Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
File:                     323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (raw, json)
Hash identifier:          0rXHvhyYGgZcjmPNhFz/lYRaSb45NNXeEYvVHGfQHjY=
Subject key identifier:   18:8D:E3:D4:79:9E:CE:BC:0E:B6:05:7C:84:53:41:A5:30:67:B1:28
Certificate issuer:       /CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
Certificate serial:       36EE77E380D949FB624236D0E9A4E4B27F8E7E80
Authority key identifier: 0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
Signing time:             Thu 04 Apr 2024 02:24:37 +0000
ROA not before:           Thu 04 Apr 2024 02:19:37 +0000
ROA not after:            Thu 03 Apr 2025 02:24:37 +0000
asID:                     263566
IP address blocks:        2804:f18::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl
                          rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ee:77:e3:80:d9:49:fb:62:42:36:d0:e9:a4:e4:b2:7f:8e:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
        Validity
            Not Before: Apr  4 02:19:37 2024 GMT
            Not After : Apr  3 02:24:37 2025 GMT
        Subject: CN=188DE3D4799ECEBC0EB6057C845341A53067B128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:34:24:58:95:d2:52:85:18:58:88:d5:7c:
                    6a:e8:84:34:e9:46:3a:a8:d3:e8:24:98:0d:31:b5:
                    96:cb:e1:31:79:bf:b4:9c:d4:47:54:49:73:c6:6e:
                    04:e4:59:98:4f:38:df:40:87:c9:1c:bd:ed:3d:ba:
                    41:6a:a4:1a:81:b9:c2:16:dd:69:f1:e5:24:26:c7:
                    b6:0c:3e:3d:53:b2:15:e0:6b:59:98:96:7e:8b:b9:
                    b6:75:47:45:39:a7:74:1c:e0:31:cf:f9:b8:b0:54:
                    c7:49:92:7f:34:9a:24:9e:e2:c4:75:3e:e9:8f:1e:
                    cf:38:66:99:0e:f8:69:71:59:25:77:04:ad:b5:fa:
                    3c:24:29:b3:69:b2:2f:c2:9b:49:14:57:a4:c9:80:
                    6d:b5:83:f0:50:aa:04:24:0d:55:d3:ed:88:8a:51:
                    28:77:b5:89:1c:bc:97:03:ff:94:8e:ed:8c:ac:7d:
                    8d:44:be:fe:8a:88:2a:b3:81:b7:d0:47:b0:86:ef:
                    1a:b3:4d:6d:33:97:71:4f:df:7c:3e:d5:07:89:6a:
                    1f:0b:4f:d1:50:56:a0:01:dd:4b:dd:5d:d2:a1:17:
                    1d:d7:82:76:4d:ec:83:80:62:8d:7f:f3:75:2a:e6:
                    c5:55:6b:67:ba:39:db:df:3c:82:78:1b:85:8d:01:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8D:E3:D4:79:9E:CE:BC:0E:B6:05:7C:84:53:41:A5:30:67:B1:28
            X509v3 Authority Key Identifier:
                keyid:0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:26:63:32:4b:fb:c5:a6:ae:96:db:fa:63:c8:f5:07:b0:25:
         4e:57:b6:03:64:66:04:a4:6e:3d:f6:ab:e9:a0:49:44:4f:b9:
         d1:db:ee:89:f3:a4:96:1c:e6:91:f8:c9:97:71:e1:5c:c3:f6:
         0b:9a:9a:f0:c1:2c:ed:87:0f:44:5f:c5:41:48:94:7f:30:59:
         ba:d6:36:b2:bd:33:3e:31:14:f5:af:0b:0e:6e:4a:b3:fb:4f:
         11:f3:c1:c4:dd:70:cb:44:a9:e9:10:e7:36:e0:d1:ed:36:0a:
         52:b7:f1:73:a5:c9:a0:d1:13:6d:12:8d:87:fb:0e:f5:f7:fd:
         7b:09:b2:91:45:92:22:9d:a5:93:f7:ad:e6:e3:3a:98:d8:ee:
         df:27:c6:17:74:32:cc:f7:fc:e7:65:c7:65:19:cf:04:58:4c:
         45:72:71:15:e6:0f:fe:fa:18:4a:64:97:ab:c6:aa:a1:7f:b6:
         e1:ed:97:f2:79:b8:24:8a:68:a8:63:54:af:b7:19:e4:ce:8e:
         ea:34:60:93:dc:99:6f:7c:2f:46:ef:67:b1:8a:56:1c:ed:b8:
         0b:e5:34:31:81:48:3d:78:c2:49:db:fe:39:95:f4:7a:44:0c:
         21:8c:8d:76:8b:3a:94:27:41:80:00:e2:72:6a:a1:6d:f7:72:
         e7:5c:eb:88
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNu5344DZSftiQjbQ6aTksn+OfoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3M0FGQ0YwNzlCMDVEREE1NUI5RjkwOUNDOTMwNjNC
N0QxQzFBMjAeFw0yNDA0MDQwMjE5MzdaFw0yNTA0MDMwMjI0MzdaMDMxMTAvBgNV
BAMTKDE4OERFM0Q0Nzk5RUNFQkMwRUI2MDU3Qzg0NTM0MUE1MzA2N0IxMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZDQkWJXSUoUYWIjVfGrohDTp
Rjqo0+gkmA0xtZbL4TF5v7Sc1EdUSXPGbgTkWZhPON9Ah8kcve09ukFqpBqBucIW
3Wnx5SQmx7YMPj1TshXga1mYln6LubZ1R0U5p3Qc4DHP+biwVMdJkn80miSe4sR1
PumPHs84ZpkO+GlxWSV3BK21+jwkKbNpsi/Cm0kUV6TJgG21g/BQqgQkDVXT7YiK
USh3tYkcvJcD/5SO7YysfY1Evv6KiCqzgbfQR7CG7xqzTW0zl3FP33w+1QeJah8L
T9FQVqAB3UvdXdKhFx3XgnZN7IOAYo1/83Uq5sVVa2e6OdvfPIJ4G4WNAXN7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUGI3j1HmezrwOtgV8hFNBpTBnsSgwHwYDVR0j
BBgwFoAUD3OvzwebBd2lW5+QnMkwY7fRwaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw
c2QvMS8wRjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzNBRkNGMDc5QjA1RERB
NTVCOUY5MDlDQzkzMDYzQjdEMUMxQTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0YWZYcmVQZVltYlJDMmlpZVVOWHliRlV3cHdlOHFudHZ2MmkyckpBcHNkLzEv
MzIzODMwMzQzYTY2MzEzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM1
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDxgwDQYJKoZIhvcNAQELBQADggEBAJ4mYzJL+8Wm
rpbb+mPI9QewJU5XtgNkZgSkbj32q+mgSURPudHb7onzpJYc5pH4yZdx4VzD9gua
mvDBLO2HD0RfxUFIlH8wWbrWNrK9Mz4xFPWvCw5uSrP7TxHzwcTdcMtEqekQ5zbg
0e02ClK38XOlyaDRE20SjYf7DvX3/XsJspFFkiKdpZP3rebjOpjY7t8nxhd0Msz3
/Odlx2UZzwRYTEVycRXmD/76GEpkl6vGqqF/tuHtl/J5uCSKaKhjVK+3GeTOjuo0
YJPcmW98L0bvZ7GKVhztuAvlNDGBSD14wknb/jmV9HpEDCGMjXaLOpQnQYAA4nJq
oW33cudc64g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org