Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/323830343a3831343a3a2f33322d313238203d3e20323632373737.roa
File:                     323830343a3831343a3a2f33322d313238203d3e20323632373737.roa (raw, json)
Hash identifier:          cOXxJ1dxDXKN1d6ISNDFPAN9gFRuDlin9TOcWicnOQY=
Subject key identifier:   DE:10:AD:F9:A6:C5:4D:C0:CE:02:02:83:53:BD:27:34:8F:BF:D6:30
Certificate issuer:       /CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
Certificate serial:       0A08E34A6F14579F17D74914850D8AC0CA05DFD0
Authority key identifier: 47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/323830343a3831343a3a2f33322d313238203d3e20323632373737.roa
Signing time:             Thu 04 Apr 2024 05:45:36 +0000
ROA not before:           Thu 04 Apr 2024 05:40:36 +0000
ROA not after:            Thu 03 Apr 2025 05:45:36 +0000
asID:                     262777
IP address blocks:        2804:814::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:08:e3:4a:6f:14:57:9f:17:d7:49:14:85:0d:8a:c0:ca:05:df:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
        Validity
            Not Before: Apr  4 05:40:36 2024 GMT
            Not After : Apr  3 05:45:36 2025 GMT
        Subject: CN=DE10ADF9A6C54DC0CE02028353BD27348FBFD630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:8a:7c:5b:a1:82:da:d6:7c:10:9d:dd:64:
                    b7:ff:2e:77:c4:69:a3:70:78:9d:3f:48:59:84:91:
                    2f:5c:8d:4f:ac:6d:e0:c6:ef:c6:86:f7:eb:6b:cc:
                    ab:49:3f:2a:d2:da:c1:50:fc:9f:d2:8b:c6:d9:25:
                    78:73:c6:39:8d:82:2b:11:31:34:31:c9:91:0c:bf:
                    f4:61:c6:ec:e6:d5:fd:8c:7e:43:2d:dd:ce:99:af:
                    96:46:87:d0:a8:84:f9:9b:f4:33:05:5b:7c:22:9d:
                    b0:af:3c:4c:c3:9c:0f:8d:d9:de:1f:07:8a:d3:5f:
                    e2:8b:2a:c9:f5:d7:c6:f2:bd:56:72:38:70:47:bd:
                    10:cf:76:ec:7b:6d:98:85:6c:e7:76:b1:d0:74:43:
                    66:eb:f7:59:b1:83:bb:c9:e4:09:b9:0b:c2:89:52:
                    8b:d5:85:3d:1c:9f:f0:00:71:f9:9e:77:77:c2:cb:
                    22:ed:a7:c9:df:40:50:a5:11:fc:c6:6f:df:5a:87:
                    75:29:78:18:0c:a2:e3:ae:d6:b3:3a:4a:10:04:e5:
                    d1:49:5d:d1:5e:ca:b1:6c:e5:c9:36:59:1c:4b:f2:
                    35:10:65:90:0e:e7:af:9a:ec:1e:ca:55:c0:d8:b7:
                    bc:ec:54:98:7a:fa:93:cc:31:be:20:3f:e3:8f:23:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:10:AD:F9:A6:C5:4D:C0:CE:02:02:83:53:BD:27:34:8F:BF:D6:30
            X509v3 Authority Key Identifier:
                keyid:47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/323830343a3831343a3a2f33322d313238203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:814::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:f7:73:b9:ef:ce:09:c0:96:36:a5:38:fe:ce:8c:b5:df:
