Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          iIk2UU1pZhM4Bj33SLyEzsCSGnh6u7W/Hs+MFLO1lMw=
Subject key identifier:   66:AE:C5:69:C2:C7:D8:FA:6B:A0:BF:B2:BA:93:FF:B0:D1:84:7D:ED
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       11B4FE3040B98EDD691C02CF90829B2F63F4E016
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 04 Apr 2024 05:06:39 +0000
ROA not before:           Thu 04 Apr 2024 05:01:39 +0000
ROA not after:            Thu 03 Apr 2025 05:06:39 +0000
asID:                     272554
IP address blocks:        2804:850c:c000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b4:fe:30:40:b9:8e:dd:69:1c:02:cf:90:82:9b:2f:63:f4:e0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Apr  4 05:01:39 2024 GMT
            Not After : Apr  3 05:06:39 2025 GMT
        Subject: CN=66AEC569C2C7D8FA6BA0BFB2BA93FFB0D1847DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:80:57:87:14:7b:ad:20:6f:80:fe:e3:39:
                    b8:25:4b:85:6f:ad:fb:f7:6b:1b:e2:e5:7d:77:59:
                    9c:21:85:24:3e:da:83:4c:73:37:1d:a4:75:c1:76:
                    32:2c:45:29:55:62:05:e4:dd:03:36:fb:11:7d:2f:
                    d7:9e:a3:ae:2f:96:5b:2f:3a:02:c0:c1:39:3d:3b:
                    fa:2c:48:12:08:34:53:b8:df:77:d0:11:d5:4b:36:
                    a9:bd:4a:af:c4:66:08:37:32:80:3d:99:c9:e2:b7:
                    c1:79:74:84:a0:02:ae:df:4f:5c:74:0e:c9:80:d6:
                    72:be:d9:d1:1e:cd:ed:49:15:69:0d:6c:27:72:f5:
                    04:5e:5d:7b:e5:49:24:e7:02:2e:9d:aa:77:7d:ec:
                    b6:52:a0:8a:c3:e3:92:f8:6c:22:12:43:14:d0:02:
                    a9:4a:77:5a:66:ae:b7:ac:f6:b6:f8:48:4a:21:19:
                    69:0f:5e:a6:b0:be:5b:2e:0f:ff:94:8b:8f:1f:55:
                    cf:c9:49:34:ea:1d:a8:0f:70:64:11:aa:24:70:3e:
                    47:39:f7:c2:30:50:de:18:f8:1c:a3:88:10:fd:65:
                    6a:19:b7:fe:65:8c:72:5a:57:60:f1:3b:54:1f:30:
                    2f:73:06:ef:ae:eb:56:50:de:ee:0d:d2:e7:c5:c0:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AE:C5:69:C2:C7:D8:FA:6B:A0:BF:B2:BA:93:FF:B0:D1:84:7D:ED
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:42:48:4f:82:13:e4:44:a0:1f:11:13:80:5b:11:11:ad:4d:
         2b:66:ac:99:94:5c:24:c7:8c:26:4d:8f:59:b5:7d:b7:66:b0:
         e4:ac:c1:07:0c:b4:a2:55:81:55:cc:5e:cf:19:2b:9c:9d:f6:
         76:f3:ee:d3:1e:c2:81:d7:b3:ed:f5:49:b3:41:db:e6:6a:0b:
         c5:6c:f3:b9:38:98:31:ef:7f:99:f8:b7:9c:fe:7f:99:e2:c2:
         9d:a6:12:6e:ad:d8:84:cb:c6:ab:09:a8:4b:77:0a:73:a3:43:
         c5:19:d8:12:08:c8:f3:36:0f:34:8b:53:4b:f0:fb:1c:03:65:
         99:84:54:95:7a:eb:9f:6d:11:64:5a:a6:6a:5a:64:75:05:bb:
         61:c3:65:16:97:a8:32:60:26:c0:7a:7a:1f:84:63:47:25:aa:
         7b:8a:5b:7f:1b:7f:52:67:d3:3a:fe:b8:a5:35:23:37:04:ea:
         2d:3b:1c:a4:b6:7e:7c:e7:16:8a:e7:c5:64:53:d7:72:65:47:
         6f:78:13:4c:6e:a0:0b:d8:f7:22:e8:91:76:48:d1:84:7f:3b:
         ee:67:8e:c4:c6:6e:a2:6a:15:3c:aa:54:67:99:35:70:cc:2c:
         ef:fe:af:9b:81:44:2e:8a:6b:ea:41:66:b0:3a:66:f7:8e:4d:
         13:70:20:90
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEbT+MEC5jt1pHALPkIKbL2P04BYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlDOUU5MzlGREUzRUNDQTIxNzA0ODcwOUU4N0NEQTlE
NzZCMzZCODAeFw0yNDA0MDQwNTAxMzlaFw0yNTA0MDMwNTA2MzlaMDMxMTAvBgNV
BAMTKDY2QUVDNTY5QzJDN0Q4RkE2QkEwQkZCMkJBOTNGRkIwRDE4NDdERUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl4BXhxR7rSBvgP7jObglS4Vv
rfv3axvi5X13WZwhhSQ+2oNMczcdpHXBdjIsRSlVYgXk3QM2+xF9L9eeo64vllsv
OgLAwTk9O/osSBIINFO433fQEdVLNqm9Sq/EZgg3MoA9mcnit8F5dISgAq7fT1x0
DsmA1nK+2dEeze1JFWkNbCdy9QReXXvlSSTnAi6dqnd97LZSoIrD45L4bCISQxTQ
AqlKd1pmrres9rb4SEohGWkPXqawvlsuD/+Ui48fVc/JSTTqHagPcGQRqiRwPkc5
98IwUN4Y+ByjiBD9ZWoZt/5ljHJaV2DxO1QfMC9zBu+u61ZQ3u4N0ufFwDPVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZq7FacLH2PproL+yupP/sNGEfe0wHwYDVR0j
BBgwFoAUGcnpOf3j7MohcEhwnofNqddrNrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9WdmVTQ3FCWUoyRzM3TjNjbnQyUlcyYTdjckNrRldvSEhGSGZVWFly
ZWYvMS8xOUM5RTkzOUZERTNFQ0NBMjE3MDQ4NzA5RTg3Q0RBOUQ3NkIzNkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5QzlFOTM5RkRFM0VDQ0Ey
MTcwNDg3MDlFODdDREE5RDc2QjM2QjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvVnZlU0NxQllKMkczN04zY250MlJXMmE3Y3JDa0ZXb0hIRkhmVVhZcmVmLzEv
MzIzODMwMzQzYTM4MzUzMDYzM2E2MzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMjM1MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEhQzAMA0GCSqGSIb3DQEBCwUA
A4IBAQDMQkhPghPkRKAfEROAWxERrU0rZqyZlFwkx4wmTY9ZtX23ZrDkrMEHDLSi
VYFVzF7PGSucnfZ28+7THsKB17Pt9UmzQdvmagvFbPO5OJgx73+Z+Lec/n+Z4sKd
phJurdiEy8arCahLdwpzo0PFGdgSCMjzNg80i1NL8PscA2WZhFSVeuufbRFkWqZq
WmR1Bbthw2UWl6gyYCbAenofhGNHJap7ilt/G39SZ9M6/rilNSM3BOotOxyktn58
5xaK58VkU9dyZUdveBNMbqAL2Pci6JF2SNGEfzvuZ47Exm6iahU8qlRnmTVwzCzv
/q+bgUQuimvqQWawOmb3jk0TcCCQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org