Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa
File:                     323830343a363538303a3a2f33322d3332203d3e20323639343935.roa (raw, json)
Hash identifier:          o8WKUL0l6TtoMODsslTBVN/aWbaqmB4aXi5Kcc0xJX4=
Subject key identifier:   89:D9:D0:EB:22:0E:A8:3A:CB:54:02:42:53:3D:69:44:FD:08:22:E7
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       3C3FFC7D0B77319F1AF9BB2690BC24EE33E0FCD7
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa
Signing time:             Wed 03 Apr 2024 19:13:49 +0000
ROA not before:           Wed 03 Apr 2024 19:08:49 +0000
ROA not after:            Wed 02 Apr 2025 19:13:49 +0000
asID:                     269495
IP address blocks:        2804:6580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3f:fc:7d:0b:77:31:9f:1a:f9:bb:26:90:bc:24:ee:33:e0:fc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Apr  3 19:08:49 2024 GMT
            Not After : Apr  2 19:13:49 2025 GMT
        Subject: CN=89D9D0EB220EA83ACB540242533D6944FD0822E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:68:71:5b:a0:6f:8a:bc:1f:8d:f7:3f:8c:
                    36:b7:54:32:31:c5:73:52:d2:67:64:44:40:49:12:
                    2b:93:90:3d:4f:cf:35:15:44:dc:4e:6e:b3:47:89:
                    ee:19:a4:63:17:d7:e7:d8:49:92:74:cf:a0:51:1a:
                    86:86:59:cd:34:53:b8:65:d5:44:c7:29:e1:ae:3e:
                    1a:51:76:f7:c8:54:7b:e0:47:e9:5f:84:3f:e8:d4:
                    e3:ce:38:17:a9:10:0e:68:d1:e1:f3:c5:a5:c0:1c:
                    0c:d1:8e:c0:8e:de:5a:5e:79:e5:9c:ee:2b:93:4d:
                    ab:a9:5f:25:1e:09:9e:3f:5a:40:c7:c1:ba:48:4c:
                    d3:3c:72:e9:38:74:e3:54:5b:b0:0a:84:53:c6:5b:
                    c5:5a:3b:71:34:ce:45:9f:aa:a2:a0:0f:ed:a5:db:
                    4f:bb:83:92:b3:05:59:00:d8:3e:c4:b2:27:9e:b3:
                    cb:11:32:15:60:c7:b2:26:17:0a:66:40:5b:cd:25:
                    6d:10:cc:e6:30:bd:43:ca:92:26:7b:d0:31:c2:4e:
                    a2:f8:33:a2:f2:bd:37:37:1e:f4:89:12:13:ab:8d:
                    dc:34:51:27:f8:8c:eb:5e:14:35:7b:09:55:d9:7b:
                    61:d8:32:6c:6c:cd:63:ea:cb:11:ec:24:e5:32:b7:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:D0:EB:22:0E:A8:3A:CB:54:02:42:53:3D:69:44:FD:08:22:E7
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6580::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:12:a7:2f:48:ac:d7:4f:43:d6:35:fa:6e:46:33:18:78:6b:
         9b:38:bf:c9:43:7e:4d:4d:c2:ac:72:46:35:6e:6e:3f:b3:76:
         3d:76:9f:12:ef:bf:3d:f9:e8:72:06:d7:55:3f:e2:d8:08:35:
         3c:03:18:5a:39:64:30:6d:dd:91:e0:59:55:01:1d:3d:ec:12:
         18:3c:38:16:88:af:60:5f:2c:7b:4d:9f:31:25:f5:c0:6c:45:
         0c:28:03:81:9e:d8:e7:af:87:75:e1:65:5a:f0:59:74:29:e9:
         31:b6:53:4a:1f:1b:a6:44:7b:6c:f9:a9:5a:90:bf:1a:9c:8b:
         c1:c4:3e:38:fa:e6:71:aa:1c:56:d9:69:db:e4:18:34:e2:4b:
         68:85:45:79:8a:84:42:bb:52:54:af:3a:50:e8:3c:b2:b0:af:
         a9:f1:58:0d:1e:09:d6:7f:bd:da:dd:b9:f1:28:54:6a:14:94:
         fe:04:61:e3:4e:39:af:47:cf:81:db:64:78:21:a9:6b:2c:1d:
         0c:cd:bb:2d:34:8d:54:c5:1c:11:7f:48:ef:f8:1d:42:85:7c:
         f3:4b:2d:37:d5:04:cb:08:ea:08:d6:60:71:9b:18:74:60:5c:
         79:38:82:98:3f:92:dc:99:ae:8a:cc:cf:bc:66:42:10:14:a3:
         f6:a7:9b:05
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPD/8fQt3MZ8a+bsmkLwk7jPg/NcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ3OEE0NUQ1QTAzQkJFNDlDN0IzNkM1MzA3QTVDOUJE
QjM5RjhFRTAeFw0yNDA0MDMxOTA4NDlaFw0yNTA0MDIxOTEzNDlaMDMxMTAvBgNV
BAMTKDg5RDlEMEVCMjIwRUE4M0FDQjU0MDI0MjUzM0Q2OTQ0RkQwODIyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkmhxW6Bvirwfjfc/jDa3VDIx
xXNS0mdkREBJEiuTkD1PzzUVRNxObrNHie4ZpGMX1+fYSZJ0z6BRGoaGWc00U7hl
1UTHKeGuPhpRdvfIVHvgR+lfhD/o1OPOOBepEA5o0eHzxaXAHAzRjsCO3lpeeeWc
7iuTTaupXyUeCZ4/WkDHwbpITNM8cuk4dONUW7AKhFPGW8VaO3E0zkWfqqKgD+2l
20+7g5KzBVkA2D7Esiees8sRMhVgx7ImFwpmQFvNJW0QzOYwvUPKkiZ70DHCTqL4
M6LyvTc3HvSJEhOrjdw0USf4jOteFDV7CVXZe2HYMmxszWPqyxHsJOUyt0P3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUidnQ6yIOqDrLVAJCUz1pRP0IIucwHwYDVR0j
BBgwFoAUFHikXVoDu+ScezbFMHpcm9s5+O4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq
aHIvMS8xNDc4QTQ1RDVBMDNCQkU0OUM3QjM2QzUzMDdBNUM5QkRCMzlGOEVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0NzhBNDVENUEwM0JCRTQ5
QzdCMzZDNTMwN0E1QzlCREIzOUY4RUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuSlFrbjVBUHQyZ0syWktUMUZYVk1OMmF4anVqcVByQWc4cVhzNXRSamhyLzEv
MzIzODMwMzQzYTM2MzUzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARlgDANBgkqhkiG9w0BAQsFAAOCAQEAiBKnL0is
109D1jX6bkYzGHhrmzi/yUN+TU3CrHJGNW5uP7N2PXafEu+/PfnocgbXVT/i2Ag1
PAMYWjlkMG3dkeBZVQEdPewSGDw4FoivYF8se02fMSX1wGxFDCgDgZ7Y56+HdeFl
WvBZdCnpMbZTSh8bpkR7bPmpWpC/GpyLwcQ+OPrmcaocVtlp2+QYNOJLaIVFeYqE
QrtSVK86UOg8srCvqfFYDR4J1n+92t258ShUahSU/gRh4045r0fPgdtkeCGpaywd
DM27LTSNVMUcEX9I7/gdQoV880stN9UEywjqCNZgcZsYdGBceTiCmD+S3JmuiszP
vGZCEBSj9qebBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:32 2024 by rpki-client on console-ams.rpki-client.org