Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/323830343a346130383a3a2f33322d3334203d3e20323637323134.roa
File:                     323830343a346130383a3a2f33322d3334203d3e20323637323134.roa (raw, json)
Hash identifier:          crEbRjzR0ZdrExfANDEN9leTcw9CUzlYmx13uiC7YM0=
Subject key identifier:   8E:5F:54:D7:CF:3E:58:DC:28:76:45:8E:03:D9:88:43:14:09:78:FA
Certificate issuer:       /CN=9A50767474965B8AC59E304DB2CBB07D10869792
Certificate serial:       3154C38CC11131F94AB1CD02A8673C372D77F0E8
Authority key identifier: 9A:50:76:74:74:96:5B:8A:C5:9E:30:4D:B2:CB:B0:7D:10:86:97:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A50767474965B8AC59E304DB2CBB07D10869792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/323830343a346130383a3a2f33322d3334203d3e20323637323134.roa
Signing time:             Wed 03 Apr 2024 20:55:23 +0000
ROA not before:           Wed 03 Apr 2024 20:50:23 +0000
ROA not after:            Wed 02 Apr 2025 20:55:23 +0000
asID:                     267214
IP address blocks:        2804:4a08::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/9A50767474965B8AC59E304DB2CBB07D10869792.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/9A50767474965B8AC59E304DB2CBB07D10869792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A50767474965B8AC59E304DB2CBB07D10869792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:54:c3:8c:c1:11:31:f9:4a:b1:cd:02:a8:67:3c:37:2d:77:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A50767474965B8AC59E304DB2CBB07D10869792
        Validity
            Not Before: Apr  3 20:50:23 2024 GMT
            Not After : Apr  2 20:55:23 2025 GMT
        Subject: CN=8E5F54D7CF3E58DC2876458E03D98843140978FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:f6:2c:cd:51:d7:3b:2b:18:08:71:86:41:
                    23:43:97:51:ff:34:dc:fb:24:02:1e:28:7d:df:03:
                    be:f9:a2:bb:85:24:35:f4:1c:fc:4d:a9:99:fe:94:
                    89:ff:46:dd:ef:4a:63:1f:22:7f:f4:b9:10:3b:79:
                    d7:16:c6:35:a6:f4:d5:da:44:7c:3e:5f:bd:68:5b:
                    22:7f:f1:8d:d7:68:76:21:46:9f:69:c2:85:3b:2e:
                    6f:a9:68:78:be:de:10:73:d7:fc:f4:40:fd:9e:4c:
                    85:bd:26:af:0f:4b:65:fd:0c:51:a7:96:a8:c7:f0:
                    a9:cc:38:78:7e:87:b2:bb:c1:d0:59:84:e0:41:04:
                    05:a2:e5:7f:be:62:12:b4:66:7e:b3:2b:21:f6:28:
                    6e:eb:43:77:e0:12:58:c8:90:69:24:c0:cd:be:66:
                    5b:72:60:8f:ca:80:24:3b:60:1e:5b:b3:e2:f8:6b:
                    20:9e:90:24:16:a5:47:94:83:b4:7c:2b:cf:41:06:
                    f2:15:6e:a2:09:38:63:4a:cd:bd:3e:91:16:63:0d:
                    97:86:e1:23:cc:2a:f2:63:15:48:ee:a7:27:81:87:
                    f2:a7:d6:ac:15:7c:92:4b:67:83:0f:9f:1e:40:aa:
                    34:69:f8:72:14:f5:0b:51:e3:ff:22:1d:40:86:78:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:54:D7:CF:3E:58:DC:28:76:45:8E:03:D9:88:43:14:09:78:FA
            X509v3 Authority Key Identifier:
