Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33322d3438203d3e20323637393633.roa
File:                     323830343a353565343a3a2f33322d3438203d3e20323637393633.roa (raw, json)
Hash identifier:          o8GZPaFX5blw70ctZvsrIO+Xo4JGsfQwLl/v0cHc6e8=
Subject key identifier:   32:FE:2A:EC:E5:D8:2E:80:33:C5:01:1F:22:06:82:6C:82:58:5D:59
Certificate issuer:       /CN=BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD
Certificate serial:       6A57BF5F7086555DC3D5FFC01CA4663AD235A627
Authority key identifier: BB:94:D2:AF:04:F8:72:8E:A2:60:8D:9E:D6:FB:6C:36:C2:9B:6A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33322d3438203d3e20323637393633.roa
Signing time:             Tue 05 Nov 2024 12:55:00 +0000
ROA not before:           Tue 05 Nov 2024 12:50:00 +0000
ROA not after:            Tue 04 Nov 2025 12:55:00 +0000
asID:                     267963
IP address blocks:        2804:55e4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:57:bf:5f:70:86:55:5d:c3:d5:ff:c0:1c:a4:66:3a:d2:35:a6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD
        Validity
            Not Before: Nov  5 12:50:00 2024 GMT
            Not After : Nov  4 12:55:00 2025 GMT
        Subject: CN=32FE2AECE5D82E8033C5011F2206826C82585D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:29:b3:28:77:d7:7f:46:8a:00:3d:2d:ad:
                    e1:ee:c0:26:56:71:76:8a:5b:4c:88:3a:98:90:94:
                    cf:57:76:02:38:81:f8:6a:92:14:3d:d2:17:1f:2f:
                    3a:66:4a:4c:66:01:cd:df:d0:98:88:18:7b:c3:cd:
                    0b:fc:bb:08:49:69:d3:65:4f:e9:61:80:99:85:8d:
                    78:f7:a1:12:fd:06:ee:4b:c3:cf:7c:b4:2d:93:31:
                    32:dc:d5:0c:db:6c:d8:b4:1f:5e:ba:44:5c:1c:37:
                    29:13:8f:9f:07:ed:a3:4f:7b:a9:e1:7f:5a:ec:6a:
                    3a:87:c9:c6:18:92:e0:73:02:9f:c6:56:15:e8:6d:
                    9e:bc:81:92:8c:06:d9:31:22:37:a2:93:b4:50:06:
                    b9:2b:95:f6:ca:7b:59:47:de:9c:c5:a6:95:e3:0c:
                    54:38:5c:54:65:e5:63:fa:8a:0c:1e:e2:f8:c0:ed:
                    fb:fd:da:19:6e:86:56:15:82:3c:88:1b:32:7e:6c:
                    ae:a1:55:18:cb:ee:21:b1:b8:8f:f8:01:3b:fd:d4:
                    35:c4:f9:c4:3c:b7:7c:ea:2c:f4:ff:da:0f:cb:21:
                    d2:19:26:27:ba:3e:1a:94:1c:c1:87:08:4a:bc:3e:
                    dd:ce:4d:79:a9:a5:63:de:dd:90:fb:10:d2:ff:b4:
                    03:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:2A:EC:E5:D8:2E:80:33:C5:01:1F:22:06:82:6C:82:58:5D:59
            X509v3 Authority Key Identifier:
                keyid:BB:94:D2:AF:04:F8:72:8E:A2:60:8D:9E:D6:FB:6C:36:C2:9B:6A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33322d3438203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:59:95:a2:94:b4:7d:12:76:21:23:51:bf:9b:ce:bb:20:c7:
