Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/323830343a3464343a3a2f33322d3438203d3e20323632343639.roa
File:                     323830343a3464343a3a2f33322d3438203d3e20323632343639.roa (raw, json)
Hash identifier:          nnKGHAp94KtslMOIEAgMgLhLxMIKMI0U9B68tCP/EHc=
Subject key identifier:   3F:E1:A5:38:C6:AE:C2:FE:5E:8C:6B:5F:BE:65:F8:79:4E:6C:AC:2E
Certificate issuer:       /CN=80F07BF6DABFC69298F3C52A47F39C92BD26D981
Certificate serial:       77A65E2DBBAC3254C12E8A1919DF185B85937DD9
Authority key identifier: 80:F0:7B:F6:DA:BF:C6:92:98:F3:C5:2A:47:F3:9C:92:BD:26:D9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/323830343a3464343a3a2f33322d3438203d3e20323632343639.roa
Signing time:             Fri 01 Nov 2024 19:55:06 +0000
ROA not before:           Fri 01 Nov 2024 19:50:06 +0000
ROA not after:            Fri 31 Oct 2025 19:55:06 +0000
asID:                     262469
IP address blocks:        2804:4d4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.crl
                          rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a6:5e:2d:bb:ac:32:54:c1:2e:8a:19:19:df:18:5b:85:93:7d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F07BF6DABFC69298F3C52A47F39C92BD26D981
        Validity
            Not Before: Nov  1 19:50:06 2024 GMT
            Not After : Oct 31 19:55:06 2025 GMT
        Subject: CN=3FE1A538C6AEC2FE5E8C6B5FBE65F8794E6CAC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:c9:0e:66:74:2e:04:26:bb:18:ab:fa:5c:
                    27:2c:e6:90:ac:f0:22:b9:5a:17:83:7d:6e:c9:8e:
                    18:25:92:ee:2d:c0:50:11:db:79:30:1b:fc:0c:dd:
                    7f:dd:ba:8a:08:82:d6:1d:4b:5c:92:3b:d7:9f:5d:
                    9c:af:76:e5:b0:16:fc:ca:b1:86:14:d3:38:41:ae:
                    c9:89:c6:c8:a4:8e:4f:c9:f8:6c:97:83:c2:e6:8e:
                    9e:64:fa:28:98:eb:9f:87:b8:58:3a:cb:24:10:33:
                    9c:c7:c8:92:92:5a:1b:19:68:bb:cf:61:a2:1b:d3:
                    89:3f:b5:47:56:e0:c9:43:7a:40:d2:25:2d:5f:f8:
                    98:93:82:50:b2:9c:ac:72:67:0e:3e:ca:fb:aa:06:
                    3f:71:71:49:8c:1f:dc:d8:cd:d5:f2:f4:34:90:c4:
                    09:cf:0b:ac:55:bd:8f:a3:b2:b7:ac:f0:40:c4:da:
                    90:2d:ef:36:de:15:be:06:9e:a1:cb:73:4c:1c:a5:
                    34:97:39:7e:f9:7c:fc:4e:7b:5b:28:3b:eb:53:14:
                    84:ae:fb:70:6a:d2:85:d1:a5:fd:05:13:94:e1:9c:
                    c8:1e:e9:73:e7:80:45:97:36:a4:ce:3a:2f:a2:55:
                    c8:56:0c:0c:30:6d:f9:13:91:d8:92:46:5f:c9:77:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E1:A5:38:C6:AE:C2:FE:5E:8C:6B:5F:BE:65:F8:79:4E:6C:AC:2E
            X509v3 Authority Key Identifier:
                keyid:80:F0:7B:F6:DA:BF:C6:92:98:F3:C5:2A:47:F3:9C:92:BD:26:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/323830343a3464343a3a2f33322d3438203d3e20323632343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:05:fd:c2:bb:cc:7f:99:01:fb:b7:e3:9d:43:99:47:a9:1a:
         fc:8d:05:fa:b5:db:89:73:c2:75:2e:4f:a1:a9:01:46:4f:88:
         98:22:27:34:e0:9e:57:e2:45:b5:00:35:7b:23:c4:cf:94:f7:
         1a:be:24:6d:90:30:15:18:c2:bf:6a:8c:e9:56:cb:2b:74:d5:
         41:40:99:3f:84:c6:21:e7:e9:79:eb:d7:61:e9:cc:15:5f:e4:
         5b:1c:63:0b:a2:62:d4:8a:24:89:84:d1:4f:44:d2:01:09:de:
         f2:54:45:1d:1f:cc:03:2d:5b:db:5c:06:aa:cd:70:bd:50:d4:
         2d:e5:ba:8a:e1:89:d5:23:5c:b6:bf:1c:be:85:e5:25:79:83:
         47:ae:de:03:4a:01:bc:99:0e:7f:ff:c1:3f:ac:9d:3e:af:62:
         18:d8:91:c5:30:02:e3:f0:0c:2b:fa:f9:d1:06:0e:9c:9c:95:
         40:f5:2a:73:41:b8:ed:4e:81:fa:e4:b4:c7:f2:b6:f7:48:6d:
         91:6c:09:3b:37:ba:10:a1:30:ca:78:df:de:09:92:ff:99:f2:
         1a:9d:3a:cf:b7:5c:56:3a:40:9b:97:b7:65:f8:3a:a1:6f:e4:
         2a:96:87:9b:b7:62:2b:3c:ff:e9:06:63:e2:b9:43:9e:66:68:
         16:ac:83:93
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUd6ZeLbusMlTBLooZGd8YW4WTfdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBGMDdCRjZEQUJGQzY5Mjk4RjNDNTJBNDdGMzlDOTJC
RDI2RDk4MTAeFw0yNDExMDExOTUwMDZaFw0yNTEwMzExOTU1MDZaMDMxMTAvBgNV
BAMTKDNGRTFBNTM4QzZBRUMyRkU1RThDNkI1RkJFNjVGODc5NEU2Q0FDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BMkOZnQuBCa7GKv6XCcs5pCs
8CK5WheDfW7Jjhglku4twFAR23kwG/wM3X/duooIgtYdS1ySO9efXZyvduWwFvzK
sYYU0zhBrsmJxsikjk/J+GyXg8Lmjp5k+iiY65+HuFg6yyQQM5zHyJKSWhsZaLvP
YaIb04k/tUdW4MlDekDSJS1f+JiTglCynKxyZw4+yvuqBj9xcUmMH9zYzdXy9DSQ
xAnPC6xVvY+jsres8EDE2pAt7zbeFb4GnqHLc0wcpTSXOX75fPxOe1soO+tTFISu
+3Bq0oXRpf0FE5ThnMge6XPngEWXNqTOOi+iVchWDAwwbfkTkdiSRl/Jd+YLAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUP+GlOMauwv5ejGtfvmX4eU5srC4wHwYDVR0j
BBgwFoAUgPB79tq/xpKY88UqR/Ockr0m2YEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsyZGlxZWlZRGc3RDJQQmZXZndUYTRMcjZNUUVXY3JpZGtOaEd4Rjh0
ZzIvMC84MEYwN0JGNkRBQkZDNjkyOThGM0M1MkE0N0YzOUM5MkJEMjZEOTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRjA3QkY2REFCRkM2OTI5
OEYzQzUyQTQ3RjM5QzkyQkQyNkQ5ODEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVLMmRpcWVpWURnN0QyUEJmV2Z3VGE0THI2TVFFV2NyaWRrTmhHeEY4dGcyLzAv
MzIzODMwMzQzYTM0NjQzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM0
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBNQwDQYJKoZIhvcNAQELBQADggEBAJcF/cK7zH+Z
Afu3451DmUepGvyNBfq124lzwnUuT6GpAUZPiJgiJzTgnlfiRbUANXsjxM+U9xq+
JG2QMBUYwr9qjOlWyyt01UFAmT+ExiHn6Xnr12HpzBVf5FscYwuiYtSKJImE0U9E
0gEJ3vJURR0fzAMtW9tcBqrNcL1Q1C3luorhidUjXLa/HL6F5SV5g0eu3gNKAbyZ
Dn//wT+snT6vYhjYkcUwAuPwDCv6+dEGDpyclUD1KnNBuO1OgfrktMfytvdIbZFs
CTs3uhChMMp4394Jkv+Z8hqdOs+3XFY6QJuXt2X4OqFv5CqWh5u3Yis8/+kGY+K5
Q55maBasg5M=
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org