         6d:c5:d0:80:9d:7b:d0:20:b7:9d:df:65:bb:94:87:76:b9:8d:
         a9:d8:3c:45:cf:29:18:6f:0b:a5:28:9d:22:08:48:cc:3c:87:
         7b:39:0c:cb:1a:ae:c5:c6:f4:6f:39:22:32:2b:8b:ca:7f:83:
         33:2a:29:ef:49:93:35:3d:fa:90:f9:1d:18:74:77:ef:8e:40:
         05:db:09:5d:af:5c:01:ec:32:2d:d4:07:a0:b2:0a:c9:7e:f3:
         82:56:bc:60:ae:f0:13:ff:d4:17:a8:f9:38:31:05:68:1d:b2:
         34:5a:b0:f6:ec:d6:fc:84:f7:1c:39:f0:6a:77:e8:59:24:26:
         9a:cc:07:3b:4f:c3:34:04:0e:58:db:0c:8c:c9:64:29:38:1c:
         d1:ab:a6:21:e8:36:c9:ad:61:b2:0b:c1:39:95:2b:9a:cd:2d:
         b9:a1:43:bd:8b:0e:1a:d4:47:6c:d8:80:01:70:d3:db:f7:bd:
         42:c3:ed:c4:f8:7c:63:d3:96:38:d2:84:d9:2f:2c:91:6e:a7:
         e0:2b:04:0e:0d:9d:c6:61:a9:11:0e:50:7c:44:eb:91:04:87:
         8d:f5:7f:bd:50:3f:9d:c0:5f:f2:3e:dd:f7:46:19:df:51:da:
         e7:41:3f:19
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCgjjSm8UV58X10kUhQ2KwMoF39AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3QkYwQUVFMUE2N0JGNTlBNjhGNTE2OTRBQjQyNUYw
QzNCN0U0ODAeFw0yNDA0MDQwNTQwMzZaFw0yNTA0MDMwNTQ1MzZaMDMxMTAvBgNV
BAMTKERFMTBBREY5QTZDNTREQzBDRTAyMDI4MzUzQkQyNzM0OEZCRkQ2MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aIp8W6GC2tZ8EJ3dZLf/LnfE
aaNweJ0/SFmEkS9cjU+sbeDG78aG9+trzKtJPyrS2sFQ/J/Si8bZJXhzxjmNgisR
MTQxyZEMv/Rhxuzm1f2MfkMt3c6Zr5ZGh9CohPmb9DMFW3winbCvPEzDnA+N2d4f
B4rTX+KLKsn118byvVZyOHBHvRDPdux7bZiFbOd2sdB0Q2br91mxg7vJ5Am5C8KJ
UovVhT0cn/AAcfmed3fCyyLtp8nfQFClEfzGb99ah3UpeBgMouOu1rM6ShAE5dFJ
XdFeyrFs5ck2WRxL8jUQZZAO56+a7B7KVcDYt7zsVJh6+pPMMb4gP+OPIzojAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3hCt+abFTcDOAgKDU70nNI+/1jAwHwYDVR0j
BBgwFoAUR3vwruGme/WaaPUWlKtCXww7fkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FVUzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpN
S2IvMi80NzdCRjBBRUUxQTY3QkY1OUE2OEY1MTY5NEFCNDI1RjBDM0I3RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3N0JGMEFFRTFBNjdCRjU5
QTY4RjUxNjk0QUI0MjVGMEMzQjdFNDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhVVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzIv
MzIzODMwMzQzYTM4MzEzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzczNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQIFDANBgkqhkiG9w0BAQsFAAOCAQEAShL3c7nv
zgnAljalOP7OjLXfbcXQgJ170CC3nd9lu5SHdrmNqdg8Rc8pGG8LpSidIghIzDyH
ezkMyxquxcb0bzkiMiuLyn+DMyop70mTNT36kPkdGHR3745ABdsJXa9cAewyLdQH
oLIKyX7zgla8YK7wE//UF6j5ODEFaB2yNFqw9uzW/IT3HDnwanfoWSQmmswHO0/D
NAQOWNsMjMlkKTgc0aumIeg2ya1hsgvBOZUrms0tuaFDvYsOGtRHbNiAAXDT2/e9
QsPtxPh8Y9OWONKE2S8skW6n4CsEDg2dxmGpEQ5QfETrkQSHjfV/vVA/ncBf8j7d
90YZ31Ha50E/GQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org