Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/323830343a346566383a3a2f33322d3335203d3e20323638323935.roa
File:                     323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (raw, json)
Hash identifier:          KH2A7Wc7RwfRHTZ+kr7I0kM0EH+wo8B7PW9IZp3Znlg=
Subject key identifier:   19:8A:55:2A:6F:2F:38:1C:06:A5:E1:FA:CF:BB:34:E7:83:F9:45:DC
Certificate issuer:       /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0
Certificate serial:       6A54426D913525090CFBF67C01998843C35CF41E
Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/323830343a346566383a3a2f33322d3335203d3e20323638323935.roa
Signing time:             Thu 04 Apr 2024 21:49:39 +0000
ROA not before:           Thu 04 Apr 2024 21:44:39 +0000
ROA not after:            Thu 03 Apr 2025 21:49:39 +0000
asID:                     268295
IP address blocks:        2804:4ef8::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl
                          rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:54:42:6d:91:35:25:09:0c:fb:f6:7c:01:99:88:43:c3:5c:f4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0
        Validity
            Not Before: Apr  4 21:44:39 2024 GMT
            Not After : Apr  3 21:49:39 2025 GMT
        Subject: CN=198A552A6F2F381C06A5E1FACFBB34E783F945DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:40:1d:86:c4:7b:c4:4c:9d:a6:9b:82:71:
                    d4:af:20:59:04:15:00:2f:f9:ee:80:4c:5e:4f:da:
                    eb:5d:fb:d8:e9:c8:57:9b:f2:ec:e9:c7:7a:4d:fa:
                    44:bb:8a:e1:58:e1:d6:75:54:da:3c:47:ab:3c:8a:
                    55:02:d8:9d:a3:b6:9d:1c:1f:66:16:63:49:9f:8a:
                    8e:c6:4b:be:5a:d1:f2:88:31:90:63:b0:cf:fd:33:
                    76:eb:2c:b6:ec:f2:5d:dc:f3:d2:93:83:b2:14:e9:
                    8a:d4:fe:81:c7:2e:81:f8:b5:1f:23:af:a8:62:64:
                    9c:e7:c6:f1:98:8d:74:08:8c:7b:e5:b5:56:1e:2a:
                    cf:87:1d:34:c3:ab:16:f2:4c:80:e8:5e:eb:9b:26:
                    aa:db:9b:4c:59:53:df:87:a7:bd:6b:44:1f:62:1d:
                    55:89:71:7d:6e:98:7d:70:b3:37:ee:9e:87:ee:c9:
                    02:e4:bf:9e:73:8c:c9:b1:6c:dd:9e:6e:1a:f5:03:
                    49:48:00:8b:8a:47:df:9a:3a:f0:5a:6c:fd:3c:34:
                    03:13:5d:76:46:cb:43:a9:79:37:f2:19:07:31:50:
                    3f:8b:5d:94:3d:74:2f:1e:88:e1:23:2d:d7:e6:f6:
                    34:96:32:70:9c:58:52:1a:c3:d1:2c:c2:50:d1:5d:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:55:2A:6F:2F:38:1C:06:A5:E1:FA:CF:BB:34:E7:83:F9:45:DC
            X509v3 Authority Key Identifier:
                keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/323830343a346566383a3a2f33322d3335203d3e20323638323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:e7:a5:2c:6d:49:9b:96:85:97:e4:3b:e3:95:1d:e2:dc:3a:
         a7:03:29:76:69:4e:60:2d:eb:d8:aa:57:b1:ed:f9:ad:d3:62:
         ff:0b:b5:11:5a:d2:c8:04:38:45:d1:f1:a8:b1:8d:6f:06:26:
         30:31:c7:8f:b4:32:26:11:0e:44:17:f7:b7:6d:35:e6:b6:96:
         09:b4:1e:ef:1e:c6:b0:be:25:77:81:0a:70:ec:96:18:91:26:
         bc:35:51:b9:71:31:97:39:2d:b0:32:28:d7:f9:b5:8a:1f:d2:
         3c:2b:88:af:f4:20:c5:cf:c7:09:24:7c:b3:4e:e4:02:8b:dd:
         2d:5c:ae:9c:7e:52:0e:59:e8:94:7b:5d:22:d4:67:80:b5:9b:
         28:83:47:6d:8b:3d:3c:04:ba:b0:40:85:56:70:2d:3a:33:ca:
         26:16:69:0d:ea:41:34:0c:da:81:9d:4f:14:1d:9e:e0:fc:1e:
         78:d7:f7:66:f7:f4:de:4a:89:ce:2d:f2:5f:9d:8f:7b:3c:75:
         8a:75:4a:fa:2d:f4:c8:d4:8f:a9:24:f7:d0:93:4a:05:c1:2c:
         ef:cf:d0:86:57:58:14:fa:9c:ba:9b:63:ca:0f:da:86:1d:62:
         fa:73:8f:a2:48:3a:d5:a4:c0:7f:73:98:28:58:e1:11:c9:87:
         a4:ee:b1:dd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUalRCbZE1JQkM+/Z8AZmIQ8Nc9B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF
RkY4RDFGMDAeFw0yNDA0MDQyMTQ0MzlaFw0yNTA0MDMyMTQ5MzlaMDMxMTAvBgNV
BAMTKDE5OEE1NTJBNkYyRjM4MUMwNkE1RTFGQUNGQkIzNEU3ODNGOTQ1REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUUAdhsR7xEydppuCcdSvIFkE
FQAv+e6ATF5P2utd+9jpyFeb8uzpx3pN+kS7iuFY4dZ1VNo8R6s8ilUC2J2jtp0c
H2YWY0mfio7GS75a0fKIMZBjsM/9M3brLLbs8l3c89KTg7IU6YrU/oHHLoH4tR8j
r6hiZJznxvGYjXQIjHvltVYeKs+HHTTDqxbyTIDoXuubJqrbm0xZU9+Hp71rRB9i
HVWJcX1umH1wszfunofuyQLkv55zjMmxbN2ebhr1A0lIAIuKR9+aOvBabP08NAMT
XXZGy0OpeTfyGQcxUD+LXZQ9dC8eiOEjLdfm9jSWMnCcWFIaw9EswlDRXa3bAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGYpVKm8vOBwGpeH6z7s054P5RdwwHwYDVR0j
BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI
cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy
RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJER3oxYzVBVjNZU3dHTnB1UkVGZHAxNkQ2NFhuZjR4cjRNcUVOTEdxSHJvLzEv
MzIzODMwMzQzYTM0NjU2NjM4M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM4
MzIzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARO+DANBgkqhkiG9w0BAQsFAAOCAQEA0OelLG1J
m5aFl+Q745Ud4tw6pwMpdmlOYC3r2KpXse35rdNi/wu1EVrSyAQ4RdHxqLGNbwYm
MDHHj7QyJhEORBf3t2015raWCbQe7x7GsL4ld4EKcOyWGJEmvDVRuXExlzktsDIo
1/m1ih/SPCuIr/Qgxc/HCSR8s07kAovdLVyunH5SDlnolHtdItRngLWbKINHbYs9
PAS6sECFVnAtOjPKJhZpDepBNAzagZ1PFB2e4PweeNf3Zvf03kqJzi3yX52Pezx1
inVK+i30yNSPqST30JNKBcEs78/QhldYFPqcuptjyg/ahh1i+nOPokg61aTAf3OY
KFjhEcmHpO6x3Q==
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:30 2024 by rpki-client on console-fra.rpki-client.org