Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/323830313a38303a333664303a3a2f34382d3438203d3e20323639323136.roa
File:                     323830313a38303a333664303a3a2f34382d3438203d3e20323639323136.roa (raw, json)
Hash identifier:          7HR27c4rmLk7zNESdG14CP2mz8lmIfBdMdW7N88oDzo=
Subject key identifier:   54:07:68:B6:EA:74:C0:B7:CC:3D:2F:67:FC:E2:85:12:A9:A7:74:98
Certificate issuer:       /CN=B005EA4161E63BC8DBDA011004C07D752C26EEF2
Certificate serial:       61EAEE25561AA98DBED7F9AD5769CB318DEC99F3
Authority key identifier: B0:05:EA:41:61:E6:3B:C8:DB:DA:01:10:04:C0:7D:75:2C:26:EE:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/323830313a38303a333664303a3a2f34382d3438203d3e20323639323136.roa
Signing time:             Fri 05 Apr 2024 03:07:14 +0000
ROA not before:           Fri 05 Apr 2024 03:02:14 +0000
ROA not after:            Fri 04 Apr 2025 03:07:14 +0000
asID:                     269216
IP address blocks:        2801:80:36d0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.crl
                          rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ea:ee:25:56:1a:a9:8d:be:d7:f9:ad:57:69:cb:31:8d:ec:99:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B005EA4161E63BC8DBDA011004C07D752C26EEF2
        Validity
            Not Before: Apr  5 03:02:14 2024 GMT
            Not After : Apr  4 03:07:14 2025 GMT
        Subject: CN=540768B6EA74C0B7CC3D2F67FCE28512A9A77498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:48:38:20:d0:7d:d8:1b:26:05:ce:15:2e:
                    9d:5f:9a:24:d2:c4:56:f7:b6:f8:e4:2b:92:2a:21:
                    59:cc:cc:3b:dc:43:b6:87:d0:04:0e:b4:9a:6a:b7:
                    c1:a2:d0:d7:22:92:b6:df:3d:4c:31:a8:f0:0e:ca:
                    1d:fd:b3:36:8f:32:09:90:1f:6a:a4:de:fb:14:b3:
                    0f:b0:a6:51:01:c1:ec:65:3d:d8:51:3c:67:2e:88:
                    02:c9:34:21:a4:9b:53:7e:65:22:84:8b:71:ba:28:
                    6c:c4:63:08:e4:b2:6b:a1:c1:42:a2:aa:bc:56:4f:
                    ba:81:59:92:40:65:f0:13:4f:8d:0a:aa:cf:5b:5c:
                    d6:cf:3b:e7:9b:92:ea:d5:c1:29:d9:b8:87:85:fe:
                    2a:2f:6d:72:21:78:43:b5:55:3b:29:1a:32:5a:60:
                    c1:19:55:49:0a:db:cc:1f:4c:b6:40:9c:77:ed:79:
                    b2:c8:80:4e:46:31:65:fd:d1:cb:cd:38:8c:59:9b:
                    18:7e:08:6f:1c:c4:8d:07:b7:31:a6:08:9f:1d:d1:
                    74:2e:4f:05:20:68:e7:2e:79:84:0e:32:29:f2:ce:
                    8b:3e:75:c3:72:ab:6d:67:02:ed:5f:73:83:d2:91:
                    66:b5:ab:d3:80:ba:07:91:cd:37:57:9c:7e:65:28:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:07:68:B6:EA:74:C0:B7:CC:3D:2F:67:FC:E2:85:12:A9:A7:74:98
            X509v3 Authority Key Identifier:
