Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa
File:                     323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (raw, json)
Hash identifier:          07LxCY4RP+dgXtSWb3UlLzYruLlQOXWvgD3VUPbtVeU=
Subject key identifier:   06:1C:C1:05:B9:A2:F8:B4:F1:53:73:8C:9D:BB:24:89:BA:CE:A7:96
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       574BC88D8A6B97308D73CB24B5C5F9D1E0F0AB01
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa
Signing time:             Thu 04 Apr 2024 13:19:26 +0000
ROA not before:           Thu 04 Apr 2024 13:14:26 +0000
ROA not after:            Thu 03 Apr 2025 13:19:26 +0000
asID:                     271589
IP address blocks:        2804:7de4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl
                          rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4b:c8:8d:8a:6b:97:30:8d:73:cb:24:b5:c5:f9:d1:e0:f0:ab:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: Apr  4 13:14:26 2024 GMT
            Not After : Apr  3 13:19:26 2025 GMT
        Subject: CN=061CC105B9A2F8B4F153738C9DBB2489BACEA796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:12:61:f7:ff:41:6b:59:9b:f5:a5:d6:0a:
                    ad:9c:39:3f:a3:48:df:5e:28:fd:a8:24:6e:23:c7:
                    20:51:38:4b:9d:80:21:6d:98:b2:47:e7:32:f3:fe:
                    8d:c7:e6:ec:cf:0a:9e:eb:c9:6c:ef:51:aa:82:ee:
                    b0:4c:80:32:b1:f0:19:70:fc:f1:ac:57:5a:df:99:
                    5a:dc:f3:33:2e:7c:59:a6:aa:41:8d:1a:5d:d9:91:
                    23:3b:93:f1:bd:d5:9c:5d:ab:c1:fc:24:97:53:5a:
                    55:a2:9a:8a:ca:70:43:00:db:be:02:7d:f5:39:38:
                    8a:cc:01:bb:a6:5d:b7:c4:be:4e:2f:8a:ab:2f:a0:
                    55:c0:24:e7:7a:6d:95:43:9a:61:07:ca:88:38:c1:
                    70:6a:b6:fd:bd:1b:4e:4a:7f:99:6e:30:67:90:34:
                    b5:25:ae:e9:e8:61:4f:2d:77:a8:65:22:cc:55:49:
                    3a:e7:41:02:fc:d5:35:ed:52:27:0b:a9:2c:bb:db:
                    22:a7:0c:1c:e6:1e:5d:c8:4f:3d:ee:bb:44:60:4b:
                    d7:62:fd:d6:6a:ea:29:2a:fc:49:65:be:de:d4:64:
                    73:36:7d:a3:a0:65:3b:ac:af:d5:bb:82:f6:db:33:
                    57:96:51:7b:59:60:bf:2e:d1:bd:56:43:e8:00:c3:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1C:C1:05:B9:A2:F8:B4:F1:53:73:8C:9D:BB:24:89:BA:CE:A7:96
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7de4::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:19:ac:f1:26:14:fc:4f:60:b5:35:9c:7e:9a:ba:6d:b6:c8:
         70:3a:ea:b0:56:4c:48:83:df:d0:da:28:f1:f2:80:2e:95:05:
