Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a363336343a3a2f33322d3438203d3e20323639333538.roa
File:                     323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (raw, json)
Hash identifier:          rHAAXYRvgpSWFW4k8CaWfgfjx4viqExlRwaRLhnbx04=
Subject key identifier:   98:8B:9B:00:06:50:45:81:AA:4C:76:82:48:44:91:8D:60:9D:9B:88
Certificate issuer:       /CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
Certificate serial:       7B98754762314E656352E64FF8F85B0F6ACDF0EE
Authority key identifier: BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a363336343a3a2f33322d3438203d3e20323639333538.roa
Signing time:             Mon 27 May 2024 19:34:37 +0000
ROA not before:           Mon 27 May 2024 19:29:37 +0000
ROA not after:            Mon 26 May 2025 19:34:37 +0000
asID:                     269358
IP address blocks:        2804:6364::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:98:75:47:62:31:4e:65:63:52:e6:4f:f8:f8:5b:0f:6a:cd:f0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
        Validity
            Not Before: May 27 19:29:37 2024 GMT
            Not After : May 26 19:34:37 2025 GMT
        Subject: CN=988B9B0006504581AA4C76824844918D609D9B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:5a:17:2e:50:43:27:4b:68:b6:3e:fa:c4:
                    fc:e3:bf:e2:cd:f7:15:67:61:a9:f2:97:df:09:a5:
                    bb:18:0d:c1:04:4a:81:7f:d3:ba:89:38:aa:0e:b6:
                    06:55:ed:e4:c6:8e:fc:6f:75:cd:36:47:ec:be:63:
                    8d:4d:d7:10:a4:a4:ee:6c:83:12:e8:32:eb:ab:da:
                    9c:25:c9:f5:0e:7e:6d:32:e4:2e:2f:28:e2:e2:5b:
                    4a:22:37:53:f2:fd:41:9a:d7:5b:7a:1b:c9:55:98:
                    f8:0b:b1:eb:da:b7:20:d0:72:e3:ff:7e:ae:1c:45:
                    8e:84:1f:63:57:18:73:2d:a9:c6:f3:b8:f1:3c:ad:
                    4c:b6:13:e4:85:81:47:c3:77:19:b8:af:bd:ef:3e:
                    2c:51:27:15:55:a1:41:3d:d5:fd:b9:39:82:92:69:
                    fc:6f:7c:00:37:10:92:08:56:7d:86:77:35:66:fc:
                    82:7f:dd:ec:7f:11:89:c8:47:37:84:d8:0c:d5:85:
                    49:18:b1:72:d9:86:36:56:70:fa:72:1e:c7:60:29:
                    72:57:c8:d4:4f:55:32:39:42:51:1f:d9:0a:cd:82:
                    0b:12:91:93:8f:f0:b8:c3:52:0f:02:01:98:c2:c6:
                    25:06:0b:73:d7:56:9f:53:20:95:5f:16:97:2e:d4:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:9B:00:06:50:45:81:AA:4C:76:82:48:44:91:8D:60:9D:9B:88
            X509v3 Authority Key Identifier:
                keyid:BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a363336343a3a2f33322d3438203d3e20323639333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6364::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:ac:74:77:94:ad:39:91:7f:f7:8e:e9:4e:da:87:8b:9e:
