Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          tcibLM0UCsMBOaXcdKdP1Vu4ABnolO0d4J46A8gf9Iw=
Subject key identifier:   58:83:FD:D3:B4:91:A1:35:2B:71:40:FD:00:57:2C:AA:79:DC:CC:DB
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       277C312AB7FA4ED39AEFACB53B949B2DDF7AAF3F
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Thu 04 Apr 2024 18:26:01 +0000
ROA not before:           Thu 04 Apr 2024 18:21:01 +0000
ROA not after:            Thu 03 Apr 2025 18:26:01 +0000
asID:                     264479
IP address blocks:        2804:203c:8000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7c:31:2a:b7:fa:4e:d3:9a:ef:ac:b5:3b:94:9b:2d:df:7a:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Apr  4 18:21:01 2024 GMT
            Not After : Apr  3 18:26:01 2025 GMT
        Subject: CN=5883FDD3B491A1352B7140FD00572CAA79DCCCDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:f7:c4:b9:d8:3c:8d:0b:e4:3f:8a:63:80:
                    ff:e2:1c:f4:ef:71:42:27:cc:c2:45:87:f8:15:8b:
                    98:28:f9:2d:1c:33:42:70:89:15:01:07:cd:cf:18:
                    11:39:08:fe:66:c9:92:c0:8d:21:12:70:d3:5c:59:
                    84:4f:3a:80:9b:c4:c1:f5:58:30:dd:67:26:af:c2:
                    c0:37:b4:8e:89:01:c1:32:ff:86:b9:42:31:49:cd:
                    53:d6:75:b7:e4:c1:52:c2:be:28:a9:8e:ec:82:b7:
                    9b:79:10:3f:63:ec:1d:7c:d8:c5:d5:ac:b1:67:fa:
                    ce:d9:18:87:fb:5f:ca:19:16:28:9f:d1:47:f2:4e:
                    84:87:c8:45:b0:f0:f9:ff:b9:d2:18:10:e2:c0:a1:
                    78:df:bf:ec:74:6e:03:93:de:0e:97:aa:64:03:61:
                    ac:eb:89:6f:3f:be:75:9a:9d:b7:f3:fb:96:1b:82:
                    dd:7e:da:4d:a1:f3:45:b1:25:37:ea:d0:e4:b8:aa:
                    8f:0d:3b:f9:6f:9e:d0:f6:96:a5:d4:35:5b:57:cb:
                    06:78:33:23:e5:9a:38:f6:f4:81:6f:ee:af:b9:f5:
                    4c:0e:3e:7b:f8:de:a2:50:03:47:28:9d:f5:b3:fa:
                    b8:46:83:d4:cd:22:c9:ce:f2:dd:d3:09:97:b3:dd:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:83:FD:D3:B4:91:A1:35:2B:71:40:FD:00:57:2C:AA:79:DC:CC:DB
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:d6:b2:f0:76:82:8d:92:b7:88:7f:8f:2d:9f:db:b1:7c:
         fd:40:10:20:8a:02:9a:bc:3b:38:60:f4:49:24:3e:0e:f8:f0:
         84:19:26:ea:71:95:d3:c1:48:d8:66:2a:c1:70:ba:1c:3c:d7:
         a0:7f:0d:06:8e:77:cd:b2:df:e5:54:26:5a:45:5e:16:60:4f:
         e8:01:fd:bb:0f:85:2f:93:c5:bf:6e:24:62:7c:c6:6b:2f:c9:
         3f:8e:f5:d0:ba:27:08:ce:18:5a:25:d2:36:31:ab:bd:9d:49:
         93:c9:b3:29:a6:3d:bd:ed:6c:72:0c:d1:ea:14:14:0f:bb:44:
         18:e1:42:4a:f6:21:71:3a:6d:c6:25:22:0c:5d:70:9c:28:7f:
         8a:64:ca:af:81:5f:33:8f:65:11:58:70:35:45:5d:20:ac:cb:
         d0:41:e8:38:b8:dd:36:35:32:bb:a2:5d:8b:42:cd:cd:4a:f1:
         4a:82:6c:f2:28:07:f8:7a:5d:b8:11:73:8d:bc:51:e9:f2:6a:
         e9:3e:63:fa:0d:98:98:67:21:81:67:42:47:1d:ff:7c:a0:7b:
         99:d5:75:08:1e:43:d1:6a:11:a9:8b:f5:70:b5:14:c5:73:00:
         95:6e:da:a7:0a:c1:50:90:56:fc:1d:76:58:1b:1e:95:cf:4d:
         9a:af:55:fb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUJ3wxKrf6TtOa76y1O5SbLd96rz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCQzAwMENCMEE0NzhBNzBFNEZCQTU1MjIxN0YyNDJD
REYwN0FFOTAeFw0yNDA0MDQxODIxMDFaFw0yNTA0MDMxODI2MDFaMDMxMTAvBgNV
BAMTKDU4ODNGREQzQjQ5MUExMzUyQjcxNDBGRDAwNTcyQ0FBNzlEQ0NDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCffEudg8jQvkP4pjgP/iHPTv
cUInzMJFh/gVi5go+S0cM0JwiRUBB83PGBE5CP5myZLAjSEScNNcWYRPOoCbxMH1
WDDdZyavwsA3tI6JAcEy/4a5QjFJzVPWdbfkwVLCviipjuyCt5t5ED9j7B182MXV
rLFn+s7ZGIf7X8oZFiif0UfyToSHyEWw8Pn/udIYEOLAoXjfv+x0bgOT3g6XqmQD
YazriW8/vnWanbfz+5Ybgt1+2k2h80WxJTfq0OS4qo8NO/lvntD2lqXUNVtXywZ4
MyPlmjj29IFv7q+59UwOPnv43qJQA0confWz+rhGg9TNIsnO8t3TCZez3UtfAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUWIP907SRoTUrcUD9AFcsqnnczNswHwYDVR0j
BBgwFoAUFrwADLCkeKcOT7pVIhfyQs3weukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMS8xNkJDMDAwQ0IwQTQ3OEE3MEU0RkJBNTUyMjE3RjI0MkNERjA3QUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QkMwMDBDQjBBNDc4QTcw
RTRGQkE1NTIyMTdGMjQyQ0RGMDdBRTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzEv
MzIzODMwMzQzYTMyMzAzMzYzM2EzODMwMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzNDM0MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEIDyAADANBgkqhkiG9w0BAQsF
AAOCAQEAV7rWsvB2go2St4h/jy2f27F8/UAQIIoCmrw7OGD0SSQ+DvjwhBkm6nGV
08FI2GYqwXC6HDzXoH8NBo53zbLf5VQmWkVeFmBP6AH9uw+FL5PFv24kYnzGay/J
P4710LonCM4YWiXSNjGrvZ1Jk8mzKaY9ve1scgzR6hQUD7tEGOFCSvYhcTptxiUi
DF1wnCh/imTKr4FfM49lEVhwNUVdIKzL0EHoOLjdNjUyu6Jdi0LNzUrxSoJs8igH
+HpduBFzjbxR6fJq6T5j+g2YmGchgWdCRx3/fKB7mdV1CB5D0WoRqYv1cLUUxXMA
lW7apwrBUJBW/B12WBselc9Nmq9V+w==
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:58 2024 by rpki-client on console-ams.rpki-client.org