Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          5ppLhYcF0ZjjGrNVuz03swLwFE/6jgRtccP82s1Ap34=
Subject key identifier:   C4:AE:03:05:57:39:38:21:9F:89:E4:1D:2F:A5:4D:1A:58:78:9C:F2
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       6CA232D564FA6890DECD77DB526F607223553A76
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:39 +0000
ROA not before:           Sun 05 May 2024 21:35:39 +0000
ROA not after:            Sun 04 May 2025 21:40:39 +0000
asID:                     262393
IP address blocks:        2804:8c8:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a2:32:d5:64:fa:68:90:de:cd:77:db:52:6f:60:72:23:55:3a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:39 2024 GMT
            Not After : May  4 21:40:39 2025 GMT
        Subject: CN=C4AE0305573938219F89E41D2FA54D1A58789CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:79:d6:36:50:d2:21:a7:99:35:8d:9d:78:
                    53:6a:99:bf:07:b6:4c:60:a5:92:7f:ad:fe:f7:f8:
                    8d:02:30:a1:c8:2b:70:dc:be:d6:ef:55:0f:8c:4a:
                    72:1e:03:66:25:1e:9d:67:df:90:37:c7:27:78:83:
                    69:45:cc:87:8e:3c:f5:4c:fb:e3:4c:68:62:18:fc:
                    57:fe:6b:56:6b:7b:dd:0f:3f:c8:b2:cb:42:71:23:
                    b7:77:61:79:46:9b:38:29:37:7b:68:d7:9b:f7:44:
                    c6:27:4e:f7:c5:47:23:c5:92:09:b4:69:7f:b5:2d:
                    db:e5:ea:42:48:b8:78:b1:58:35:54:6f:70:a4:41:
                    19:5e:c9:9e:71:58:a2:ad:41:4f:87:21:b7:e3:c8:
                    8f:67:30:a9:6a:14:4a:86:12:f6:04:f5:d8:18:22:
                    a0:88:26:cb:17:d6:f3:7c:cc:32:95:53:eb:96:fc:
                    0f:b2:9c:c8:4c:30:4b:96:67:21:55:9e:c5:9b:ba:
                    29:6a:31:60:db:42:1b:fe:2d:bc:06:48:79:ce:3d:
                    b0:61:12:b7:42:79:bc:6e:76:86:c1:4a:19:aa:2f:
                    a6:e0:e7:61:fd:2c:b8:ad:6f:40:6c:8f:62:07:98:
                    a7:bf:6b:6e:a9:b6:ca:75:cd:e5:77:f2:b5:58:0f:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AE:03:05:57:39:38:21:9F:89:E4:1D:2F:A5:4D:1A:58:78:9C:F2
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8d:70:38:31:b5:a3:05:2f:79:2e:fb:d8:3a:82:2f:f8:1f:cc:
         22:18:7c:e5:a5:6f:3d:33:b1:fc:a6:4b:69:95:9b:45:40:d0:
         b8:d1:91:ef:68:38:3b:14:27:be:dc:56:70:d0:75:b3:11:0d:
         6d:ca:bb:8d:50:86:c1:b3:87:b2:e1:d1:cb:f6:31:0e:b9:76:
         ad:24:6b:35:4f:6a:52:a4:1a:46:2f:7d:bd:2f:a0:d6:07:91:
         7c:3f:6a:56:ca:9a:e9:c2:19:64:73:47:7f:05:14:22:2f:27:
         4f:6f:2d:90:5d:5f:69:38:49:44:3d:e1:24:91:10:fd:2c:cd:
         4c:43:7f:9b:82:b5:69:2f:f6:1b:3c:cd:09:81:f6:e0:5b:ed:
         5e:c4:6c:fa:85:29:1b:fc:b6:2b:66:23:93:27:7e:39:cf:2e:
         6b:55:bc:25:35:de:d9:3c:c0:de:71:53:52:3b:6b:f3:51:c5:
         b0:7c:0d:07:cd:7a:94:6c:ad:c7:2e:79:12:92:34:3d:cf:de:
         df:e8:87:a5:3f:b0:43:8e:c3:86:b9:8b:e8:31:cd:74:00:86:
         ab:58:13:dd:64:aa:f2:9e:10:62:a4:0c:52:a2:ee:77:28:68:
         90:f6:90:57:f7:ec:fd:35:e3:4c:0f:35:26:9a:8c:fc:0d:3f:
         2d:a0:a2:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbKIy1WT6aJDezXfbUm9gciNVOnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA1MDUyMTM1MzlaFw0yNTA1MDQyMTQwMzlaMDMxMTAvBgNV
BAMTKEM0QUUwMzA1NTczOTM4MjE5Rjg5RTQxRDJGQTU0RDFBNTg3ODlDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbrHnWNlDSIaeZNY2deFNqmb8H
tkxgpZJ/rf73+I0CMKHIK3DcvtbvVQ+MSnIeA2YlHp1n35A3xyd4g2lFzIeOPPVM
++NMaGIY/Ff+a1Zre90PP8iyy0JxI7d3YXlGmzgpN3to15v3RMYnTvfFRyPFkgm0
aX+1Ldvl6kJIuHixWDVUb3CkQRleyZ5xWKKtQU+HIbfjyI9nMKlqFEqGEvYE9dgY
IqCIJssX1vN8zDKVU+uW/A+ynMhMMEuWZyFVnsWbuilqMWDbQhv+LbwGSHnOPbBh
ErdCebxudobBShmqL6bg52H9LLitb0Bsj2IHmKe/a26ptsp1zeV38rVYD05dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxK4DBVc5OCGfieQdL6VNGlh4nPIwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzIzODMwMzQzYTM4NjMzODNhMzIzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM2MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAjIIDANBgkqhkiG9w0BAQsFAAOC
AQEAjXA4MbWjBS95LvvYOoIv+B/MIhh85aVvPTOx/KZLaZWbRUDQuNGR72g4OxQn
vtxWcNB1sxENbcq7jVCGwbOHsuHRy/YxDrl2rSRrNU9qUqQaRi99vS+g1geRfD9q
Vsqa6cIZZHNHfwUUIi8nT28tkF1faThJRD3hJJEQ/SzNTEN/m4K1aS/2GzzNCYH2
4FvtXsRs+oUpG/y2K2Yjkyd+Oc8ua1W8JTXe2TzA3nFTUjtr81HFsHwNB816lGyt
xy55EpI0Pc/e3+iHpT+wQ47DhrmL6DHNdACGq1gT3WSq8p4QYqQMUqLudyhokPaQ
V/fs/TXjTA81JpqM/A0/LaCi8g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:17 2024 by rpki-client on console-ams.rpki-client.org