         f1:9e:dc:53:cd:60:30:41:3e:bb:d6:97:2e:85:e1:1c:aa:15:
         59:63:ef:f3:da:ed:36:91:ee:cf:ca:0c:8a:18:17:a5:1f:c8:
         62:a5:bc:3c:d6:1a:90:61:86:b1:79:49:1d:d4:a7:12:60:5f:
         f2:7c:93:e3:df:f2:6f:d9:64:d0:98:2a:5f:9c:a0:fa:c6:2f:
         8f:8b:c1:25:e5:5c:22:d2:06:39:94:ff:e3:37:46:9b:ac:68:
         78:06:05:86:24:90:2e:f4:46:75:57:b9:63:38:00:11:95:3d:
         79:d0:97:d6:29:c5:31:2d:bf:7e:4f:47:97:e4:41:c3:4f:0a:
         ba:e7:90:08:57:02:e5:55:70:d5:bb:25:64:88:f4:f6:18:9b:
         bf:eb:c9:f5:23:57:35:e6:42:d4:1a:d2:07:7b:94:3c:1b:3b:
         ec:3e:b4:60:2f:59:e2:f2:1f:9c:0d:a3:cc:11:2b:b4:4d:2a:
         40:5c:4d:d4:9a:bd:a0:38:f7:a1:a4:32:ee:53:8d:01:e2:cc:
         98:21:34:53:a7:3e:fc:60:ef:4f:a8:ca:32:64:42:f9:5f:11:
         30:b7:d5:f5:2c:7f:ae:a1:66:fd:ce:fd:aa:29:0d:8d:eb:ec:
         3b:3a:97:64
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUe5h1R2IxTmVjUuZP+PhbD2rN8O4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4MkJFNTdFNEY3ODNGMTgxNEZDOUQ0QjZCMDNFNjkz
NzYxN0E0NzAeFw0yNDA1MjcxOTI5MzdaFw0yNTA1MjYxOTM0MzdaMDMxMTAvBgNV
BAMTKDk4OEI5QjAwMDY1MDQ1ODFBQTRDNzY4MjQ4NDQ5MThENjA5RDlCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpB1oXLlBDJ0totj76xPzjv+LN
9xVnYanyl98JpbsYDcEESoF/07qJOKoOtgZV7eTGjvxvdc02R+y+Y41N1xCkpO5s
gxLoMuur2pwlyfUOfm0y5C4vKOLiW0oiN1Py/UGa11t6G8lVmPgLsevatyDQcuP/
fq4cRY6EH2NXGHMtqcbzuPE8rUy2E+SFgUfDdxm4r73vPixRJxVVoUE91f25OYKS
afxvfAA3EJIIVn2GdzVm/IJ/3ex/EYnIRzeE2AzVhUkYsXLZhjZWcPpyHsdgKXJX
yNRPVTI5QlEf2QrNggsSkZOP8LjDUg8CAZjCxiUGC3PXVp9TIJVfFpcu1GIFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmIubAAZQRYGqTHaCSESRjWCdm4gwHwYDVR0j
BBgwFoAUvIK+V+T3g/GBT8nUtrA+aTdhekcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl
LzAvQkM4MkJFNTdFNEY3ODNGMTgxNEZDOUQ0QjZCMDNFNjkzNzYxN0E0Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQzgyQkU1N0U0Rjc4M0YxODE0
RkM5RDRCNkIwM0U2OTM3NjE3QTQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n
RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzIz
ODMwMzQzYTM2MzMzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5MzMz
NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARjZDANBgkqhkiG9w0BAQsFAAOCAQEABHqsdHeUrTmR
f/eO6U7ah4ue8Z7cU81gMEE+u9aXLoXhHKoVWWPv89rtNpHuz8oMihgXpR/IYqW8
PNYakGGGsXlJHdSnEmBf8nyT49/yb9lk0JgqX5yg+sYvj4vBJeVcItIGOZT/4zdG
m6xoeAYFhiSQLvRGdVe5YzgAEZU9edCX1inFMS2/fk9Hl+RBw08KuueQCFcC5VVw
1bslZIj09hibv+vJ9SNXNeZC1BrSB3uUPBs77D60YC9Z4vIfnA2jzBErtE0qQFxN
1Jq9oDj3oaQy7lONAeLMmCE0U6c+/GDvT6jKMmRC+V8RMLfV9Sx/rqFm/c79qikN
jevsOzqXZA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:54 2024 by rpki-client on console-ams.rpki-client.org