Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa
File:                     323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa (raw, json)
Hash identifier:          950BzKzU5DVVizByA45e2tm9i0YBurR1VaK7vmKcWL0=
Subject key identifier:   81:F0:4C:C2:A8:FF:84:6D:AE:2F:96:21:33:48:CB:1B:E2:E6:62:3C
Certificate issuer:       /CN=09FD8C705CB193341D9B117D7146D563E0766012
Certificate serial:       34D89CE014DFF2E39D6EDAB74960BD4C2471252A
Authority key identifier: 09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa
Signing time:             Thu 11 Apr 2024 11:06:48 +0000
ROA not before:           Thu 11 Apr 2024 11:01:48 +0000
ROA not after:            Thu 10 Apr 2025 11:06:48 +0000
asID:                     270570
IP address blocks:        2804:6e04:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl
                          rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d8:9c:e0:14:df:f2:e3:9d:6e:da:b7:49:60:bd:4c:24:71:25:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FD8C705CB193341D9B117D7146D563E0766012
        Validity
            Not Before: Apr 11 11:01:48 2024 GMT
            Not After : Apr 10 11:06:48 2025 GMT
        Subject: CN=81F04CC2A8FF846DAE2F96213348CB1BE2E6623C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:a2:f4:2a:9f:8b:b8:d6:df:1b:5f:18:ad:
                    8d:49:dd:ee:e0:fb:60:68:34:b4:5a:22:21:26:e4:
                    7f:a1:f3:a1:8e:c7:2b:b0:2d:0f:08:1b:9b:9e:01:
                    a4:41:35:b4:d8:2b:ce:4a:a7:c5:28:97:46:da:89:
                    c5:a5:38:ac:db:4a:ab:46:c7:a0:f3:75:ec:43:7c:
                    50:a1:45:3f:4d:22:08:ac:f6:d9:59:f5:45:1c:70:
                    0d:72:2c:37:ad:fa:ee:d9:b0:75:dc:d9:6a:44:40:
                    32:69:79:d6:3c:55:1f:08:e7:b4:7c:83:1d:ac:df:
                    77:f9:14:7c:54:d9:fb:1a:86:25:69:6f:48:bb:86:
                    14:87:ff:ce:9b:04:29:7f:08:fe:68:30:09:b8:8b:
                    3f:7c:61:e3:ae:0e:3c:a5:84:57:9a:3f:b3:35:fa:
                    ed:40:5e:e1:bf:f0:b6:33:7e:8a:73:c0:9b:79:5d:
                    3d:d4:83:d3:0e:dc:ef:e2:20:9c:b0:be:86:12:4d:
                    6d:4e:2c:c5:4a:24:6e:4c:85:d4:48:8f:a9:31:68:
                    10:da:67:1f:c9:20:4f:19:4f:4a:3e:16:98:5e:87:
                    83:89:ce:51:37:65:b9:4d:4a:42:f5:c1:a1:ac:a0:
                    15:b5:07:6a:ff:17:5b:b6:95:40:dd:52:5a:c5:9c:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F0:4C:C2:A8:FF:84:6D:AE:2F:96:21:33:48:CB:1B:E2:E6:62:3C
            X509v3 Authority Key Identifier:
                keyid:09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e04:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:85:5e:0d:60:7c:7e:0c:1b:bd:68:9c:dd:44:26:f3:d5:
