Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a646230303a3a2f34382d3438203d3e20323637333438.roa
File:                     323830343a346331343a646230303a3a2f34382d3438203d3e20323637333438.roa (raw, json)
Hash identifier:          L+j4EdwVCnK+5rUwnEdRF1HXSa9dtBo6z3FGVjRRRsc=
Subject key identifier:   86:DA:8E:9B:FD:19:CA:3D:72:20:9D:B3:23:E9:BA:FE:32:D6:8A:74
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       27B9DEB91E5E22C31ECAB575BF2A5D03E4BB6F14
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a646230303a3a2f34382d3438203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:48:10 +0000
ROA not before:           Wed 31 Jul 2024 17:43:10 +0000
ROA not after:            Wed 30 Jul 2025 17:48:10 +0000
asID:                     267348
IP address blocks:        2804:4c14:db00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b9:de:b9:1e:5e:22:c3:1e:ca:b5:75:bf:2a:5d:03:e4:bb:6f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:43:10 2024 GMT
            Not After : Jul 30 17:48:10 2025 GMT
        Subject: CN=86DA8E9BFD19CA3D72209DB323E9BAFE32D68A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:a2:38:3c:30:9e:9e:6d:3f:5a:3e:72:ef:
                    2b:4b:52:ef:ff:13:4a:4f:a4:d6:d6:43:22:93:7e:
                    8e:b6:e4:f0:08:40:50:dc:fc:df:dd:8b:f9:cf:f4:
                    a2:77:c0:12:b9:51:b3:28:58:0e:69:52:6a:f2:ba:
                    56:c9:7a:bb:9d:bb:7e:e7:f4:42:fc:0a:64:7b:83:
                    eb:a8:2e:e1:03:29:9f:95:23:76:00:a4:e4:ab:54:
                    83:d6:01:35:c9:d1:12:96:22:e3:6c:90:c4:29:12:
                    0b:d5:86:cf:a6:61:3f:5c:8d:c2:81:9a:8c:d0:07:
                    55:ad:bb:e8:a4:da:8f:69:7b:e7:e1:58:da:48:8c:
                    de:e1:b7:55:f0:08:fb:9e:72:1e:00:13:45:4d:d0:
                    99:8d:3d:54:27:bb:50:bb:31:eb:ed:4e:da:5d:fd:
                    9a:0a:c2:99:04:43:84:0f:67:9a:8e:69:1d:3b:83:
                    bc:e8:46:a9:cb:40:9a:78:c2:b5:5a:d3:a2:28:b2:
                    9f:dc:f4:24:e6:c1:8b:9b:47:94:56:f7:7d:6b:1a:
                    16:e8:b2:41:3f:d4:6c:c9:92:6b:bf:be:5d:88:c1:
                    91:15:14:5a:78:49:d1:ad:96:dd:c9:63:ee:6f:8c:
                    7f:c3:f8:dd:fe:be:36:db:26:12:2e:cd:7e:4e:3a:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DA:8E:9B:FD:19:CA:3D:72:20:9D:B3:23:E9:BA:FE:32:D6:8A:74
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/323830343a346331343a646230303a3a2f34382d3438203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c14:db00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:20:2c:84:8b:4a:a3:f3:66:7a:1e:46:d6:84:97:02:5f:
         b8:43:59:6b:bb:f8:a0:93:ef:22:e6:ed:c3:98:30:ce:ec:d1:
