Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          K9IIg182fCD3BjrwtbHKfrj2fSW4erKdi0LFNmrA0Ik=
Subject key identifier:   6E:90:D0:9B:96:CD:6B:6B:7B:CD:8B:4B:2C:1B:1A:C7:32:8D:FC:80
Certificate issuer:       /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial:       4ED2F96A78CDA10B29AAF0B7F810D2C49E7F91C2
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Thu 04 Apr 2024 19:57:47 +0000
ROA not before:           Thu 04 Apr 2024 19:52:47 +0000
ROA not after:            Thu 03 Apr 2025 19:57:47 +0000
asID:                     268308
IP address blocks:        2804:4f28::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 04:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d2:f9:6a:78:cd:a1:0b:29:aa:f0:b7:f8:10:d2:c4:9e:7f:91:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
        Validity
            Not Before: Apr  4 19:52:47 2024 GMT
            Not After : Apr  3 19:57:47 2025 GMT
        Subject: CN=6E90D09B96CD6B6B7BCD8B4B2C1B1AC7328DFC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:1a:4b:d2:a5:f6:f5:70:a8:be:87:cc:42:
                    e6:42:ff:03:b0:da:94:6b:c1:5e:93:0b:bd:4c:5b:
                    34:8c:89:58:a5:e9:f7:5f:d7:3a:39:5e:7f:f7:12:
                    ca:25:f6:ad:54:c2:8b:88:44:e0:c0:ee:00:e1:f0:
                    d3:b0:9e:bd:0e:fa:1e:29:3f:cf:d3:22:25:7b:8f:
                    27:2d:b8:45:7b:4f:3c:f8:98:a1:23:f2:9a:71:b7:
                    a4:68:0a:90:65:b2:7e:74:36:4f:2b:c4:38:f5:6a:
                    43:8a:78:8a:65:79:6f:9e:a7:70:c9:e3:28:7b:eb:
                    14:10:eb:2f:aa:ae:9a:f2:86:f5:53:04:e4:4e:4e:
                    2f:7c:be:fc:e8:2e:d2:2d:15:94:04:de:c3:b7:8c:
                    a9:31:2d:08:f5:e4:d3:f3:14:81:d8:96:75:2a:b1:
                    54:db:f2:f5:f2:52:05:e4:ac:d2:f0:48:ab:cd:f1:
                    e3:7d:c5:99:88:a8:d5:35:44:33:84:11:e2:40:37:
                    39:4e:06:5b:d1:b4:b6:74:39:2a:cf:93:b0:c2:94:
                    60:5b:88:dc:e9:e8:3f:01:07:27:cc:f8:c7:e2:b6:
                    c9:bd:7c:41:b2:09:dc:22:90:49:6e:51:55:8b:f1:
                    e4:13:1f:bf:90:39:e5:f4:bb:7d:5a:fd:de:46:b6:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:90:D0:9B:96:CD:6B:6B:7B:CD:8B:4B:2C:1B:1A:C7:32:8D:FC:80
            X509v3 Authority Key Identifier:
                keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/33

    Signature Algorithm: sha256WithRSAEncryption
         94:19:44:3a:cc:4c:7a:35:5e:eb:28:d5:eb:02:de:36:0d:3d:
         88:c8:2d:be:8f:6f:b1:60:e3:20:5d:bd:5b:6e:34:ff:2e:1b:
