Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/323830343a363332383a3a2f33322d3438203d3e20323639333432.roa
File:                     323830343a363332383a3a2f33322d3438203d3e20323639333432.roa (raw, json)
Hash identifier:          FOoIGnT+y9KSbeAjO8El5Wi62jVDKq+T/kg1/4jaqHk=
Subject key identifier:   83:62:7A:15:04:8D:59:20:6F:54:09:71:FD:19:87:F9:BD:7B:0B:6F
Certificate issuer:       /CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E
Certificate serial:       1E6AF3A11680A91F99A0FB24AC2373FC2E0B1825
Authority key identifier: 89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/323830343a363332383a3a2f33322d3438203d3e20323639333432.roa
Signing time:             Thu 04 Apr 2024 10:07:53 +0000
ROA not before:           Thu 04 Apr 2024 10:02:53 +0000
ROA not after:            Thu 03 Apr 2025 10:07:53 +0000
asID:                     269342
IP address blocks:        2804:6328::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6a:f3:a1:16:80:a9:1f:99:a0:fb:24:ac:23:73:fc:2e:0b:18:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E
        Validity
            Not Before: Apr  4 10:02:53 2024 GMT
            Not After : Apr  3 10:07:53 2025 GMT
        Subject: CN=83627A15048D59206F540971FD1987F9BD7B0B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:e3:b8:50:84:a2:d0:40:c1:7c:c0:8e:d6:
                    61:8f:bc:fa:01:30:a2:9b:60:e5:b8:a1:f5:5e:1c:
                    66:c0:21:56:46:c8:8e:51:1f:18:28:52:ee:c4:f0:
                    63:ad:c8:b9:90:02:a3:ba:b4:49:f4:7d:75:62:87:
                    af:a4:b4:71:55:04:50:72:a2:90:6a:ed:da:8e:d2:
                    0d:5f:c8:34:b4:b0:c9:1f:0e:22:19:3f:d7:36:a9:
                    c3:01:9a:0c:21:f0:31:ad:27:30:7a:4e:d2:78:3d:
                    61:47:c9:21:20:41:2e:d3:ce:1e:45:a9:1c:9b:34:
                    e8:23:16:99:c1:e8:4f:ce:28:2d:59:4d:51:d6:4f:
                    f7:24:6d:ff:6a:e6:ba:b0:ad:e0:23:0e:19:1e:b8:
                    b1:01:fd:8e:84:71:56:2f:99:b1:e1:f8:17:6b:8e:
                    19:81:84:08:8b:81:39:83:42:ab:eb:1b:b3:de:b0:
                    9f:68:0d:28:6a:7f:3a:88:40:b1:db:9f:5a:e7:97:
                    c1:2f:9e:b6:c7:a4:84:97:da:d4:c1:a3:da:9f:17:
                    a5:25:7b:bd:04:9f:8f:a0:05:60:e8:53:e3:51:94:
                    d5:b3:83:6a:32:e6:c8:34:2f:7b:42:55:11:95:2b:
                    df:f1:56:7b:31:da:26:c9:2d:59:16:38:97:6a:03:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:7A:15:04:8D:59:20:6F:54:09:71:FD:19:87:F9:BD:7B:0B:6F
            X509v3 Authority Key Identifier:
                keyid:89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/323830343a363332383a3a2f33322d3438203d3e20323639333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6328::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:c1:ad:23:2f:f5:f1:91:d7:07:bf:bc:76:57:9a:07:75:
