Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/323830343a366536383a3a2f33322d3334203d3e20323730353935.roa
File:                     323830343a366536383a3a2f33322d3334203d3e20323730353935.roa (raw, json)
Hash identifier:          HyyavmD9qvudJe0iWGW/1RzJxfSK7TJrNXDxoQ6kzJE=
Subject key identifier:   02:F9:7A:D1:E4:76:CD:DA:F9:6D:9F:C9:47:50:48:13:97:1D:EF:AA
Certificate issuer:       /CN=14F987C7F3964A2F6A098312E90B376D61A9AA2C
Certificate serial:       16C4907EB520DC185DF6B09B9C7E19A57B5142FF
Authority key identifier: 14:F9:87:C7:F3:96:4A:2F:6A:09:83:12:E9:0B:37:6D:61:A9:AA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/323830343a366536383a3a2f33322d3334203d3e20323730353935.roa
Signing time:             Thu 04 Apr 2024 15:39:43 +0000
ROA not before:           Thu 04 Apr 2024 15:34:43 +0000
ROA not after:            Thu 03 Apr 2025 15:39:43 +0000
asID:                     270595
IP address blocks:        2804:6e68::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.crl
                          rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 23:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c4:90:7e:b5:20:dc:18:5d:f6:b0:9b:9c:7e:19:a5:7b:51:42:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F987C7F3964A2F6A098312E90B376D61A9AA2C
        Validity
            Not Before: Apr  4 15:34:43 2024 GMT
            Not After : Apr  3 15:39:43 2025 GMT
        Subject: CN=02F97AD1E476CDDAF96D9FC947504813971DEFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:55:1b:8a:b4:12:c8:98:da:88:d0:62:72:
                    35:03:99:b7:b1:4e:e0:4e:a4:89:01:a6:3d:53:38:
                    0f:7f:ac:52:d5:2d:07:02:31:d6:49:7b:f6:1c:c2:
                    ce:d2:25:96:0d:c3:c5:24:70:0e:d2:c6:54:d3:54:
                    e2:4b:37:79:2c:5b:90:96:fa:56:0d:95:2b:c6:4c:
                    46:75:cd:1c:db:e6:81:c2:e8:97:49:0d:6e:1b:d1:
                    9d:b6:9d:ec:c7:51:63:17:68:34:76:73:f7:23:44:
                    6b:f0:31:35:b8:66:3e:08:5e:3b:71:73:90:46:39:
                    92:ca:ef:e7:7a:76:6a:d7:a0:31:65:85:56:eb:a1:
                    35:a0:b7:d9:ae:cd:7b:5b:7a:73:c9:35:43:9c:53:
                    16:90:fd:2c:e3:dd:d9:bb:20:80:00:35:7d:31:9c:
                    d5:9b:96:e6:b2:c3:73:c6:bc:13:13:e5:5a:eb:c3:
                    90:43:40:35:55:33:36:36:61:65:bc:2e:3f:34:97:
                    d1:07:10:fb:e6:70:87:eb:86:2b:1a:28:fd:7a:19:
                    46:f7:79:62:cd:61:a9:de:7c:c5:59:ea:5d:22:4f:
                    a0:81:ea:04:64:17:17:92:4c:22:c2:e9:f8:0a:5c:
                    e5:6b:e7:15:f6:78:fc:4b:3f:11:88:9d:b3:66:44:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F9:7A:D1:E4:76:CD:DA:F9:6D:9F:C9:47:50:48:13:97:1D:EF:AA
            X509v3 Authority Key Identifier:
