Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a3a2f33322d3438203d3e20323635393439.roa
File:                     323830343a343034383a3a2f33322d3438203d3e20323635393439.roa (raw, json)
Hash identifier:          wjV7CVfxSzn52g2DAXR8VzpWVprWic4hQDXNLakOsKM=
Subject key identifier:   F9:47:3D:07:BE:09:13:F1:E0:12:0B:2E:70:FB:C5:F5:B6:84:EA:B6
Certificate issuer:       /CN=0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC
Certificate serial:       274771286ACFA379EC0E6ABFD04D724F89175B95
Authority key identifier: 0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a3a2f33322d3438203d3e20323635393439.roa
Signing time:             Tue 23 Apr 2024 19:03:46 +0000
ROA not before:           Tue 23 Apr 2024 18:58:46 +0000
ROA not after:            Tue 22 Apr 2025 19:03:46 +0000
asID:                     265949
IP address blocks:        2804:4048::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 01:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:47:71:28:6a:cf:a3:79:ec:0e:6a:bf:d0:4d:72:4f:89:17:5b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC
        Validity
            Not Before: Apr 23 18:58:46 2024 GMT
            Not After : Apr 22 19:03:46 2025 GMT
        Subject: CN=F9473D07BE0913F1E0120B2E70FBC5F5B684EAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:b8:5d:e2:29:45:38:12:bd:3f:0a:47:a9:
                    7b:cf:f0:df:f9:00:ae:ca:d0:d1:50:18:9b:1d:01:
                    3d:10:77:1d:a9:7b:7f:ea:53:da:9a:ba:57:fd:9e:
                    cf:2f:53:05:10:98:92:e6:1f:1c:05:e5:ba:86:c8:
                    d3:4f:cf:84:50:76:c2:10:54:7b:37:63:34:5e:7a:
                    e7:b0:4f:70:cb:bb:bb:34:7d:97:6f:ab:1d:4b:86:
                    88:27:6b:4d:b5:a3:24:00:c1:eb:38:c4:dc:f1:bf:
                    cb:ab:de:6c:84:33:9c:5e:e7:b1:ee:3e:0f:bb:c3:
                    5d:b9:1e:54:a4:8e:df:70:57:1a:54:20:fc:49:79:
                    d1:b2:b4:b1:44:36:4c:6d:f2:68:35:e2:5d:b4:c2:
                    72:b5:e6:fc:a2:8a:e3:9f:6b:91:52:56:f8:40:0e:
                    27:38:12:e5:c4:4c:29:02:1a:c4:95:ed:cd:05:e5:
                    e0:ea:80:31:51:9e:e5:8c:a5:b6:2f:62:ad:d2:a3:
                    d5:4f:58:b2:ba:94:44:d0:8b:28:ac:bd:fa:36:6b:
                    94:a3:80:1f:47:ab:0f:e8:5c:9e:18:86:4f:3d:6f:
                    7c:17:48:0e:98:05:fa:85:f4:f0:f9:46:47:5e:1e:
                    da:b2:f7:08:02:b4:79:04:a2:b5:4c:87:d6:2b:cd:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:3D:07:BE:09:13:F1:E0:12:0B:2E:70:FB:C5:F5:B6:84:EA:B6
            X509v3 Authority Key Identifier:
