Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
File:                     323830343a333464633a3a2f33322d3430203d3e20323635343835.roa (raw, json)
Hash identifier:          FiQl2kadUtgCtzyQePnN12ea7RLMBxG1ShbuoBKebmI=
Subject key identifier:   87:11:25:32:6A:F1:EB:D6:A8:5A:16:7A:4B:DF:A6:9E:7D:0C:BD:81
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       211C188D23687A37AAED38C65D2AA4BB3BF9BAA7
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
Signing time:             Fri 05 Apr 2024 03:32:21 +0000
ROA not before:           Fri 05 Apr 2024 03:27:21 +0000
ROA not after:            Fri 04 Apr 2025 03:32:21 +0000
asID:                     265485
IP address blocks:        2804:34dc::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1c:18:8d:23:68:7a:37:aa:ed:38:c6:5d:2a:a4:bb:3b:f9:ba:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Apr  5 03:27:21 2024 GMT
            Not After : Apr  4 03:32:21 2025 GMT
        Subject: CN=871125326AF1EBD6A85A167A4BDFA69E7D0CBD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:06:b1:b2:22:a3:57:43:e6:5f:df:a7:44:
                    75:3a:41:46:6a:bd:62:91:a0:c7:f2:eb:71:fd:9b:
                    b0:83:51:bc:6e:7b:86:b6:9c:23:9e:6c:98:c7:8b:
                    40:60:47:72:8d:46:33:e3:92:4b:e9:c4:54:8b:ba:
                    b4:a0:fa:fa:2f:4e:23:30:0e:12:bf:ff:60:b3:e5:
                    92:55:ea:64:0b:88:9c:87:09:84:05:ff:35:d8:18:
                    07:1a:69:5c:fe:39:55:f6:75:9f:6c:bc:0c:69:af:
                    80:66:19:95:72:4e:30:fe:a3:d2:06:a0:28:31:78:
                    b5:fa:a3:7d:a0:e3:74:eb:39:b8:0f:e6:ae:39:51:
                    e0:d6:20:fa:71:41:7f:27:86:77:de:e1:7b:49:65:
                    1f:43:79:4b:8d:61:98:56:a8:5c:01:dd:88:71:13:
                    35:c6:ba:ff:9e:97:a1:78:9d:62:58:f8:10:be:f2:
                    2e:3d:77:98:96:59:72:89:b5:2b:b9:3a:1c:34:53:
                    e3:ed:8c:1f:2b:b8:a9:ce:5e:7b:3b:5a:12:14:a6:
                    f0:f3:01:07:64:96:43:b6:ab:19:ac:b1:1d:3d:19:
                    9b:96:ee:5c:9b:23:af:80:ab:cb:09:7f:64:2e:dc:
                    c5:e3:ca:97:86:c5:d4:27:06:f7:ca:a4:42:64:e8:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:11:25:32:6A:F1:EB:D6:A8:5A:16:7A:4B:DF:A6:9E:7D:0C:BD:81
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:af:b7:7a:6f:2e:a7:18:14:67:23:42:b5:02:e2:dd:6c:f2:
         98:49:63:f7:65:c2:d3:fc:f4:fb:6e:01:4e:54:4c:21:0c:79:
         7b:83:4a:96:7b:a1:ea:8d:79:35:f7:47:26:1f:fe:7d:eb:95:
         0b:ea:a7:d6:f3:87:b4:3f:9e:43:2d:ad:4e:3a:1a:9f:84:46:
         30:62:69:c1:6c:9d:55:f0:0e:5f:15:68:a3:89:c5:31:b5:1f:
         92:4a:d4:36:0b:f7:dd:e2:55:55:fd:61:39:b9:1f:37:16:50:
         04:13:54:d4:14:f7:bd:e6:04:0b:fd:2b:35:5e:c3:11:62:94:
         d5:ff:27:c2:7d:56:4a:12:81:18:18:8b:39:7e:ca:37:69:aa:
         57:30:37:ca:3f:57:a4:fe:64:f9:f2:4d:a0:e3:f6:32:26:3f:
         a2:87:6b:e2:6d:48:ca:1b:d0:e1:dc:41:1e:91:54:6d:e7:2d:
         ce:2e:f5:58:83:f7:79:cd:63:d3:28:63:8f:c2:68:23:d3:eb:
         5b:b8:75:68:6d:36:7c:19:6f:c8:19:5b:51:b2:7a:6d:fb:20:
         7f:ef:39:33:93:96:66:1e:2d:b5:fe:84:75:ae:51:91:ec:6e:
         93:b4:52:2d:ac:0f:a0:9c:e6:8d:c7:4e:5d:26:a3:e0:88:4c:
         ac:90:8b:2d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIRwYjSNoejeq7TjGXSqkuzv5uqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRC
M0I5OUVCRTAeFw0yNDA0MDUwMzI3MjFaFw0yNTA0MDQwMzMyMjFaMDMxMTAvBgNV
BAMTKDg3MTEyNTMyNkFGMUVCRDZBODVBMTY3QTRCREZBNjlFN0QwQ0JEODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7AaxsiKjV0PmX9+nRHU6QUZq
vWKRoMfy63H9m7CDUbxue4a2nCOebJjHi0BgR3KNRjPjkkvpxFSLurSg+vovTiMw
DhK//2Cz5ZJV6mQLiJyHCYQF/zXYGAcaaVz+OVX2dZ9svAxpr4BmGZVyTjD+o9IG
oCgxeLX6o32g43TrObgP5q45UeDWIPpxQX8nhnfe4XtJZR9DeUuNYZhWqFwB3Yhx
EzXGuv+el6F4nWJY+BC+8i49d5iWWXKJtSu5Ohw0U+PtjB8ruKnOXns7WhIUpvDz
AQdklkO2qxmssR09GZuW7lybI6+Aq8sJf2Qu3MXjypeGxdQnBvfKpEJk6JfhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhxElMmrx69aoWhZ6S9+mnn0MvYEwHwYDVR0j
BBgwFoAU8MELy58C2CR6oCo+3qlN1LO5nr4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzEvRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRCM0I5OUVCRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GMEMxMEJDQjlGMDJEODI0N0FB
MDJBM0VERUE5NERENEIzQjk5RUJFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzEvMzIz
ODMwMzQzYTMzMzQ2NDYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM1MzQz
ODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQ03DANBgkqhkiG9w0BAQsFAAOCAQEACK+3em8upxgU
ZyNCtQLi3WzymElj92XC0/z0+24BTlRMIQx5e4NKlnuh6o15NfdHJh/+feuVC+qn
1vOHtD+eQy2tTjoan4RGMGJpwWydVfAOXxVoo4nFMbUfkkrUNgv33eJVVf1hObkf
NxZQBBNU1BT3veYEC/0rNV7DEWKU1f8nwn1WShKBGBiLOX7KN2mqVzA3yj9XpP5k
+fJNoOP2MiY/oodr4m1IyhvQ4dxBHpFUbectzi71WIP3ec1j0yhjj8JoI9PrW7h1
aG02fBlvyBlbUbJ6bfsgf+85M5OWZh4ttf6Eda5Rkexuk7RSLawPoJzmjcdOXSaj
4IhMrJCLLQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org