Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa
File:                     323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier:          s7GHftJgmnb0Ox5u7yZ1ooWguJ3TedA38LPFU5a+UD8=
Subject key identifier:   C4:D7:7F:02:FC:BD:BA:83:DB:E0:AB:BB:E4:0B:4E:D4:90:FC:9D:55
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       3194FAC840334A6898780DB3DF275208993D2168
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 22:05:40 +0000
ROA not before:           Tue 30 Apr 2024 22:00:40 +0000
ROA not after:            Tue 29 Apr 2025 22:05:40 +0000
asID:                     264525
IP address blocks:        2804:20fc:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:94:fa:c8:40:33:4a:68:98:78:0d:b3:df:27:52:08:99:3d:21:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 22:00:40 2024 GMT
            Not After : Apr 29 22:05:40 2025 GMT
        Subject: CN=C4D77F02FCBDBA83DBE0ABBBE40B4ED490FC9D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:17:24:5e:4b:88:56:6e:dd:a9:5e:9e:22:
                    c6:12:08:4e:64:47:93:b0:82:eb:ff:2b:34:ea:e4:
                    ca:81:84:f1:36:d8:22:de:76:b2:a4:1b:c9:cc:f0:
                    90:7f:e0:6c:ff:cf:d0:72:a0:8d:91:9e:22:3a:51:
                    02:17:ed:00:89:7e:23:21:88:2c:b3:23:8c:b5:fc:
                    f6:f0:ba:de:2d:88:17:f2:34:af:79:e7:59:00:c2:
                    71:40:42:3b:ac:6d:b8:a8:4e:ed:c8:b1:05:eb:02:
                    45:bd:d1:ce:c1:57:38:40:88:5f:e0:b2:f9:be:59:
                    6a:e2:18:7b:8d:01:bf:1f:b3:e9:14:9d:e1:1c:6f:
                    3e:bd:aa:0b:44:fe:f9:dd:08:b1:f3:bc:c5:7a:c4:
                    ef:1c:82:92:fc:6c:66:b2:68:33:bd:1b:63:b1:6f:
                    e3:28:48:6b:41:01:65:dc:29:a2:e4:bc:08:38:c6:
                    a9:f4:88:f9:d6:f7:c1:90:26:32:c2:e3:34:dd:d6:
                    4e:6c:fd:cb:4f:48:d7:e4:20:be:91:19:3b:fb:c0:
                    f7:20:0e:9c:6b:27:13:b3:2a:c3:fd:cb:b1:33:51:
                    a2:44:13:60:e3:14:68:c9:cd:53:97:80:95:a7:5f:
                    a4:1d:5f:a1:41:7e:0b:8a:88:dd:46:a8:cf:a6:cb:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D7:7F:02:FC:BD:BA:83:DB:E0:AB:BB:E4:0B:4E:D4:90:FC:9D:55
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20fc:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:6a:82:db:58:1e:85:4b:99:c7:ef:df:b1:cf:ef:5a:b0:90:
         28:20:6e:9a:4e:3d:01:33:44:f5:0a:07:a7:43:34:3f:0d:09:
         7a:15:2d:d1:00:2c:f7:9c:21:ba:39:ca:1e:de:d0:d0:b0:d2:
         ab:35:2f:eb:3f:a7:1d:dd:48:a8:41:2f:0d:e5:dc:9b:c1:40:
         34:c5:97:ee:95:b4:25:b2:29:3a:24:1b:c0:07:b0:da:df:a5:
         03:f7:18:e8:5a:ed:fa:2b:76:51:ba:2b:5d:ae:97:05:c9:e4:
         f2:3a:48:a4:c5:32:23:9a:60:24:2f:86:10:05:78:c8:5b:b7:
         31:b5:50:64:55:98:17:02:47:20:39:fa:44:af:3a:65:c9:64:
         34:1d:8f:e4:e3:bd:31:14:31:89:6f:4f:45:cd:a0:ba:47:7a:
         bd:d7:f3:19:2e:da:39:1a:09:12:3f:9e:81:99:8c:53:8b:6a:
         83:6a:5a:5a:0a:25:3b:a9:c0:db:5c:eb:d1:7b:c0:d8:95:dc:
         3c:26:42:68:72:34:97:42:90:9c:43:26:88:6c:84:76:a6:72:
         47:ea:47:f6:56:a9:74:c6:6c:70:9f:24:17:ad:ac:8b:25:00:
         3f:dc:80:ed:9f:07:5e:18:ad:49:07:fb:38:bb:02:38:a7:a0:
         e3:70:3b:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMZT6yEAzSmiYeA2z3ydSCJk9IWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjhFQUNCOUY3OEE1NjRBNTU5NDU0RTM1N0UxRTMx
MzQ0QjFDODAeFw0yNDA0MzAyMjAwNDBaFw0yNTA0MjkyMjA1NDBaMDMxMTAvBgNV
BAMTKEM0RDc3RjAyRkNCREJBODNEQkUwQUJCQkU0MEI0RUQ0OTBGQzlENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVRckXkuIVm7dqV6eIsYSCE5k
R5Owguv/KzTq5MqBhPE22CLedrKkG8nM8JB/4Gz/z9ByoI2RniI6UQIX7QCJfiMh
iCyzI4y1/Pbwut4tiBfyNK9551kAwnFAQjusbbioTu3IsQXrAkW90c7BVzhAiF/g
svm+WWriGHuNAb8fs+kUneEcbz69qgtE/vndCLHzvMV6xO8cgpL8bGayaDO9G2Ox
b+MoSGtBAWXcKaLkvAg4xqn0iPnW98GQJjLC4zTd1k5s/ctPSNfkIL6RGTv7wPcg
DpxrJxOzKsP9y7EzUaJEE2DjFGjJzVOXgJWnX6QdX6FBfguKiN1GqM+my2r9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxNd/Avy9uoPb4Ku75AtO1JD8nVUwHwYDVR0j
BBgwFoAUuduOrLn3ilZKVZRU41fh4xNEscgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4
d2kvMC9COURCOEVBQ0I5Rjc4QTU2NEE1NTk0NTRFMzU3RTFFMzEzNDRCMUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REI4RUFDQjlGNzhBNTY0
QTU1OTQ1NEUzNTdFMUUzMTM0NEIxQzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv
MzIzODMwMzQzYTMyMzA2NjYzM2EzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzQzNTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCD8AzANBgkqhkiG9w0BAQsFAAOC
AQEACmqC21gehUuZx+/fsc/vWrCQKCBumk49ATNE9QoHp0M0Pw0JehUt0QAs95wh
ujnKHt7Q0LDSqzUv6z+nHd1IqEEvDeXcm8FANMWX7pW0JbIpOiQbwAew2t+lA/cY
6Frt+it2UborXa6XBcnk8jpIpMUyI5pgJC+GEAV4yFu3MbVQZFWYFwJHIDn6RK86
ZclkNB2P5OO9MRQxiW9PRc2gukd6vdfzGS7aORoJEj+egZmMU4tqg2paWgolO6nA
21zr0XvA2JXcPCZCaHI0l0KQnEMmiGyEdqZyR+pH9lapdMZscJ8kF62siyUAP9yA
7Z8HXhitSQf7OLsCOKeg43A7OA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org