                keyid:0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a3a2f33322d3438203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4048::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:1a:09:e9:a0:2d:fb:66:4a:e5:7f:fa:d7:10:31:10:8d:
         b0:b5:0a:f9:3b:a6:bf:ff:13:19:6d:e8:c0:1f:2d:d6:51:9e:
         ac:65:a7:9c:c7:ef:ae:a4:fa:00:1f:41:83:05:3b:d9:b3:df:
         1d:3a:65:c9:91:7d:ff:bc:b2:1c:de:c3:17:ee:ef:e1:c1:49:
         7f:b7:19:c7:98:ed:17:70:f7:c8:ab:eb:14:ad:52:c2:cc:22:
         18:0b:f1:a8:32:6c:51:95:2b:ac:cc:55:a8:f4:6f:b1:d4:b2:
         84:6c:d4:65:aa:e3:9c:ca:04:df:6c:78:b8:63:d4:d6:12:c1:
         27:54:11:28:04:e8:65:40:b9:c9:29:bc:dc:14:27:90:87:bb:
         6e:b9:36:01:02:d9:e4:1a:1c:82:fe:c7:7a:72:ac:a7:34:05:
         84:0c:cb:64:5e:d0:00:d9:0c:68:61:1d:6f:a0:e9:04:36:80:
         a4:6a:ad:53:8b:b0:3f:e3:08:57:5b:20:de:e4:88:f3:01:5b:
         a2:07:e7:4b:08:73:8e:00:45:f9:62:ce:90:67:76:b5:8e:02:
         9d:88:37:66:fc:8e:12:d6:ac:41:13:68:56:12:1a:bf:2a:89:
         4d:c8:f9:a4:01:d1:af:bf:9d:07:3d:51:e6:80:58:82:7c:98:
         a8:0b:f0:82
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ0dxKGrPo3nsDmq/0E1yT4kXW5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZDNTYwMkJCODk3RkZGQzQ3ODk3RUIzNjc2QkZFMUIz
MkNBRDRGQzAeFw0yNDA0MjMxODU4NDZaFw0yNTA0MjIxOTAzNDZaMDMxMTAvBgNV
BAMTKEY5NDczRDA3QkUwOTEzRjFFMDEyMEIyRTcwRkJDNUY1QjY4NEVBQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/Lhd4ilFOBK9PwpHqXvP8N/5
AK7K0NFQGJsdAT0Qdx2pe3/qU9qaulf9ns8vUwUQmJLmHxwF5bqGyNNPz4RQdsIQ
VHs3YzReeuewT3DLu7s0fZdvqx1Lhogna021oyQAwes4xNzxv8ur3myEM5xe57Hu
Pg+7w125HlSkjt9wVxpUIPxJedGytLFENkxt8mg14l20wnK15vyiiuOfa5FSVvhA
Dic4EuXETCkCGsSV7c0F5eDqgDFRnuWMpbYvYq3So9VPWLK6lETQiyisvfo2a5Sj
gB9Hqw/oXJ4Yhk89b3wXSA6YBfqF9PD5RkdeHtqy9wgCtHkEorVMh9YrzRbtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+Uc9B74JE/HgEgsucPvF9baE6rYwHwYDVR0j
BBgwFoAUD8VgK7iX//xHiX6zZ2v+GzLK1PwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pX
ZVovMC8wRkM1NjAyQkI4OTdGRkZDNDc4OTdFQjM2NzZCRkUxQjMyQ0FENEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGQzU2MDJCQjg5N0ZGRkM0
Nzg5N0VCMzY3NkJGRTFCMzJDQUQ0RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAv
MzIzODMwMzQzYTM0MzAzNDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARASDANBgkqhkiG9w0BAQsFAAOCAQEABP4aCemg
LftmSuV/+tcQMRCNsLUK+Tumv/8TGW3owB8t1lGerGWnnMfvrqT6AB9BgwU72bPf
HTplyZF9/7yyHN7DF+7v4cFJf7cZx5jtF3D3yKvrFK1SwswiGAvxqDJsUZUrrMxV
qPRvsdSyhGzUZarjnMoE32x4uGPU1hLBJ1QRKAToZUC5ySm83BQnkIe7brk2AQLZ
5Bocgv7HenKspzQFhAzLZF7QANkMaGEdb6DpBDaApGqtU4uwP+MIV1sg3uSI8wFb
ogfnSwhzjgBF+WLOkGd2tY4CnYg3ZvyOEtasQRNoVhIavyqJTcj5pAHRr7+dBz1R
5oBYgnyYqAvwgg==
-----END CERTIFICATE-----
Generated at Mon Jun 3 01:08:10 2024 by rpki-client on console-fra.rpki-client.org