Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa
File:                     323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa (raw, json)
Hash identifier:          uNptzJZuv0tVXbF3MoxQ2GKCAB03IHpH+X6UTI5rYDI=
Subject key identifier:   8F:7C:E1:60:2A:71:33:F5:63:79:3C:09:12:35:DF:79:CE:F7:F5:E8
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       6535CCDD65575C27387C6885351C058D760103CC
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:27:03 +0000
ROA not before:           Wed 15 May 2024 13:22:03 +0000
ROA not after:            Wed 14 May 2025 13:27:03 +0000
asID:                     262424
IP address blocks:        2804:6164:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:35:cc:dd:65:57:5c:27:38:7c:68:85:35:1c:05:8d:76:01:03:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:22:03 2024 GMT
            Not After : May 14 13:27:03 2025 GMT
        Subject: CN=8F7CE1602A7133F563793C091235DF79CEF7F5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:97:c1:59:1d:24:95:89:f3:cf:cf:6b:d3:
                    2c:70:43:36:0b:3b:47:c9:a1:27:1b:40:4c:dc:d9:
                    8f:2e:fe:0c:fa:33:48:5a:a5:65:f6:e6:cb:ad:4b:
                    76:57:05:e6:47:8c:95:e0:1f:48:19:34:5f:77:a9:
                    1c:84:b4:36:61:68:de:bf:b5:18:e9:41:7b:48:d8:
                    db:35:34:69:c4:5e:e4:1e:5f:15:9f:29:fe:d4:78:
                    c1:3d:58:06:da:ec:44:b1:4f:d8:0e:cf:d5:8c:e4:
                    e5:d4:a8:ed:04:ba:41:d6:26:01:77:97:20:9c:c9:
                    31:ad:a1:21:87:49:3f:5a:ff:ab:86:52:96:5f:2d:
                    d1:0d:4d:ea:0e:38:78:b7:15:3d:cd:e9:fc:de:6b:
                    0f:65:84:2d:5d:10:04:3c:c2:48:71:4f:84:9e:83:
                    aa:d2:73:5e:3a:dd:49:8a:74:b0:4f:50:73:e8:9b:
                    da:25:dd:96:d4:3f:01:d9:8e:33:b6:81:72:9f:dd:
                    7f:c2:09:ee:c7:0f:af:06:fb:ce:4f:1a:a0:70:3c:
                    4c:1e:da:ac:74:73:87:02:8f:3f:59:64:88:bc:4a:
                    72:a9:fb:f1:32:3f:3c:f8:77:9e:68:67:e2:fb:1d:
                    d0:7c:2f:48:b8:12:41:39:0f:ae:23:72:e1:ee:3e:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:E1:60:2A:71:33:F5:63:79:3C:09:12:35:DF:79:CE:F7:F5:E8
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:ed:06:1b:61:98:01:30:c2:5f:e9:bf:73:6c:75:2b:30:
         11:7e:cb:f8:77:68:cc:d7:d2:a5:9e:b8:11:b1:fb:d4:02:16:
         0a:ba:8c:d1:67:86:86:90:df:dd:ad:c7:94:ba:de:26:c2:89:
         1e:2f:d6:80:12:0a:0f:61:f6:bd:e4:e2:ad:29:22:1a:d8:62:
         b4:54:a2:97:d0:c3:94:b4:e7:2c:2b:ff:31:21:b5:52:1e:52:
         59:c6:49:a6:9a:05:ff:2e:77:59:49:84:35:d2:25:5f:b6:1b:
         e0:35:ee:94:c5:31:a1:05:56:34:dd:f7:cc:dd:82:e3:19:2b:
         7c:f4:b3:5f:d3:14:70:99:e1:1a:f6:f7:56:74:8a:dd:d3:e2:
         27:02:52:e8:96:b7:72:e5:a0:13:1b:d1:5f:14:06:78:75:d6:
         cd:46:5c:09:62:7c:e0:a7:51:ec:2f:d4:16:f7:e7:38:ef:2a:
         cf:b4:7d:59:42:df:27:03:8e:76:f3:4b:b2:74:e6:e1:71:10:
         a5:d7:49:81:f4:c4:8a:97:66:0b:71:8a:c4:ad:31:a5:3a:29:
         d8:f3:15:08:fe:93:60:b3:a0:15:bf:cc:7b:18:ec:af:a5:25:
         62:2b:8c:51:f5:fb:04:4a:5e:c2:63:bf:5b:31:22:5b:f2:df:
         fb:3c:ce:f6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZTXM3WVXXCc4fGiFNRwFjXYBA8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC
QjQ0NzBBMzAeFw0yNDA1MTUxMzIyMDNaFw0yNTA1MTQxMzI3MDNaMDMxMTAvBgNV
BAMTKDhGN0NFMTYwMkE3MTMzRjU2Mzc5M0MwOTEyMzVERjc5Q0VGN0Y1RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCve5fBWR0klYnzz89r0yxwQzYL
O0fJoScbQEzc2Y8u/gz6M0hapWX25sutS3ZXBeZHjJXgH0gZNF93qRyEtDZhaN6/
tRjpQXtI2Ns1NGnEXuQeXxWfKf7UeME9WAba7ESxT9gOz9WM5OXUqO0EukHWJgF3
lyCcyTGtoSGHST9a/6uGUpZfLdENTeoOOHi3FT3N6fzeaw9lhC1dEAQ8wkhxT4Se
g6rSc1463UmKdLBPUHPom9ol3ZbUPwHZjjO2gXKf3X/CCe7HD68G+85PGqBwPEwe
2qx0c4cCjz9ZZIi8SnKp+/EyPzz4d55oZ+L7HdB8L0i4EkE5D64jcuHuPlw3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUj3zhYCpxM/VjeTwJEjXfec739egwHwYDVR0j
BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0
MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzIzODMwMzQzYTM2MzEzNjM0M2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMjM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEYWSgMA0GCSqGSIb3DQEBCwUA
A4IBAQANEO0GG2GYATDCX+m/c2x1KzARfsv4d2jM19KlnrgRsfvUAhYKuozRZ4aG
kN/drceUut4mwokeL9aAEgoPYfa95OKtKSIa2GK0VKKX0MOUtOcsK/8xIbVSHlJZ
xkmmmgX/LndZSYQ10iVfthvgNe6UxTGhBVY03ffM3YLjGSt89LNf0xRwmeEa9vdW
dIrd0+InAlLolrdy5aATG9FfFAZ4ddbNRlwJYnzgp1HsL9QW9+c47yrPtH1ZQt8n
A45280uydObhcRCl10mB9MSKl2YLcYrErTGlOinY8xUI/pNgs6AVv8x7GOyvpSVi
K4xR9fsESl7CY79bMSJb8t/7PM72
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:13 2024 by rpki-client on console-ams.rpki-client.org