Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa
File:                     323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (raw, json)
Hash identifier:          atCYvoZ5suw17r5GWQ8N1846tKZEsUg6ozTY2iGtcD4=
Subject key identifier:   BB:C2:4D:8D:48:FF:A8:08:AC:CC:06:A5:55:71:CA:E5:06:0C:F8:4D
Certificate issuer:       /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial:       4B3D9D3818221EC2D998FFC403D56FA102420287
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa
Signing time:             Thu 04 Apr 2024 13:24:37 +0000
ROA not before:           Thu 04 Apr 2024 13:19:37 +0000
ROA not after:            Thu 03 Apr 2025 13:24:37 +0000
asID:                     263496
IP address blocks:        2804:12c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3d:9d:38:18:22:1e:c2:d9:98:ff:c4:03:d5:6f:a1:02:42:02:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
        Validity
            Not Before: Apr  4 13:19:37 2024 GMT
            Not After : Apr  3 13:24:37 2025 GMT
        Subject: CN=BBC24D8D48FFA808ACCC06A55571CAE5060CF84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:ba:35:26:16:4d:c1:87:42:6a:54:ca:96:
                    4f:c4:66:59:10:47:43:70:a2:d3:de:14:22:b0:aa:
                    13:9c:89:90:43:5b:49:f5:30:7c:d6:d5:56:81:91:
                    80:37:9a:26:76:2c:37:74:57:20:93:72:5c:bd:eb:
                    89:c9:5e:f0:9b:86:4a:27:63:d1:be:52:4d:00:a1:
                    80:00:02:50:26:dc:73:28:df:d0:45:06:28:0c:41:
                    b5:38:2e:9b:24:9d:3e:0f:cd:33:d5:2d:e5:42:17:
                    3e:3a:37:d8:77:b3:d5:e7:70:da:41:87:e9:67:c5:
                    d5:72:30:a3:44:6b:36:e6:42:b1:00:9e:97:56:cc:
                    1c:4b:a8:ac:ef:45:ef:4b:1e:88:de:b8:60:a7:18:
                    84:7e:a4:87:ef:c7:e8:fc:6b:3d:75:02:31:56:b5:
                    47:c8:2c:66:71:93:09:ac:58:3e:15:1e:21:c4:19:
                    0f:e1:a1:b0:c3:02:7e:45:1d:12:13:a3:28:93:ac:
                    c4:6e:2a:a4:d8:b7:9b:59:f8:58:fc:a0:4d:79:44:
                    d6:16:7a:96:06:69:93:53:3f:04:bf:11:64:69:7a:
                    ac:16:35:97:64:69:12:05:d5:d0:62:79:61:90:38:
                    a8:5d:38:7d:21:4e:51:50:9c:bd:ef:d2:22:8a:e2:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C2:4D:8D:48:FF:A8:08:AC:CC:06:A5:55:71:CA:E5:06:0C:F8:4D
            X509v3 Authority Key Identifier:
                keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:48:93:52:b8:c1:b7:ac:86:a1:d3:9a:08:2b:f1:04:a2:
         c2:e5:1d:d1:74:5a:17:8a:b9:84:da:35:89:00:3d:55:f6:23:
         90:49:1f:e2:26:b1:60:6f:2f:39:d3:80:0b:77:a2:e3:b9:73:
         6b:65:e0:02:20:33:17:4d:65:2b:09:83:88:9e:f0:f9:88:76:
         6a:6c:c5:92:05:24:90:c0:76:b4:1e:e2:9a:f7:a8:f3:5c:6b:
         4f:ad:2d:a9:36:f7:06:20:55:21:ef:3e:c1:b9:b7:b8:4b:90:
         e0:93:43:14:e8:84:e4:9e:9e:b9:fc:8c:23:57:c5:be:97:4c:
         c8:59:86:50:cb:2e:76:26:d0:d4:b8:b8:1e:47:a4:47:e9:96:
         76:a2:4b:ef:26:3e:e3:5c:89:01:bf:92:77:e3:ee:16:42:4d:
         bf:16:f7:1f:bd:7f:ac:9f:16:4b:d8:71:bf:29:56:42:f6:f3:
         4a:d6:4a:05:d5:10:93:60:30:49:8b:34:80:90:a3:28:40:9f:
         18:89:7c:ba:c7:de:5b:26:3b:03:3e:28:22:74:8d:54:06:41:
         84:d4:45:08:e6:fb:97:52:f0:4d:34:f2:11:35:51:49:8c:fb:
         2e:e5:21:e6:69:ea:27:62:3c:a2:06:aa:b2:4b:66:81:5f:28:
         a6:b6:61:66
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSz2dOBgiHsLZmP/EA9VvoQJCAocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE
NkUzODcyOTAeFw0yNDA0MDQxMzE5MzdaFw0yNTA0MDMxMzI0MzdaMDMxMTAvBgNV
BAMTKEJCQzI0RDhENDhGRkE4MDhBQ0NDMDZBNTU1NzFDQUU1MDYwQ0Y4NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvULo1JhZNwYdCalTKlk/EZlkQ
R0NwotPeFCKwqhOciZBDW0n1MHzW1VaBkYA3miZ2LDd0VyCTcly964nJXvCbhkon
Y9G+Uk0AoYAAAlAm3HMo39BFBigMQbU4LpsknT4PzTPVLeVCFz46N9h3s9XncNpB
h+lnxdVyMKNEazbmQrEAnpdWzBxLqKzvRe9LHojeuGCnGIR+pIfvx+j8az11AjFW
tUfILGZxkwmsWD4VHiHEGQ/hobDDAn5FHRIToyiTrMRuKqTYt5tZ+Fj8oE15RNYW
epYGaZNTPwS/EWRpeqwWNZdkaRIF1dBieWGQOKhdOH0hTlFQnL3v0iKK4uZbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUu8JNjUj/qAiszAalVXHK5QYM+E0wHwYDVR0j
BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4
ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF
RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwZWNiZXFDSlA1UlFhaGhaa3o2TVlGaGs1UUJDSEFMV0pDS0xMOTdWOHpFLzEv
MzIzODMwMzQzYTMxMzI2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQSwDANBgkqhkiG9w0BAQsFAAOCAQEALPRIk1K4
wbeshqHTmggr8QSiwuUd0XRaF4q5hNo1iQA9VfYjkEkf4iaxYG8vOdOAC3ei47lz
a2XgAiAzF01lKwmDiJ7w+Yh2amzFkgUkkMB2tB7imveo81xrT60tqTb3BiBVIe8+
wbm3uEuQ4JNDFOiE5J6eufyMI1fFvpdMyFmGUMsudibQ1Li4HkekR+mWdqJL7yY+
41yJAb+Sd+PuFkJNvxb3H71/rJ8WS9hxvylWQvbzStZKBdUQk2AwSYs0gJCjKECf
GIl8usfeWyY7Az4oInSNVAZBhNRFCOb7l1LwTTTyETVRSYz7LuUh5mnqJ2I8ogaq
sktmgV8oprZhZg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org