                keyid:B0:05:EA:41:61:E6:3B:C8:DB:DA:01:10:04:C0:7D:75:2C:26:EE:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/323830313a38303a333664303a3a2f34382d3438203d3e20323639323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:36d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:6d:51:ec:ea:83:f1:ff:01:51:40:46:4d:57:df:84:48:f7:
         5d:98:e4:38:c7:68:50:c7:57:2e:72:3e:9b:d2:94:83:c6:fd:
         73:1a:b2:c4:02:63:87:66:06:f5:59:ab:68:52:d4:90:25:83:
         d8:e4:60:5c:0f:86:6d:8f:a2:14:80:9f:23:06:34:72:18:a4:
         d8:66:e4:24:0c:54:2e:c0:b2:1b:e7:58:43:ac:19:b0:36:3a:
         71:d1:60:83:c6:28:03:b8:b9:bc:93:0f:4c:7d:6b:b1:b7:5a:
         3b:21:ed:e8:f6:2e:00:0c:b7:b3:05:a0:b8:1b:8a:19:2b:fe:
         33:b4:68:d6:c4:51:c6:ef:40:85:6e:f2:6a:b3:86:ea:d4:a7:
         0c:c0:74:53:06:c1:a6:e4:9f:bd:1a:cb:70:db:db:79:43:d6:
         43:e5:af:9d:91:db:32:e7:26:1c:84:e4:97:49:01:c0:55:89:
         8f:ff:0f:b0:6f:84:3f:64:79:4d:d8:65:1b:27:c2:2a:ff:36:
         c7:db:df:e5:c8:9b:47:b3:dd:20:98:2b:a0:ed:69:66:21:9d:
         c8:15:1f:6a:d6:76:27:bf:6c:b4:f9:fb:20:9a:e8:01:df:53:
         9d:92:30:e8:cb:67:27:df:89:77:92:f0:c0:21:48:6b:df:4d:
         27:b2:4f:f9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUYeruJVYaqY2+1/mtV2nLMY3smfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAwNUVBNDE2MUU2M0JDOERCREEwMTEwMDRDMDdENzUy
QzI2RUVGMjAeFw0yNDA0MDUwMzAyMTRaFw0yNTA0MDQwMzA3MTRaMDMxMTAvBgNV
BAMTKDU0MDc2OEI2RUE3NEMwQjdDQzNEMkY2N0ZDRTI4NTEyQTlBNzc0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgkg4INB92BsmBc4VLp1fmiTS
xFb3tvjkK5IqIVnMzDvcQ7aH0AQOtJpqt8Gi0NcikrbfPUwxqPAOyh39szaPMgmQ
H2qk3vsUsw+wplEBwexlPdhRPGcuiALJNCGkm1N+ZSKEi3G6KGzEYwjksmuhwUKi
qrxWT7qBWZJAZfATT40Kqs9bXNbPO+ebkurVwSnZuIeF/iovbXIheEO1VTspGjJa
YMEZVUkK28wfTLZAnHftebLIgE5GMWX90cvNOIxZmxh+CG8cxI0HtzGmCJ8d0XQu
TwUgaOcueYQOMinyzos+dcNyq21nAu1fc4PSkWa1q9OAugeRzTdXnH5lKBh5AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUVAdotup0wLfMPS9n/OKFEqmndJgwHwYDVR0j
BBgwFoAUsAXqQWHmO8jb2gEQBMB9dSwm7vIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmdvU0N0VTlLTllqUGNHcG1tM3NaNnNLVFF5RHpoejY3cDJ0RkRVRGdK
QzMvMS9CMDA1RUE0MTYxRTYzQkM4REJEQTAxMTAwNEMwN0Q3NTJDMjZFRUYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMDVFQTQxNjFFNjNCQzhE
QkRBMDExMDA0QzA3RDc1MkMyNkVFRjIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnb1NDdFU5S05ZalBjR3BtbTNzWjZzS1RReUR6aHo2N3AydEZEVURnSkMzLzEv
MzIzODMwMzEzYTM4MzAzYTMzMzY2NDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM5MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAgDbQMA0GCSqGSIb3DQEBCwUAA4IB
AQATbVHs6oPx/wFRQEZNV9+ESPddmOQ4x2hQx1cucj6b0pSDxv1zGrLEAmOHZgb1
WatoUtSQJYPY5GBcD4Ztj6IUgJ8jBjRyGKTYZuQkDFQuwLIb51hDrBmwNjpx0WCD
xigDuLm8kw9MfWuxt1o7Ie3o9i4ADLezBaC4G4oZK/4ztGjWxFHG70CFbvJqs4bq
1KcMwHRTBsGm5J+9Gstw29t5Q9ZD5a+dkdsy5yYchOSXSQHAVYmP/w+wb4Q/ZHlN
2GUbJ8Iq/zbH29/lyJtHs90gmCug7WlmIZ3IFR9q1nYnv2y0+fsgmugB31OdkjDo
y2cn34l3kvDAIUhr300nsk/5
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:18 2024 by rpki-client on console-fra.rpki-client.org