Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383039303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383039303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          dYkFxGIlApQjV+prevjQDs3+iI6r1y27eJ/Sz1CFS80=
Subject key identifier:   BF:BA:88:1A:CB:17:EB:08:A0:45:D1:0D:D2:B2:ED:0C:59:19:7A:F7
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       6D58F48830F0FB413D1C7A711AC67E9CF242895B
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383039303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Sun 26 May 2024 13:34:09 +0000
ROA not before:           Sun 26 May 2024 13:29:09 +0000
ROA not after:            Sun 25 May 2025 13:34:09 +0000
asID:                     264479
IP address blocks:        2804:203c:8090::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:58:f4:88:30:f0:fb:41:3d:1c:7a:71:1a:c6:7e:9c:f2:42:89:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: May 26 13:29:09 2024 GMT
            Not After : May 25 13:34:09 2025 GMT
        Subject: CN=BFBA881ACB17EB08A045D10DD2B2ED0C59197AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:d4:8b:27:cb:d1:7f:46:7f:15:6a:a3:4c:
                    a4:af:50:59:f4:97:d9:63:ef:85:e3:10:a2:f7:da:
                    dc:60:04:9c:19:4e:c5:a1:b7:3a:07:a8:0e:93:b0:
                    1a:c8:fc:57:0f:73:00:b9:c3:42:45:32:a3:27:da:
                    c3:38:79:9e:21:1e:26:3c:13:a2:24:0b:b6:e7:67:
                    43:1b:d5:34:3f:e2:06:d3:3f:67:5f:3e:92:f2:54:
                    90:35:1c:fe:28:5f:2e:42:24:e4:c9:6d:c8:e9:9d:
                    63:a9:e8:1b:51:d1:a2:a5:1e:4c:fa:fb:f0:f0:bd:
                    28:d4:8f:67:9d:c7:0b:a0:8a:15:9d:46:21:a3:db:
                    ac:98:67:5d:4c:32:ed:63:92:cf:96:15:02:75:b6:
                    f2:4c:35:5a:91:fc:c0:d6:bd:8c:39:04:15:6a:bd:
                    66:42:03:14:e3:c3:96:36:bd:49:3e:ab:26:86:c2:
                    ef:c9:ef:4e:e5:d5:cc:75:af:4b:db:ab:19:5d:20:
                    92:9d:32:e9:2f:51:88:ae:31:30:13:3d:88:81:6a:
                    0d:a3:57:44:0c:7d:95:c3:5c:10:39:29:82:d2:58:
                    b4:57:9c:e5:47:5a:82:97:f5:c7:21:d0:2f:8b:8f:
                    4d:03:c3:1b:3b:35:26:eb:cf:25:9c:da:ff:e8:1b:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:88:1A:CB:17:EB:08:A0:45:D1:0D:D2:B2:ED:0C:59:19:7A:F7
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383039303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8090::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:72:3c:97:d6:5a:27:3b:04:4b:29:f1:8f:7a:62:0d:13:f7:
         d4:08:d5:4e:5d:2e:7e:e0:e8:2e:66:75:c2:0d:fa:f7:38:45:
         4d:a1:bb:ea:b5:a9:53:f7:cb:07:89:df:ea:f2:ad:83:a5:cb:
         e7:24:9f:30:54:c0:09:d7:72:50:35:92:ad:24:be:49:29:e6:
         fd:e8:19:c1:f6:2e:18:f5:00:e5:4f:55:9f:29:54:95:19:30:
         ab:37:70:e0:75:4e:ba:00:9e:09:c6:95:9d:f0:21:9a:95:ab:
         08:84:2d:fd:28:5a:f6:ab:4b:d6:f4:08:e4:ec:96:3d:b5:4b:
         70:68:31:8e:70:4e:82:64:23:27:49:74:08:f2:26:a0:94:ee:
         58:92:1a:c4:44:8c:1e:60:6d:09:c2:3f:ea:89:c2:52:45:46:
         58:f0:ff:55:ec:ea:ac:b6:13:6f:08:4e:6b:d1:a4:8e:86:ec:
         fb:0a:7f:3a:1e:d2:b9:0b:d2:28:c1:3b:a1:c8:07:74:98:a1:
         c7:ca:62:7f:63:5d:59:36:b2:b8:71:89:a2:1f:ed:19:8c:d6:
         bc:eb:8e:74:c3:27:13:a4:87:85:11:da:29:aa:ad:d1:77:e1:
         c3:e2:e4:d1:3a:7c:d1:89:23:0d:74:24:9c:24:14:8a:48:31:
         33:27:a0:5c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUbVj0iDDw+0E9HHpxGsZ+nPJCiVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCQzAwMENCMEE0NzhBNzBFNEZCQTU1MjIxN0YyNDJD
REYwN0FFOTAeFw0yNDA1MjYxMzI5MDlaFw0yNTA1MjUxMzM0MDlaMDMxMTAvBgNV
BAMTKEJGQkE4ODFBQ0IxN0VCMDhBMDQ1RDEwREQyQjJFRDBDNTkxOTdBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnNSLJ8vRf0Z/FWqjTKSvUFn0
l9lj74XjEKL32txgBJwZTsWhtzoHqA6TsBrI/FcPcwC5w0JFMqMn2sM4eZ4hHiY8
E6IkC7bnZ0Mb1TQ/4gbTP2dfPpLyVJA1HP4oXy5CJOTJbcjpnWOp6BtR0aKlHkz6
+/DwvSjUj2edxwugihWdRiGj26yYZ11MMu1jks+WFQJ1tvJMNVqR/MDWvYw5BBVq
vWZCAxTjw5Y2vUk+qyaGwu/J707l1cx1r0vbqxldIJKdMukvUYiuMTATPYiBag2j
V0QMfZXDXBA5KYLSWLRXnOVHWoKX9cch0C+Lj00Dwxs7NSbrzyWc2v/oG7GhAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUv7qIGssX6wigRdEN0rLtDFkZevcwHwYDVR0j
BBgwFoAUFrwADLCkeKcOT7pVIhfyQs3weukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMS8xNkJDMDAwQ0IwQTQ3OEE3MEU0RkJBNTUyMjE3RjI0MkNERjA3QUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QkMwMDBDQjBBNDc4QTcw
RTRGQkE1NTIyMTdGMjQyQ0RGMDdBRTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzEv
MzIzODMwMzQzYTMyMzAzMzYzM2EzODMwMzkzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzNDM0MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEIDyAkDANBgkqhkiG9w0BAQsF
AAOCAQEAb3I8l9ZaJzsESynxj3piDRP31AjVTl0ufuDoLmZ1wg369zhFTaG76rWp
U/fLB4nf6vKtg6XL5ySfMFTACddyUDWSrSS+SSnm/egZwfYuGPUA5U9VnylUlRkw
qzdw4HVOugCeCcaVnfAhmpWrCIQt/Sha9qtL1vQI5OyWPbVLcGgxjnBOgmQjJ0l0
CPImoJTuWJIaxESMHmBtCcI/6onCUkVGWPD/VezqrLYTbwhOa9Gkjobs+wp/Oh7S
uQvSKME7ocgHdJihx8pif2NdWTayuHGJoh/tGYzWvOuOdMMnE6SHhRHaKaqt0Xfh
w+Lk0Tp80YkjDXQknCQUikgxMyegXA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:26 2024 by rpki-client on console-ams.rpki-client.org