                keyid:9A:50:76:74:74:96:5B:8A:C5:9E:30:4D:B2:CB:B0:7D:10:86:97:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/9A50767474965B8AC59E304DB2CBB07D10869792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A50767474965B8AC59E304DB2CBB07D10869792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/1/323830343a346130383a3a2f33322d3334203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:77:fd:00:1b:93:68:a2:ca:5e:6a:af:b8:30:c0:67:23:
         2a:21:de:d2:f9:e5:1a:c7:18:a6:72:30:b8:ef:7d:05:5f:cf:
         c3:3a:8b:c5:9f:0d:04:d9:88:d0:d1:13:7d:40:ac:c7:a7:99:
         e2:23:f5:83:38:f5:88:ec:71:bb:ce:4e:9a:01:09:d7:cc:11:
         f4:ac:20:7d:d3:eb:6c:05:07:69:70:9b:73:b1:4b:f5:08:59:
         3b:95:df:51:d1:11:41:af:1b:e0:06:92:ba:6a:13:83:88:6a:
         4b:9f:62:7c:c2:d6:fb:ae:4f:33:e7:0c:ee:e0:ec:24:2e:16:
         14:f9:c8:4b:10:aa:9c:d6:1a:9e:82:07:2c:51:9e:9d:d9:eb:
         c9:5c:f3:54:4b:bc:93:9e:6a:4f:46:97:c5:77:33:a5:ff:94:
         a1:6a:c4:5c:10:5d:d5:31:95:2c:8a:a4:86:a5:db:be:a7:3b:
         d8:a8:ef:d3:05:65:b7:90:c5:48:2c:ac:32:b8:26:13:f5:87:
         33:91:00:3b:ce:04:56:c9:7e:19:a8:cf:7b:eb:e1:88:d5:b3:
         00:e0:dd:d8:e8:67:6f:7d:68:e4:99:2b:1c:9b:92:cd:09:89:
         e9:87:fa:12:14:95:1a:33:c8:cb:d6:c0:32:70:ec:70:91:93:
         e8:ab:76:9d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMVTDjMERMflKsc0CqGc8Ny138OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MDc2NzQ3NDk2NUI4QUM1OUUzMDREQjJDQkIwN0Qx
MDg2OTc5MjAeFw0yNDA0MDMyMDUwMjNaFw0yNTA0MDIyMDU1MjNaMDMxMTAvBgNV
BAMTKDhFNUY1NEQ3Q0YzRTU4REMyODc2NDU4RTAzRDk4ODQzMTQwOTc4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yfYszVHXOysYCHGGQSNDl1H/
NNz7JAIeKH3fA775oruFJDX0HPxNqZn+lIn/Rt3vSmMfIn/0uRA7edcWxjWm9NXa
RHw+X71oWyJ/8Y3XaHYhRp9pwoU7Lm+paHi+3hBz1/z0QP2eTIW9Jq8PS2X9DFGn
lqjH8KnMOHh+h7K7wdBZhOBBBAWi5X++YhK0Zn6zKyH2KG7rQ3fgEljIkGkkwM2+
ZltyYI/KgCQ7YB5bs+L4ayCekCQWpUeUg7R8K89BBvIVbqIJOGNKzb0+kRZjDZeG
4SPMKvJjFUjupyeBh/Kn1qwVfJJLZ4MPnx5AqjRp+HIU9QtR4/8iHUCGePXBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjl9U188+WNwodkWOA9mIQxQJePowHwYDVR0j
BBgwFoAUmlB2dHSWW4rFnjBNssuwfRCGl5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVU5ZEVpTUZ6NkhZOUxrYVZ0NFQ2RjFnOUpCSzJISHZObUo2WlA4d3Rl
MTUvMS85QTUwNzY3NDc0OTY1QjhBQzU5RTMwNERCMkNCQjA3RDEwODY5NzkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBNTA3Njc0NzQ5NjVCOEFD
NTlFMzA0REIyQ0JCMDdEMTA4Njk3OTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVVOWRFaU1GejZIWTlMa2FWdDRUNkYxZzlKQksySEh2Tm1KNlpQOHd0ZTE1LzEv
MzIzODMwMzQzYTM0NjEzMDM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM3
MzIzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKCDANBgkqhkiG9w0BAQsFAAOCAQEAAMl3/QAb
k2iiyl5qr7gwwGcjKiHe0vnlGscYpnIwuO99BV/PwzqLxZ8NBNmI0NETfUCsx6eZ
4iP1gzj1iOxxu85OmgEJ18wR9KwgfdPrbAUHaXCbc7FL9QhZO5XfUdERQa8b4AaS
umoTg4hqS59ifMLW+65PM+cM7uDsJC4WFPnISxCqnNYanoIHLFGendnryVzzVEu8
k55qT0aXxXczpf+UoWrEXBBd1TGVLIqkhqXbvqc72Kjv0wVlt5DFSCysMrgmE/WH
M5EAO84EVsl+GajPe+vhiNWzAODd2Ohnb31o5JkrHJuSzQmJ6Yf6EhSVGjPIy9bA
MnDscJGT6Kt2nQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:58 2024 by rpki-client on console-ams.rpki-client.org