         7f:0c:64:e8:76:6a:71:ac:51:53:54:52:ce:60:2d:e5:7e:12:
         47:c9:c9:f1:9a:e9:9a:5e:0f:9b:09:21:6d:46:ea:45:b2:f2:
         59:3f:f0:e5:37:16:82:96:59:10:bd:57:64:3e:fe:5c:6a:22:
         49:1a:ef:f1:7a:c8:a5:cc:e9:17:56:7f:c6:55:77:4b:62:0c:
         1e:04:80:fa:dc:34:f8:22:d2:9f:d4:1a:ab:a2:65:7f:a1:c1:
         72:db:28:72:64:a7:4a:ee:59:1e:cc:f9:7b:1b:f2:05:99:eb:
         9f:18:66:50:e7:88:13:26:fd:36:9d:09:e6:ab:95:c2:6a:45:
         09:38:bc:47:22:68:6e:c6:9a:8e:b7:c6:f5:60:bb:dd:28:b5:
         f3:e5:ad:10:b1:d9:ec:1a:1e:91:98:b1:5e:c6:bb:ed:02:04:
         d9:e0:27:47:c4:c0:15:3d:85:7d:a3:18:32:08:ff:3d:b8:e4:
         33:61:31:d9:ea:2d:ee:a9:7c:4f:6a:1d:4f:1b:d0:36:c1:41:
         c4:19:c8:19:f5:ae:06:34:41:bc:78:53:92:9e:54:b6:46:da:
         1d:50:bc:2d:b3:12:b4:94:f6:10:60:5f:07:79:44:60:4c:0d:
         91:ce:3b:1b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUale/X3CGVV3D1f/AHKRmOtI1picwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI5NEQyQUYwNEY4NzI4RUEyNjA4RDlFRDZGQjZDMzZD
MjlCNkFBRDAeFw0yNDExMDUxMjUwMDBaFw0yNTExMDQxMjU1MDBaMDMxMTAvBgNV
BAMTKDMyRkUyQUVDRTVEODJFODAzM0M1MDExRjIyMDY4MjZDODI1ODVENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeHymzKHfXf0aKAD0treHuwCZW
cXaKW0yIOpiQlM9XdgI4gfhqkhQ90hcfLzpmSkxmAc3f0JiIGHvDzQv8uwhJadNl
T+lhgJmFjXj3oRL9Bu5Lw898tC2TMTLc1QzbbNi0H166RFwcNykTj58H7aNPe6nh
f1rsajqHycYYkuBzAp/GVhXobZ68gZKMBtkxIjeik7RQBrkrlfbKe1lH3pzFppXj
DFQ4XFRl5WP6igwe4vjA7fv92hluhlYVgjyIGzJ+bK6hVRjL7iGxuI/4ATv91DXE
+cQ8t3zqLPT/2g/LIdIZJie6PhqUHMGHCEq8Pt3OTXmppWPe3ZD7ENL/tAN5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMv4q7OXYLoAzxQEfIgaCbIJYXVkwHwYDVR0j
BBgwFoAUu5TSrwT4co6iYI2e1vtsNsKbaq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzRFOVpHNDd6V1FqanpCRDlCaXFWSFRza0tpMnpSV3R3MTN5Q0VDR0Vx
ZXQvMC9CQjk0RDJBRjA0Rjg3MjhFQTI2MDhEOUVENkZCNkMzNkMyOUI2QUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCOTREMkFGMDRGODcyOEVB
MjYwOEQ5RUQ2RkI2QzM2QzI5QjZBQUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RTlaRzQ3eldRamp6QkQ5QmlxVkhUc2tLaTJ6Uld0dzEzeUNFQ0dFcWV0LzAv
MzIzODMwMzQzYTM1MzU2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzkzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARV5DANBgkqhkiG9w0BAQsFAAOCAQEATVmVopS0
fRJ2ISNRv5vOuyDHfwxk6HZqcaxRU1RSzmAt5X4SR8nJ8Zrpml4PmwkhbUbqRbLy
WT/w5TcWgpZZEL1XZD7+XGoiSRrv8XrIpczpF1Z/xlV3S2IMHgSA+tw0+CLSn9Qa
q6Jlf6HBctsocmSnSu5ZHsz5exvyBZnrnxhmUOeIEyb9Np0J5quVwmpFCTi8RyJo
bsaajrfG9WC73Si18+WtELHZ7BoekZixXsa77QIE2eAnR8TAFT2FfaMYMgj/Pbjk
M2Ex2eot7ql8T2odTxvQNsFBxBnIGfWuBjRBvHhTkp5UtkbaHVC8LbMStJT2EGBf
B3lEYEwNkc47Gw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:04 2024 by rpki-client on console-fra.rpki-client.org