         80:01:7c:2e:85:98:bf:9e:92:32:fe:88:05:ea:60:a1:18:2d:
         f0:76:8e:2c:15:59:4d:22:6e:89:f9:f4:c3:d4:e5:6d:cc:d1:
         6a:db:4c:2e:18:bf:1e:c4:ce:c0:10:76:e2:03:f7:5b:b4:75:
         c3:f1:05:34:52:8d:84:72:4c:33:b2:e8:36:55:2f:c0:75:54:
         ef:36:02:f7:a7:99:fb:50:40:cd:b1:6e:36:53:c7:40:77:1f:
         58:23:4e:0c:bd:1d:2d:87:d5:bf:de:35:28:5c:2f:bb:a8:3d:
         27:1d:87:0f:e8:0b:bc:46:77:d6:37:90:86:25:eb:78:d6:85:
         bc:ea:36:20:f9:c8:62:d6:d9:c4:97:69:d6:8c:ab:3a:83:0f:
         0a:de:cd:d3:6c:32:18:48:92:fd:eb:c8:71:50:20:f0:b2:cf:
         23:e1:52:2b:b9:57:0e:b2:c2:04:b8:0b:56:b7:a6:34:ee:10:
         85:fe:03:24:01:2b:59:75:9d:7b:38:26:30:a5:be:3d:0b:d7:
         d4:79:39:8b:7f:37:3c:ac:60:66:d3:b6:08:53:ed:a9:11:92:
         ca:96:38:2f:0b:85:ce:e5:c6:f1:ec:63:62:52:86:9d:aa:32:
         d9:c8:91:41
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHmrzoRaAqR+ZoPskrCNz/C4LGCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkwRThEMUQ5RkQ5NzBFMkU0QTVGQThDNDBEQkVCQ0VB
QUY1OTAwRTAeFw0yNDA0MDQxMDAyNTNaFw0yNTA0MDMxMDA3NTNaMDMxMTAvBgNV
BAMTKDgzNjI3QTE1MDQ4RDU5MjA2RjU0MDk3MUZEMTk4N0Y5QkQ3QjBCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDeO4UISi0EDBfMCO1mGPvPoB
MKKbYOW4ofVeHGbAIVZGyI5RHxgoUu7E8GOtyLmQAqO6tEn0fXVih6+ktHFVBFBy
opBq7dqO0g1fyDS0sMkfDiIZP9c2qcMBmgwh8DGtJzB6TtJ4PWFHySEgQS7Tzh5F
qRybNOgjFpnB6E/OKC1ZTVHWT/ckbf9q5rqwreAjDhkeuLEB/Y6EcVYvmbHh+Bdr
jhmBhAiLgTmDQqvrG7PesJ9oDShqfzqIQLHbn1rnl8EvnrbHpISX2tTBo9qfF6Ul
e70En4+gBWDoU+NRlNWzg2oy5sg0L3tCVRGVK9/xVnsx2ibJLVkWOJdqAwlnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUg2J6FQSNWSBvVAlx/RmH+b17C28wHwYDVR0j
BBgwFoAUiQ6NHZ/ZcOLkpfqMQNvrzqr1kA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdm
ak0vMS84OTBFOEQxRDlGRDk3MEUyRTRBNUZBOEM0MERCRUJDRUFBRjU5MDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MEU4RDFEOUZEOTcwRTJF
NEE1RkE4QzQwREJFQkNFQUFGNTkwMEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDTnh5R0FtcDRqUllHQVBlVmVpNE5pdHhrcGllUzJ0Zzc4WG51eTFXZmpNLzEv
MzIzODMwMzQzYTM2MzMzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzMzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARjKDANBgkqhkiG9w0BAQsFAAOCAQEAYj/BrSMv
9fGR1we/vHZXmgd1gAF8LoWYv56SMv6IBepgoRgt8HaOLBVZTSJuifn0w9TlbczR
attMLhi/HsTOwBB24gP3W7R1w/EFNFKNhHJMM7LoNlUvwHVU7zYC96eZ+1BAzbFu
NlPHQHcfWCNODL0dLYfVv941KFwvu6g9Jx2HD+gLvEZ31jeQhiXreNaFvOo2IPnI
YtbZxJdp1oyrOoMPCt7N02wyGEiS/evIcVAg8LLPI+FSK7lXDrLCBLgLVremNO4Q
hf4DJAErWXWdezgmMKW+PQvX1Hk5i383PKxgZtO2CFPtqRGSypY4LwuFzuXG8exj
YlKGnaoy2ciRQQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org