         10:c7:09:08:5a:f9:23:8f:1e:87:1e:5d:d7:f4:8a:b5:b3:d9:
         8e:24:b7:0b:db:eb:fd:ac:3c:ff:cf:e7:dd:78:f2:c2:fa:66:
         1e:1e:cd:b5:86:7d:dc:fc:2e:61:1d:3b:cd:bd:e2:35:53:78:
         1c:8b:c5:00:42:24:cb:ec:18:d3:10:06:94:34:d8:a9:2b:9b:
         80:49:a0:b1:3a:a9:0b:3a:b2:7e:ed:30:7b:16:e8:4f:61:16:
         0f:f3:b6:05:8c:24:46:8c:7c:c4:de:9a:71:e7:01:31:9c:35:
         2f:92:0d:09:6d:f1:d2:10:f5:a5:cf:81:b5:97:dd:ae:04:b1:
         a7:ee:78:35:73:0b:11:91:aa:86:3e:47:f7:35:3a:8e:c7:31:
         51:e7:0d:eb:dd:4d:98:d2:1b:57:5d:74:8b:e7:a4:80:c8:89:
         c3:19:24:1b:bd:71:cb:28:fb:1e:1b:79:65:2a:5d:d5:50:f7:
         7f:16:7d:c6:9f:91:d8:5a:3f:c1:48:ce:25:32:44:ec:f7:a2:
         ce:5c:63:bc:0e:1b:fb:94:08:f3:58:77:47:77:55:9c:2d:f9:
         f0:6d:5d:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTtL5anjNoQspqvC3+BDSxJ5/kcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEOUQ4ODQwQTM5MzYzMjU1QkIyOEIwRDYwQkI0QUQz
QjlDMDhEOTAeFw0yNDA0MDQxOTUyNDdaFw0yNTA0MDMxOTU3NDdaMDMxMTAvBgNV
BAMTKDZFOTBEMDlCOTZDRDZCNkI3QkNEOEI0QjJDMUIxQUM3MzI4REZDODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+xpL0qX29XCovofMQuZC/wOw
2pRrwV6TC71MWzSMiVil6fdf1zo5Xn/3Esol9q1UwouIRODA7gDh8NOwnr0O+h4p
P8/TIiV7jyctuEV7Tzz4mKEj8ppxt6RoCpBlsn50Nk8rxDj1akOKeIpleW+ep3DJ
4yh76xQQ6y+qrpryhvVTBOROTi98vvzoLtItFZQE3sO3jKkxLQj15NPzFIHYlnUq
sVTb8vXyUgXkrNLwSKvN8eN9xZmIqNU1RDOEEeJANzlOBlvRtLZ0OSrPk7DClGBb
iNzp6D8BByfM+Mfitsm9fEGyCdwikEluUVWL8eQTH7+QOeX0u31a/d5GtsNrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbpDQm5bNa2t7zYtLLBsaxzKN/IAwHwYDVR0j
BBgwFoAUktnYhAo5NjJVuyiw1gu0rTucCNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMS85MkQ5RDg4NDBBMzkzNjMyNTVCQjI4QjBENjBCQjRBRDNCOUMwOEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyRDlEODg0MEEzOTM2MzI1
NUJCMjhCMEQ2MEJCNEFEM0I5QzA4RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzEv
MzIzODMwMzQzYTM0NjYzMjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzMzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARPKAAwDQYJKoZIhvcNAQELBQADggEBAJQZRDrM
THo1Xuso1esC3jYNPYjILb6Pb7Fg4yBdvVtuNP8uGxDHCQha+SOPHoceXdf0irWz
2Y4ktwvb6/2sPP/P59148sL6Zh4ezbWGfdz8LmEdO8294jVTeByLxQBCJMvsGNMQ
BpQ02Kkrm4BJoLE6qQs6sn7tMHsW6E9hFg/ztgWMJEaMfMTemnHnATGcNS+SDQlt
8dIQ9aXPgbWX3a4EsafueDVzCxGRqoY+R/c1Oo7HMVHnDevdTZjSG1dddIvnpIDI
icMZJBu9ccso+x4beWUqXdVQ938WfcafkdhaP8FIziUyROz3os5cY7wOG/uUCPNY
d0d3VZwt+fBtXZQ=
-----END CERTIFICATE-----
Generated at Thu Jun 27 07:58:04 2024 by rpki-client on console-fra.rpki-client.org