E6:91:76:AC
            X509v3 Authority Key Identifier:
                keyid:B0:BE:4B:AA:F3:EE:81:E7:D0:28:A3:5D:2B:12:0F:B1:2C:F7:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/323830343a343666343a3a2f33322d3438203d3e20323637303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:84:42:65:c2:71:66:54:89:5c:d1:aa:2c:4b:5a:f9:78:77:
         f6:23:95:64:41:bc:e6:90:ef:8b:f1:95:55:6d:84:43:c5:8b:
         2c:0c:42:0b:90:8c:bb:40:ab:6d:ad:02:16:7a:7f:99:9b:d5:
         83:d1:44:fc:53:eb:1e:6e:ab:98:a6:c8:8d:2f:20:18:8e:59:
         9c:83:8f:3f:a8:50:a3:be:4c:da:d5:2b:c2:43:18:e2:0c:e6:
         3f:a3:e0:e0:26:b3:2c:50:a0:cf:cd:7f:d7:c3:67:4d:88:59:
         65:eb:5f:64:fa:3e:ee:ec:63:6b:1a:00:70:2b:d2:dd:60:45:
         ba:5e:d4:2f:e2:d6:00:a6:9e:55:23:95:4b:30:e0:37:18:8d:
         d8:c6:c9:0d:a4:57:ad:94:60:b2:71:60:05:90:7b:8a:56:9f:
         37:33:8b:84:ba:11:18:da:50:37:34:8a:08:dd:8d:44:ac:12:
         f1:fd:37:22:fb:1c:21:f9:95:7a:fb:67:9f:d8:dd:33:d1:96:
         e7:3a:a9:81:91:14:79:95:5d:8d:9f:f9:62:e2:85:27:f1:ec:
         12:07:0b:b9:ad:86:df:e5:60:c3:0f:d7:70:e7:5b:0f:fe:8a:
         eb:d0:b4:9b:aa:5c:f0:d1:38:68:ce:51:13:94:82:41:0a:7c:
         f7:f5:27:ab
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUB1InYTiUAGmC6likZCopKwAb4iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCRTRCQUFGM0VFODFFN0QwMjhBMzVEMkIxMjBGQjEy
Q0Y3RTk1NzAeFw0yNDA0MDQwODA1MzNaFw0yNTA0MDMwODEwMzNaMDMxMTAvBgNV
BAMTKDU5MkUzMjIwNTg3MTA5RUI3NkMxQjdCMDVCMkExOEVCRTY5MTc2QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FMRWnDmnan+lEBV80MfV3eCz
8IRuEo4wPzuHlLBCu3YMgn0nVTHpEvBsjo+ToOPSSwRlRTQS3NYfGgJDNGwO+HoE
+RykMZJ1l3VrUZ+QYZB+QwWNdlgoLphFbttZxJhB/7+evxvzrqXEjilyVyJOdFpI
mMFibPeokUu7KRN9ikDHUiVXiBf4WQodLVgsAYJ5s4v89TqxA3RD2DVtj26j+95x
CAKK8qCw0AdiwhEuTyuXTiueJAUU0WRhfpUMCBHBspaZCq6QwpBdPEO0nhYDCTN3
0+HO6g+RKeET57eOVuZlrIqSVgRG04tlopGl2YNu6WBs4xdDXSEdsrv7YkDzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWS4yIFhxCet2wbewWyoY6+aRdqwwHwYDVR0j
BBgwFoAUsL5LqvPugefQKKNdKxIPsSz36VcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzk0emFENk5DUDk2azc3Z2RabUcyN3RDbnNuSFNMem9ieG5lNDJ3UEo4
YlcvMS9CMEJFNEJBQUYzRUU4MUU3RDAyOEEzNUQyQjEyMEZCMTJDRjdFOTU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQkU0QkFBRjNFRTgxRTdE
MDI4QTM1RDJCMTIwRkIxMkNGN0U5NTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5NHphRDZOQ1A5Nms3N2dkWm1HMjd0Q25zbkhTTHpvYnhuZTQyd1BKOGJXLzEv
MzIzODMwMzQzYTM0MzY2NjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARG9DANBgkqhkiG9w0BAQsFAAOCAQEAcYRCZcJx
ZlSJXNGqLEta+Xh39iOVZEG85pDvi/GVVW2EQ8WLLAxCC5CMu0Crba0CFnp/mZvV
g9FE/FPrHm6rmKbIjS8gGI5ZnIOPP6hQo75M2tUrwkMY4gzmP6Pg4CazLFCgz81/
18NnTYhZZetfZPo+7uxjaxoAcCvS3WBFul7UL+LWAKaeVSOVSzDgNxiN2MbJDaRX
rZRgsnFgBZB7ilafNzOLhLoRGNpQNzSKCN2NRKwS8f03IvscIfmVevtnn9jdM9GW
5zqpgZEUeZVdjZ/5YuKFJ/HsEgcLua2G3+Vgww/XcOdbD/6K69C0m6pc8NE4aM5R
E5SCQQp89/Unqw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:07 2024 by rpki-client on console-fra.rpki-client.org