Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa
File:                     323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa (raw, json)
Hash identifier:          cVwDusgPu4wSw+4lCftCfWw3ca1k83v+csYm/LuQf0E=
Subject key identifier:   3A:52:23:4D:EA:CC:20:47:01:51:E6:13:13:C1:68:2A:F7:8A:58:D3
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       4478E111F64AF171E9989B7BA6E2356C8EA03BD7
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa
Signing time:             Thu 04 Apr 2024 10:06:20 +0000
ROA not before:           Thu 04 Apr 2024 10:01:20 +0000
ROA not after:            Thu 03 Apr 2025 10:06:20 +0000
asID:                     263289
IP address blocks:        2804:1680:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:78:e1:11:f6:4a:f1:71:e9:98:9b:7b:a6:e2:35:6c:8e:a0:3b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Apr  4 10:01:20 2024 GMT
            Not After : Apr  3 10:06:20 2025 GMT
        Subject: CN=3A52234DEACC20470151E61313C1682AF78A58D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:f4:e8:e9:38:34:83:df:a5:b2:44:be:11:
                    fb:d3:b5:da:55:73:f7:3b:47:2f:29:75:4f:22:42:
                    46:ed:0b:94:91:a0:81:37:41:f6:3e:75:c3:fd:bc:
                    25:37:a0:bb:f3:73:8f:06:a4:02:a5:1f:db:8a:01:
                    e5:74:64:f1:5b:20:aa:65:2f:ec:8a:57:57:b2:17:
                    ae:b1:c5:d5:07:9f:ab:c1:a7:16:54:3a:51:cf:bf:
                    89:42:69:5c:eb:6e:fb:f9:0b:31:44:67:26:dd:df:
                    f9:13:79:1c:04:34:35:c2:4a:6e:e8:e1:70:e6:9b:
                    70:7f:f2:74:2b:8c:f2:2f:d8:b1:e2:cd:9e:a3:e6:
                    5a:2b:47:f8:b7:5b:ae:db:7c:3d:3e:41:2d:0a:78:
                    ee:16:6b:4c:45:b0:12:90:a9:e6:9f:8c:1e:99:4c:
                    df:f8:e5:46:3e:b0:be:12:f2:9d:ca:fe:17:26:9a:
                    42:b1:92:32:aa:4b:37:e1:ff:be:68:ef:c2:da:19:
                    31:c7:a8:dd:b9:80:95:d8:05:97:e9:bf:bf:73:d4:
                    fa:c5:7d:6d:38:02:41:60:76:97:b1:20:e6:20:53:
                    33:fd:69:0c:5a:3b:c0:5f:f4:0b:f1:eb:93:d0:df:
                    32:3a:27:21:63:86:15:9c:43:80:c3:e9:b7:da:c9:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:52:23:4D:EA:CC:20:47:01:51:E6:13:13:C1:68:2A:F7:8A:58:D3
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1680:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:62:80:9c:db:2b:af:cf:9f:2b:97:6c:e0:46:ce:63:a9:59:
         d2:fa:2c:b0:48:4b:32:8d:66:d7:4f:62:8a:a0:79:5c:2c:94:
         1b:b6:72:c1:12:80:dd:66:0f:ec:3f:c7:90:65:ad:d5:98:5c:
         d6:7f:f8:c9:89:da:a2:f4:4a:75:a1:5e:a7:7c:08:e5:3d:b3:
         07:d6:61:f4:87:79:8c:ab:25:dc:5f:67:c3:b2:27:ec:9d:ea:
         d9:c5:e1:81:8c:8c:59:45:98:d9:ae:4e:fc:c3:64:20:59:3c:
         02:43:f8:95:db:a2:80:c8:06:3c:ea:e2:a4:49:a0:99:d2:6d:
         44:72:6e:70:28:1e:04:05:db:56:0b:70:34:28:8c:bc:c7:ff:
         be:6c:e2:6c:91:9a:f6:36:de:e9:6a:6b:fa:22:f2:5e:c4:ef:
         8a:08:af:66:c4:c9:41:56:f4:a6:a7:c6:e3:b9:b9:17:87:29:
         7c:7c:32:d4:e0:c3:29:4f:5c:89:58:bb:62:2d:95:fe:0e:c9:
         b3:07:f2:30:6a:c7:51:82:2b:fe:e2:ab:69:08:6d:d1:cd:4b:
         78:34:60:6c:20:f8:bf:b7:ed:36:3c:52:3b:42:75:ce:f0:79:
         7e:a1:65:67:cc:24:c8:f4:f1:16:5d:ec:cf:a7:03:de:b1:10:
         dc:02:00:10
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURHjhEfZK8XHpmJt7puI1bI6gO9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU1MTNEMUEzNzlDNUVEREI4MTU4Q0VBMjYxNjY2OTFE
RTFCMTY5QTAeFw0yNDA0MDQxMDAxMjBaFw0yNTA0MDMxMDA2MjBaMDMxMTAvBgNV
BAMTKDNBNTIyMzRERUFDQzIwNDcwMTUxRTYxMzEzQzE2ODJBRjc4QTU4RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRPTo6Tg0g9+lskS+EfvTtdpV
c/c7Ry8pdU8iQkbtC5SRoIE3QfY+dcP9vCU3oLvzc48GpAKlH9uKAeV0ZPFbIKpl
L+yKV1eyF66xxdUHn6vBpxZUOlHPv4lCaVzrbvv5CzFEZybd3/kTeRwENDXCSm7o
4XDmm3B/8nQrjPIv2LHizZ6j5lorR/i3W67bfD0+QS0KeO4Wa0xFsBKQqeafjB6Z
TN/45UY+sL4S8p3K/hcmmkKxkjKqSzfh/75o78LaGTHHqN25gJXYBZfpv79z1PrF
fW04AkFgdpexIOYgUzP9aQxaO8Bf9Avx65PQ3zI6JyFjhhWcQ4DD6bfayRKpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOlIjTerMIEcBUeYTE8FoKveKWNMwHwYDVR0j
BBgwFoAUFVE9GjecXt24FYzqJhZmkd4bFpowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnljRjZpV0JpdFRMTnlrVHp4Q3N6TkttUDZUbnN1RXFSdU11YmE0MlBR
M1UvMS8xNTUxM0QxQTM3OUM1RUREQjgxNThDRUEyNjE2NjY5MURFMUIxNjlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1NTEzRDFBMzc5QzVFRERC
ODE1OENFQTI2MTY2NjkxREUxQjE2OUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ5Y0Y2aVdCaXRUTE55a1R6eENzek5LbVA2VG5zdUVxUnVNdWJhNDJQUTNVLzEv
MzIzODMwMzQzYTMxMzYzODMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEFoCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAlYoCc2yuvz58rl2zgRs5jqVnS+iywSEsyjWbXT2KKoHlcLJQbtnLBEoDd
Zg/sP8eQZa3VmFzWf/jJidqi9Ep1oV6nfAjlPbMH1mH0h3mMqyXcX2fDsifsnerZ
xeGBjIxZRZjZrk78w2QgWTwCQ/iV26KAyAY86uKkSaCZ0m1Ecm5wKB4EBdtWC3A0
KIy8x/++bOJskZr2Nt7pamv6IvJexO+KCK9mxMlBVvSmp8bjubkXhyl8fDLU4MMp
T1yJWLtiLZX+DsmzB/IwasdRgiv+4qtpCG3RzUt4NGBsIPi/t+02PFI7QnXO8Hl+
oWVnzCTI9PEWXezPpwPesRDcAgAQ
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:20 2024 by rpki-client on console-fra.rpki-client.org