         c4:2c:bf:05:64:40:03:4b:80:65:e0:5f:fc:72:7a:7d:c7:8f:
         e1:cd:13:96:bd:44:79:cc:0c:ca:62:23:c7:e1:d5:62:14:eb:
         b2:68:cf:ce:34:77:e1:7f:c9:e4:7f:c1:df:bc:e8:d5:d1:37:
         22:1e:71:e9:ba:21:34:25:5e:57:3f:0e:85:47:83:f2:a8:bc:
         bc:70:76:57:bc:1d:17:eb:6e:a0:2a:02:1a:cf:f8:81:71:c2:
         de:c0:8f:e3:db:37:bd:f2:53:b0:09:c3:dc:ab:1b:3c:ec:33:
         7c:bc:c4:56:b6:1e:38:65:a4:a0:d4:73:c7:4b:00:0f:2a:a4:
         61:ab:73:c2:17:1b:f8:89:89:c9:59:5a:3a:cd:4e:59:25:fb:
         5f:32:bc:bb:7c:b6:40:ae:06:28:19:a3:36:e4:77:ac:23:0d:
         be:e7:7a:fa:75:09:cf:3f:ff:69:75:19:d5:60:ba:ec:c2:66:
         88:2d:8a:7a:25:e0:56:cd:bd:5c:71:a3:79:6f:df:2a:4a:0a:
         09:6e:50:2c:e1:9b:c8:9a:5a:1f:da:bc:13:19:a7:5b:88:fe:
         b5:2f:c8:9f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUV0vIjYprlzCNc8sktcX50eDwqwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkwRDE5OURBQTRERDFENjhBNDMwQ0VFMEE5MEE2RThG
QkFBRDdDODAeFw0yNDA0MDQxMzE0MjZaFw0yNTA0MDMxMzE5MjZaMDMxMTAvBgNV
BAMTKDA2MUNDMTA1QjlBMkY4QjRGMTUzNzM4QzlEQkIyNDg5QkFDRUE3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKRJh9/9Ba1mb9aXWCq2cOT+j
SN9eKP2oJG4jxyBROEudgCFtmLJH5zLz/o3H5uzPCp7ryWzvUaqC7rBMgDKx8Blw
/PGsV1rfmVrc8zMufFmmqkGNGl3ZkSM7k/G91Zxdq8H8JJdTWlWimorKcEMA274C
ffU5OIrMAbumXbfEvk4viqsvoFXAJOd6bZVDmmEHyog4wXBqtv29G05Kf5luMGeQ
NLUlrunoYU8td6hlIsxVSTrnQQL81TXtUicLqSy72yKnDBzmHl3ITz3uu0RgS9di
/dZq6ikq/Ellvt7UZHM2faOgZTusr9W7gvbbM1eWUXtZYL8u0b1WQ+gAwwotAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBhzBBbmi+LTxU3OMnbskibrOp5YwHwYDVR0j
BBgwFoAUqQ0ZnapN0daKQwzuCpCm6Puq18gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsyMmhvQ1lWeDc2dUFlNmdKRm0xc2lnU0RWRTJRb3BneEU4NTVIZVlY
THEvMS9BOTBEMTk5REFBNEREMUQ2OEE0MzBDRUUwQTkwQTZFOEZCQUFEN0M4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MEQxOTlEQUE0REQxRDY4
QTQzMENFRTBBOTBBNkU4RkJBQUQ3QzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVLMjJob0NZVng3NnVBZTZnSkZtMXNpZ1NEVkUyUW9wZ3hFODU1SGVZWExxLzEv
MzIzODMwMzQzYTM3NjQ2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzUzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR95DANBgkqhkiG9w0BAQsFAAOCAQEAdhms8SYU
/E9gtTWcfpq6bbbIcDrqsFZMSIPf0Noo8fKALpUFxCy/BWRAA0uAZeBf/HJ6fceP
4c0Tlr1EecwMymIjx+HVYhTrsmjPzjR34X/J5H/B37zo1dE3Ih5x6bohNCVeVz8O
hUeD8qi8vHB2V7wdF+tuoCoCGs/4gXHC3sCP49s3vfJTsAnD3KsbPOwzfLzEVrYe
OGWkoNRzx0sADyqkYatzwhcb+ImJyVlaOs1OWSX7XzK8u3y2QK4GKBmjNuR3rCMN
vud6+nUJzz//aXUZ1WC67MJmiC2KeiXgVs29XHGjeW/fKkoKCW5QLOGbyJpaH9q8
ExmnW4j+tS/Inw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:12 2024 by rpki-client on console-ams.rpki-client.org