                keyid:14:F9:87:C7:F3:96:4A:2F:6A:09:83:12:E9:0B:37:6D:61:A9:AA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/323830343a366536383a3a2f33322d3334203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:8f:de:f6:a1:05:c1:fd:dd:be:72:75:b8:ab:31:50:4a:73:
         f3:ed:56:b7:0b:3f:82:2f:33:05:ce:95:b3:d1:d3:72:49:2f:
         f5:99:b2:ad:4b:fd:af:78:64:10:24:cd:3c:db:3b:db:5d:63:
         b3:8c:7d:13:a4:f4:8e:83:18:fd:31:09:89:8e:3f:be:07:5d:
         4b:db:fa:99:e5:c6:a1:81:b8:ac:77:a3:f2:2b:24:33:e3:c3:
         e4:24:b7:26:0b:ff:3f:ea:ea:9d:62:67:95:52:6e:c3:d9:cd:
         32:dd:16:ba:4e:5f:da:4e:f4:95:02:a3:ad:80:ad:12:1c:cf:
         f8:85:9d:4c:0f:11:5c:5a:dc:bd:64:1d:a6:b5:9d:7e:c5:b2:
         61:9f:a5:5b:c7:a4:c1:04:83:39:49:cc:28:cb:85:5f:9b:18:
         91:0d:01:bd:24:4a:67:20:58:7c:8b:0d:75:05:a1:ce:76:b3:
         32:0b:37:52:04:b0:6f:dd:41:1b:4e:23:7b:75:74:ec:46:0a:
         9e:4c:de:14:82:5b:aa:e7:d8:72:77:32:19:05:c3:3f:e2:2e:
         46:52:c4:89:04:3a:ed:88:d7:d1:61:14:72:1c:44:b5:b3:32:
         b1:8f:f3:fc:47:9e:f0:b2:ee:95:21:2d:9b:5e:a4:a0:9a:8c:
         37:29:e3:bf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFsSQfrUg3Bhd9rCbnH4ZpXtRQv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGOTg3QzdGMzk2NEEyRjZBMDk4MzEyRTkwQjM3NkQ2
MUE5QUEyQzAeFw0yNDA0MDQxNTM0NDNaFw0yNTA0MDMxNTM5NDNaMDMxMTAvBgNV
BAMTKDAyRjk3QUQxRTQ3NkNEREFGOTZEOUZDOTQ3NTA0ODEzOTcxREVGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/lUbirQSyJjaiNBicjUDmbex
TuBOpIkBpj1TOA9/rFLVLQcCMdZJe/Ycws7SJZYNw8UkcA7SxlTTVOJLN3ksW5CW
+lYNlSvGTEZ1zRzb5oHC6JdJDW4b0Z22nezHUWMXaDR2c/cjRGvwMTW4Zj4IXjtx
c5BGOZLK7+d6dmrXoDFlhVbroTWgt9muzXtbenPJNUOcUxaQ/Szj3dm7IIAANX0x
nNWbluayw3PGvBMT5Vrrw5BDQDVVMzY2YWW8Lj80l9EHEPvmcIfrhisaKP16GUb3
eWLNYanefMVZ6l0iT6CB6gRkFxeSTCLC6fgKXOVr5xX2ePxLPxGInbNmRA+1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAvl60eR2zdr5bZ/JR1BIE5cd76owHwYDVR0j
BBgwFoAUFPmHx/OWSi9qCYMS6Qs3bWGpqiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhZM1lDRFgzN3g5dkxUR1NNNHhtOHBTcW5GNWdVWjU4d3U1UUhKQ3FS
VDgvMS8xNEY5ODdDN0YzOTY0QTJGNkEwOTgzMTJFOTBCMzc2RDYxQTlBQTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0Rjk4N0M3RjM5NjRBMkY2
QTA5ODMxMkU5MEIzNzZENjFBOUFBMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoWTNZQ0RYMzd4OXZMVEdTTTR4bThwU3FuRjVnVVo1OHd1NVFISkNxUlQ4LzEv
MzIzODMwMzQzYTM2NjUzNjM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMw
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARuaDANBgkqhkiG9w0BAQsFAAOCAQEATY/e9qEF
wf3dvnJ1uKsxUEpz8+1Wtws/gi8zBc6Vs9HTckkv9ZmyrUv9r3hkECTNPNs7211j
s4x9E6T0joMY/TEJiY4/vgddS9v6meXGoYG4rHej8iskM+PD5CS3Jgv/P+rqnWJn
lVJuw9nNMt0Wuk5f2k70lQKjrYCtEhzP+IWdTA8RXFrcvWQdprWdfsWyYZ+lW8ek
wQSDOUnMKMuFX5sYkQ0BvSRKZyBYfIsNdQWhznazMgs3UgSwb91BG04je3V07EYK
nkzeFIJbqufYcncyGQXDP+IuRlLEiQQ67YjX0WEUchxEtbMysY/z/Eee8LLulSEt
m16koJqMNynjvw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 01:03:17 2024 by rpki-client on console-fra.rpki-client.org