         1a:47:fc:4e:13:53:8f:e0:d9:08:cd:0f:a4:a2:49:76:15:8b:
         97:18:3b:00:eb:83:29:87:a1:6e:e1:4f:d5:36:47:d4:5c:21:
         ac:44:6f:3d:fa:96:5f:e1:91:3d:f1:e1:cc:cd:5c:c9:4f:5d:
         d2:d7:a5:b4:ce:46:82:f8:e7:19:a1:18:24:5b:28:46:32:00:
         df:d2:29:d1:89:15:a7:48:04:e9:43:6c:58:4c:34:9e:ac:a6:
         90:93:f6:90:5b:bf:a1:46:de:69:3c:16:21:b2:d5:7c:59:8b:
         71:e2:34:8a:87:b9:52:93:90:e2:fd:0e:0b:92:01:cc:d4:97:
         2a:ff:82:69:c3:b9:aa:5b:f9:bb:eb:7e:46:2f:8b:52:2f:56:
         1e:19:ce:fd:4e:af:ad:40:3d:32:d3:c8:a5:0e:f1:07:04:9c:
         ef:9f:5d:f9:3f:25:25:7b:05:66:f0:ab:df:21:57:2a:6d:11:
         8b:fa:40:a5:a1:89:8b:79:75:52:15:f3:46:0c:60:81:1a:42:
         40:71:02:eb:4c:11:07:69:34:42:88:8b:4e:53:9d:fe:58:20:
         d7:3c:82:68:08:ac:9a:53:3a:3f:35:8e:c5:f2:f4:1e:9e:fd:
         e3:05:f0:d5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNNic4BTf8uOdbtq3SWC9TCRxJSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGRDhDNzA1Q0IxOTMzNDFEOUIxMTdENzE0NkQ1NjNF
MDc2NjAxMjAeFw0yNDA0MTExMTAxNDhaFw0yNTA0MTAxMTA2NDhaMDMxMTAvBgNV
BAMTKDgxRjA0Q0MyQThGRjg0NkRBRTJGOTYyMTMzNDhDQjFCRTJFNjYyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPKL0Kp+LuNbfG18YrY1J3e7g
+2BoNLRaIiEm5H+h86GOxyuwLQ8IG5ueAaRBNbTYK85Kp8Uol0baicWlOKzbSqtG
x6DzdexDfFChRT9NIgis9tlZ9UUccA1yLDet+u7ZsHXc2WpEQDJpedY8VR8I57R8
gx2s33f5FHxU2fsahiVpb0i7hhSH/86bBCl/CP5oMAm4iz98YeOuDjylhFeaP7M1
+u1AXuG/8LYzfopzwJt5XT3Ug9MO3O/iIJywvoYSTW1OLMVKJG5MhdRIj6kxaBDa
Zx/JIE8ZT0o+Fpheh4OJzlE3ZblNSkL1waGsoBW1B2r/F1u2lUDdUlrFnEpvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgfBMwqj/hG2uL5YhM0jLG+LmYjwwHwYDVR0j
BBgwFoAUCf2McFyxkzQdmxF9cUbVY+B2YBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRqV2ZTVVg0cnMyQ3hmNTNHbTk1WExQVlNwUmNaQXNQVjFwMndRUWh4
d24vMS8wOUZEOEM3MDVDQjE5MzM0MUQ5QjExN0Q3MTQ2RDU2M0UwNzY2MDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RkQ4QzcwNUNCMTkzMzQx
RDlCMTE3RDcxNDZENTYzRTA3NjYwMTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0aldmU1VYNHJzMkN4ZjUzR205NVhMUFZTcFJjWkFzUFYxcDJ3UVFoeHduLzEv
MzIzODMwMzQzYTM2NjUzMDM0M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM1MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEbgQQMA0GCSqGSIb3DQEBCwUA
A4IBAQAr9YVeDWB8fgwbvWic3UQm89UaR/xOE1OP4NkIzQ+kokl2FYuXGDsA64Mp
h6Fu4U/VNkfUXCGsRG89+pZf4ZE98eHMzVzJT13S16W0zkaC+OcZoRgkWyhGMgDf
0inRiRWnSATpQ2xYTDSerKaQk/aQW7+hRt5pPBYhstV8WYtx4jSKh7lSk5Di/Q4L
kgHM1Jcq/4Jpw7mqW/m7635GL4tSL1YeGc79Tq+tQD0y08ilDvEHBJzvn135PyUl
ewVm8KvfIVcqbRGL+kCloYmLeXVSFfNGDGCBGkJAcQLrTBEHaTRCiItOU53+WCDX
PIJoCKyaUzo/NY7F8vQenv3jBfDV
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org