         9d:02:40:ed:b9:60:83:08:f7:d6:a1:8f:ef:0e:0a:97:a4:63:
         0f:fd:90:f6:ff:11:93:08:2e:81:bb:b5:a7:1e:d0:02:20:ba:
         29:d8:0e:10:bc:78:9d:00:06:0b:10:70:05:33:d3:6e:07:d1:
         58:84:8c:56:d0:19:1a:d8:ee:89:e7:1d:7a:6d:bf:4e:ae:06:
         e1:e8:5d:3e:05:a6:03:cf:e8:c5:e6:c5:da:89:d4:ac:dc:7c:
         c5:2e:31:df:86:fd:89:36:b7:e3:ed:4e:42:a3:c4:d3:63:59:
         c4:c6:da:6f:ac:9b:0d:42:d8:2b:88:6b:91:f0:70:61:aa:f6:
         e7:bc:6c:bf:0a:2b:ce:e9:a4:10:ad:94:0c:27:f9:bf:26:8e:
         70:5f:20:c5:24:de:1e:26:05:a1:33:b6:69:24:24:a1:08:3d:
         07:9a:e4:fc:fe:07:05:16:d9:33:cd:bf:9a:a8:2a:6e:d9:de:
         23:61:be:21:9c:f3:5e:ab:23:a1:03:63:05:ff:04:2b:e1:d6:
         43:06:df:13:ea:df:80:c1:4e:a5:89:02:58:79:77:5b:c4:ce:
         a9:19:66:fc
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUJ7neuR5eIsMeyrV1vypdA+S7bxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI4RDEyRjYxRjAyN0QyMjUwRUE1Mjc0OTc5MDRENjFC
RDgwREQ1ODAeFw0yNDA3MzExNzQzMTBaFw0yNTA3MzAxNzQ4MTBaMDMxMTAvBgNV
BAMTKDg2REE4RTlCRkQxOUNBM0Q3MjIwOURCMzIzRTlCQUZFMzJENjhBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKqI4PDCenm0/Wj5y7ytLUu//
E0pPpNbWQyKTfo625PAIQFDc/N/di/nP9KJ3wBK5UbMoWA5pUmryulbJerudu37n
9EL8CmR7g+uoLuEDKZ+VI3YApOSrVIPWATXJ0RKWIuNskMQpEgvVhs+mYT9cjcKB
mozQB1Wtu+ik2o9pe+fhWNpIjN7ht1XwCPuech4AE0VN0JmNPVQnu1C7MevtTtpd
/ZoKwpkEQ4QPZ5qOaR07g7zoRqnLQJp4wrVa06Iosp/c9CTmwYubR5RW931rGhbo
skE/1GzJkmu/vl2IwZEVFFp4SdGtlt3JY+5vjH/D+N3+vjbbJhIuzX5OOgzBAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUhtqOm/0Zyj1yIJ2zI+m6/jLWinQwHwYDVR0j
BBgwFoAUu40S9h8CfSJQ6lJ0l5BNYb2A3VgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR1ZFVqSnFISGc4UVFOQjhBZVZqYzFCU0JpQWpmQjJEdWFaeUNoemNI
Z0IvMC9CQjhEMTJGNjFGMDI3RDIyNTBFQTUyNzQ5NzkwNEQ2MUJEODBERDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCOEQxMkY2MUYwMjdEMjI1
MEVBNTI3NDk3OTA0RDYxQkQ4MERENTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0dWRVakpxSEhnOFFRTkI4QWVWamMxQlNCaUFqZkIyRHVhWnlDaHpjSGdCLzAv
MzIzODMwMzQzYTM0NjMzMTM0M2E2NDYyMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNzMzMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgETBTbADANBgkqhkiG9w0BAQsF
AAOCAQEAjqEgLISLSqPzZnoeRtaElwJfuENZa7v4oJPvIubtw5gwzuzRnQJA7blg
gwj31qGP7w4Kl6RjD/2Q9v8Rkwgugbu1px7QAiC6KdgOELx4nQAGCxBwBTPTbgfR
WISMVtAZGtjuiecdem2/Tq4G4ehdPgWmA8/oxebF2onUrNx8xS4x34b9iTa34+1O
QqPE02NZxMbab6ybDULYK4hrkfBwYar257xsvworzumkEK2UDCf5vyaOcF8gxSTe
HiYFoTO2aSQkoQg9B5rk/P4HBRbZM82/mqgqbtneI2G+IZzzXqsjoQNjBf8EK+HW
QwbfE+rfgMFOpYkCWHl3W8TOqRlm/A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:13 2024 by rpki-client on console-ams.rpki-client.org