Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          4vsFgYcRgqthCwRk/T42ivRm1lBxq6JF1mNnsvrIfQw=
Subject key identifier:   11:BC:44:3E:98:B5:0C:3B:CC:F2:ED:DA:96:95:B5:63:71:90:F0:90
Certificate issuer:       /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial:       1124F022C5E7FEADCEA96237D1CBCE65F40FCB63
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Thu 04 Apr 2024 18:24:03 +0000
ROA not before:           Thu 04 Apr 2024 18:19:03 +0000
ROA not after:            Thu 03 Apr 2025 18:24:03 +0000
asID:                     264936
IP address blocks:        2804:3034:110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:24:f0:22:c5:e7:fe:ad:ce:a9:62:37:d1:cb:ce:65:f4:0f:cb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Validity
            Not Before: Apr  4 18:19:03 2024 GMT
            Not After : Apr  3 18:24:03 2025 GMT
        Subject: CN=11BC443E98B50C3BCCF2EDDA9695B5637190F090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:5d:ac:6e:20:35:59:a7:b8:18:95:06:aa:
                    de:04:a5:db:a5:37:d7:87:77:ba:e0:94:80:be:70:
                    e7:a4:23:8d:0b:c3:ab:d6:88:ba:0d:35:35:69:85:
                    a2:fa:ce:07:4d:51:0e:8d:b5:0b:8d:6c:ab:1e:43:
                    a8:fb:dc:3f:20:87:7f:4c:06:6d:7d:f8:cb:68:9d:
                    ae:ef:a2:da:bb:94:72:2d:f5:ef:f4:9a:01:e3:4f:
                    e1:19:8a:7e:10:27:a0:b0:37:eb:8e:a0:bd:b8:00:
                    e4:cc:b9:e5:5f:64:6d:bb:80:91:e9:5e:a9:a7:47:
                    8d:b6:be:37:31:61:2e:64:8a:b6:1d:dc:8d:a4:80:
                    e8:f7:d2:97:03:f7:aa:34:3d:4e:ce:27:7c:5a:e9:
                    74:e8:56:cf:7e:c1:93:60:a9:ba:5d:c2:31:61:0f:
                    1e:11:09:2b:57:57:e9:77:fa:b5:28:bc:89:a3:24:
                    9c:12:15:85:2e:47:7d:3a:a6:f3:0d:90:c3:f3:ae:
                    9a:08:79:34:77:5b:4a:f7:0c:65:2c:8d:19:8a:f1:
                    88:2a:99:52:a9:ab:25:24:47:de:cf:71:ec:e9:d3:
                    20:e0:dd:b2:1f:a1:89:de:c3:2e:c8:d6:db:1f:9e:
                    9e:9a:b0:14:05:54:7a:e6:91:b3:4c:4e:1f:bc:f8:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:44:3E:98:B5:0C:3B:CC:F2:ED:DA:96:95:B5:63:71:90:F0:90
            X509v3 Authority Key Identifier:
                keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         d0:69:52:fa:ea:0b:21:80:18:b2:ec:1b:28:e4:4a:51:c5:7d:
         43:14:74:70:c9:d9:4e:57:de:6b:de:ed:cc:e7:b9:95:4d:6a:
         7c:6f:04:de:19:39:8c:de:fa:2e:60:08:57:90:dd:74:c4:f9:
         8d:3f:89:e9:0f:a4:43:62:07:d5:18:35:09:bb:ec:5c:8f:f9:
         f7:c4:88:e0:15:34:ad:b2:a9:f1:24:56:3b:5e:f9:a4:fe:8f:
         d3:c5:6e:64:69:d9:8c:14:78:16:3f:91:f5:e4:fd:28:ac:67:
         47:27:ec:5b:d0:7d:de:de:38:bb:f8:dd:a5:f2:45:3c:bd:75:
         d4:61:95:61:65:f8:78:3d:b8:ed:9d:36:81:ca:fa:65:9e:80:
         bc:46:32:f2:da:85:f6:3c:4e:67:55:ce:2a:47:9a:8f:1b:0f:
         7f:b0:4e:1b:93:e4:67:f0:c8:23:ee:bf:e1:38:45:36:30:a6:
         c2:ad:63:1a:a6:e6:71:88:cf:08:b0:71:10:fe:3a:a6:42:cd:
         62:cf:cc:76:ce:69:67:46:19:0b:54:70:bd:1e:5d:fc:c3:62:
         8d:9f:8e:83:22:c8:08:c9:30:67:59:68:80:6a:d2:13:df:52:
         1b:e1:ab:ef:65:8f:9b:20:9a:22:8a:1c:91:04:74:6e:b4:1b:
         36:fb:a5:4b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUESTwIsXn/q3OqWI30cvOZfQPy2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI0MDAzOUIxRTVEMDUwOUM1MUNDMzU4N0JFRjZFRDJB
MERGRTczRTAeFw0yNDA0MDQxODE5MDNaFw0yNTA0MDMxODI0MDNaMDMxMTAvBgNV
BAMTKDExQkM0NDNFOThCNTBDM0JDQ0YyRUREQTk2OTVCNTYzNzE5MEYwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3H12sbiA1Wae4GJUGqt4Epdul
N9eHd7rglIC+cOekI40Lw6vWiLoNNTVphaL6zgdNUQ6NtQuNbKseQ6j73D8gh39M
Bm19+Mtona7votq7lHIt9e/0mgHjT+EZin4QJ6CwN+uOoL24AOTMueVfZG27gJHp
XqmnR422vjcxYS5kirYd3I2kgOj30pcD96o0PU7OJ3xa6XToVs9+wZNgqbpdwjFh
Dx4RCStXV+l3+rUovImjJJwSFYUuR306pvMNkMPzrpoIeTR3W0r3DGUsjRmK8Ygq
mVKpqyUkR97Pcezp0yDg3bIfoYnewy7I1tsfnp6asBQFVHrmkbNMTh+8+ISrAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUEbxEPpi1DDvM8u3alpW1Y3GQ8JAwHwYDVR0j
BBgwFoAUq0ADmx5dBQnFHMNYe+9u0qDf5z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMS9BQjQwMDM5QjFFNUQwNTA5QzUxQ0MzNTg3QkVGNkVEMkEwREZFNzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCNDAwMzlCMUU1RDA1MDlD
NTFDQzM1ODdCRUY2RUQyQTBERkU3M0UuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzEv
MzIzODMwMzQzYTMzMzAzMzM0M2EzMTMxMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNl
MjAzMjM2MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBDA0ARAwDQYJKoZIhvcNAQELBQAD
ggEBANBpUvrqCyGAGLLsGyjkSlHFfUMUdHDJ2U5X3mve7cznuZVNanxvBN4ZOYze
+i5gCFeQ3XTE+Y0/iekPpENiB9UYNQm77FyP+ffEiOAVNK2yqfEkVjte+aT+j9PF
bmRp2YwUeBY/kfXk/SisZ0cn7FvQfd7eOLv43aXyRTy9ddRhlWFl+Hg9uO2dNoHK
+mWegLxGMvLahfY8TmdVzipHmo8bD3+wThuT5GfwyCPuv+E4RTYwpsKtYxqm5nGI
zwiwcRD+OqZCzWLPzHbOaWdGGQtUcL0eXfzDYo2fjoMiyAjJMGdZaIBq0hPfUhvh
q+9lj5sgmiKKHJEEdG60Gzb7pUs=
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org