Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa
File:                     323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa (raw, json)
Hash identifier:          jRtXyIUqwhEs3fAyNEUmav/tsgXyh0U+oDJA+F03eok=
Subject key identifier:   AF:7E:51:1B:48:05:EB:4C:39:30:B6:C4:69:46:05:9F:CF:64:22:F0
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       46C76B811B1FDD0EA85ADDDB1D8F3AA3E6080ACF
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        2804:16d8:6800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c7:6b:81:1b:1f:dd:0e:a8:5a:dd:db:1d:8f:3a:a3:e6:08:0a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=AF7E511B4805EB4C3930B6C46946059FCF6422F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:65:9c:78:7d:35:c0:df:24:e2:56:6d:f1:
                    7a:25:3d:9e:9c:13:57:4d:93:f1:2c:67:6b:ca:43:
                    fb:76:8e:3c:a0:5d:b5:4a:8e:a5:41:24:b0:46:a7:
                    d8:3f:da:33:99:53:64:01:a7:1b:87:7b:82:8a:54:
                    ab:4c:3a:88:74:41:35:83:b4:1f:4a:dd:6f:8e:c6:
                    18:48:20:b4:d2:b1:54:96:e3:09:cd:5d:14:63:aa:
                    35:ba:c6:a1:ad:53:c8:d2:28:b7:9c:cb:9c:be:17:
                    a2:b6:ff:a6:7d:2e:28:d5:00:7a:02:b4:c4:69:2f:
                    f0:35:5c:c1:d1:92:b8:92:34:27:0b:f8:ce:76:76:
                    e4:63:02:19:b0:9f:32:ea:7f:8b:d3:1c:e3:aa:ac:
                    d3:62:46:05:18:72:cb:5f:94:e5:45:46:1f:a0:2b:
                    81:21:9a:9c:57:46:7f:b5:af:60:a8:39:fc:28:fd:
                    3d:e7:54:8a:93:03:19:d3:2e:8e:fd:41:98:f4:90:
                    f1:14:01:8f:04:22:60:0f:b3:f1:e9:30:f1:c6:e0:
                    52:55:a2:15:b8:67:95:59:ec:88:51:e4:bf:24:13:
                    b0:e8:20:35:aa:2d:1b:c0:f6:92:cd:30:87:60:cd:
                    65:3c:c6:33:dd:94:e0:09:2f:e2:e8:1a:ff:12:e5:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:51:1B:48:05:EB:4C:39:30:B6:C4:69:46:05:9F:CF:64:22:F0
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:6800::/37

    Signature Algorithm: sha256WithRSAEncryption
         4f:ca:2d:96:89:ae:36:3a:fc:57:a5:75:27:c9:c4:7c:9c:f2:
         27:90:53:44:5e:1a:75:52:90:35:a9:58:84:79:4a:56:b9:fc:
         43:65:26:28:09:a1:59:86:e4:1c:b8:c1:13:63:e7:eb:00:c3:
         d2:dd:d8:89:0b:9c:6f:9f:ba:98:16:e0:db:3b:ea:bd:fc:e4:
         25:6b:87:fb:f1:3f:e5:5f:1b:25:9a:44:0b:22:6a:f1:9b:5f:
         92:35:52:aa:08:4d:55:9d:db:e7:c1:69:5b:72:f2:45:e4:06:
         22:f4:64:e6:47:df:ec:ba:d0:36:a1:5b:fe:d5:ca:75:d5:0e:
         61:b5:5b:ac:a4:97:c4:7a:5d:e6:23:aa:90:a8:a7:cd:79:88:
         a1:73:69:8a:6e:ce:8d:bd:f0:42:d1:73:5d:19:9b:5e:2f:6b:
         7d:eb:b2:ae:cb:70:03:37:14:cb:33:f0:d1:2c:e9:11:77:9f:
         d0:66:31:04:a3:17:51:f6:c7:d6:4f:14:09:32:1a:2a:8a:bf:
         03:ff:32:cc:63:0b:c4:d1:12:c3:5e:59:ca:73:67:ec:b9:58:
         17:e0:3f:d8:63:3f:ac:8b:b2:0e:28:1c:4e:a4:c9:4c:eb:07:
         23:02:6f:77:55:8f:0d:37:c8:e0:27:a5:15:93:b4:d9:a4:f3:
         40:2d:f2:a8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURsdrgRsf3Q6oWt3bHY86o+YICs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjRaFw0yNTA3MTQxMzQyMjRaMDMxMTAvBgNV
BAMTKEFGN0U1MTFCNDgwNUVCNEMzOTMwQjZDNDY5NDYwNTlGQ0Y2NDIyRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaGWceH01wN8k4lZt8XolPZ6c
E1dNk/EsZ2vKQ/t2jjygXbVKjqVBJLBGp9g/2jOZU2QBpxuHe4KKVKtMOoh0QTWD
tB9K3W+OxhhIILTSsVSW4wnNXRRjqjW6xqGtU8jSKLecy5y+F6K2/6Z9LijVAHoC
tMRpL/A1XMHRkriSNCcL+M52duRjAhmwnzLqf4vTHOOqrNNiRgUYcstflOVFRh+g
K4EhmpxXRn+1r2CoOfwo/T3nVIqTAxnTLo79QZj0kPEUAY8EImAPs/HpMPHG4FJV
ohW4Z5VZ7IhR5L8kE7DoIDWqLRvA9pLNMIdgzWU8xjPdlOAJL+LoGv8S5bZxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUr35RG0gF60w5MLbEaUYFn89kIvAwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzNjM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFthoMA0GCSqGSIb3DQEBCwUA
A4IBAQBPyi2Wia42OvxXpXUnycR8nPInkFNEXhp1UpA1qViEeUpWufxDZSYoCaFZ
huQcuMETY+frAMPS3diJC5xvn7qYFuDbO+q9/OQla4f78T/lXxslmkQLImrxm1+S
NVKqCE1VndvnwWlbcvJF5AYi9GTmR9/sutA2oVv+1cp11Q5htVuspJfEel3mI6qQ
qKfNeYihc2mKbs6NvfBC0XNdGZteL2t967Kuy3ADNxTLM/DRLOkRd5/QZjEEoxdR
9sfWTxQJMhoqir8D/zLMYwvE0RLDXlnKc2fsuVgX4D/YYz+si7IOKBxOpMlM6wcj
Am93VY8NN8jgJ6UVk7TZpPNALfKo
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:25 2025 by rpki-client