Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa
File:                     323830343a346131383a3a2f33322d3332203d3e20323637323138.roa (raw, json)
Hash identifier:          TV7biGB3orNmq13jOpIy3SA2q5GZgLlktDuR0Bgg490=
Subject key identifier:   64:1D:8D:2B:90:4C:26:D3:27:26:05:64:4E:3B:FB:B9:87:C5:5B:EB
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       30E156C446EC530CCF75770565044EA6EB6C13B8
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa
Signing time:             Thu 04 Apr 2024 07:57:01 +0000
ROA not before:           Thu 04 Apr 2024 07:52:01 +0000
ROA not after:            Thu 03 Apr 2025 07:57:01 +0000
asID:                     267218
IP address blocks:        2804:4a18::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e1:56:c4:46:ec:53:0c:cf:75:77:05:65:04:4e:a6:eb:6c:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Apr  4 07:52:01 2024 GMT
            Not After : Apr  3 07:57:01 2025 GMT
        Subject: CN=641D8D2B904C26D3272605644E3BFBB987C55BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:6b:94:20:b7:7a:ae:2c:36:cb:58:05:51:
                    9b:09:de:1f:f0:97:c7:09:b1:92:2d:f8:73:94:6c:
                    44:58:e3:5e:a0:f0:10:55:14:79:b9:1f:b1:0e:fa:
                    67:17:6c:8f:a8:51:ea:6b:cf:d4:71:fe:8a:2e:6d:
                    ba:de:4e:98:ed:74:b5:a9:ca:6e:58:b8:d5:d1:0a:
                    9f:94:e0:bf:9f:e7:15:ce:75:8e:90:77:fd:f7:dd:
                    55:cc:f2:37:78:ff:00:ab:ec:0d:07:b9:dc:2e:18:
                    8e:1d:7d:be:58:b5:de:f2:7d:f9:dd:e6:a0:3d:a1:
                    13:49:ce:da:e6:b6:5e:74:e7:be:bc:bd:22:f3:50:
                    57:88:ac:2b:27:bc:ad:dd:37:55:dc:d7:4a:05:aa:
                    15:ff:80:c2:3e:d9:53:83:45:f2:bb:ec:f0:ed:82:
                    7e:b8:4b:1d:84:c3:6c:7f:91:5f:1c:8c:c2:57:90:
                    b2:ce:c7:0a:22:54:a7:43:b3:f3:a6:3b:b0:c0:e1:
                    6d:0f:3b:5c:27:15:83:fe:41:21:a2:9d:97:d1:f7:
                    22:38:04:aa:dd:cc:46:21:1c:03:fa:ab:50:a5:d8:
                    04:a1:ef:43:88:7d:e9:15:c4:7d:2e:32:ca:43:fc:
                    6e:3a:e9:f4:6e:96:ff:54:51:e1:ca:d2:d6:81:77:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:8D:2B:90:4C:26:D3:27:26:05:64:4E:3B:FB:B9:87:C5:5B:EB
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:c9:f8:32:73:2e:65:c2:0f:b3:1c:13:96:08:dd:a8:cd:
         d8:79:d1:2d:9c:5c:c7:fa:77:7d:9b:72:6c:fd:a4:a7:6f:81:
         49:01:e4:df:05:09:8b:c5:44:90:6e:43:d8:4f:27:6a:f5:02:
         36:0a:4e:f5:11:0d:49:79:65:e8:68:b7:64:44:a1:82:55:47:
         8e:87:af:f5:80:9a:fc:ab:41:cd:94:f4:09:cf:af:41:0d:df:
         c5:bc:a2:86:4d:06:9a:ef:3b:b2:3f:bc:c6:b4:85:ad:17:62:
         2a:93:c3:d6:06:fb:ff:99:3a:09:4b:c5:7e:ac:73:89:14:91:
         0c:5c:15:1d:7c:8a:22:08:ac:ee:a7:96:13:3f:34:51:84:0c:
         fd:c1:24:40:c9:ca:66:43:7d:37:7c:8c:b8:f8:70:54:7e:f9:
         3f:15:47:fd:15:4e:e4:e8:a8:41:ee:ec:42:56:a2:08:ff:f8:
         16:96:e1:c1:df:02:5e:8a:f7:8a:3b:03:62:d4:ed:10:2d:83:
         e5:eb:d4:57:95:b8:12:d4:dc:8c:70:cd:5e:f2:72:5c:fe:53:
         8e:dc:48:b9:10:f4:a9:8c:e5:e5:19:b3:24:03:cc:1a:8e:20:
         6f:a5:d5:a9:06:4b:13:3c:8d:aa:cd:ee:f5:da:ae:f8:a4:66:
         b5:10:25:94
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMOFWxEbsUwzPdXcFZQROputsE7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNFNjczNjQ4MjQ0RUI0NDE0NjVENjY1MUZDN0ExMEJD
QjExMDlCRTAeFw0yNDA0MDQwNzUyMDFaFw0yNTA0MDMwNzU3MDFaMDMxMTAvBgNV
BAMTKDY0MUQ4RDJCOTA0QzI2RDMyNzI2MDU2NDRFM0JGQkI5ODdDNTVCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKmuUILd6riw2y1gFUZsJ3h/w
l8cJsZIt+HOUbERY416g8BBVFHm5H7EO+mcXbI+oUeprz9Rx/ooubbreTpjtdLWp
ym5YuNXRCp+U4L+f5xXOdY6Qd/333VXM8jd4/wCr7A0HudwuGI4dfb5Ytd7yffnd
5qA9oRNJztrmtl505768vSLzUFeIrCsnvK3dN1Xc10oFqhX/gMI+2VODRfK77PDt
gn64Sx2Ew2x/kV8cjMJXkLLOxwoiVKdDs/OmO7DA4W0PO1wnFYP+QSGinZfR9yI4
BKrdzEYhHAP6q1Cl2ASh70OIfekVxH0uMspD/G466fRulv9UUeHK0taBdx5rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZB2NK5BMJtMnJgVkTjv7uYfFW+swHwYDVR0j
BBgwFoAU/OZzZIJE60QUZdZlH8ehC8sRCb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXk1TFIxVFFxTVBkS01GYTRncU1MdHhaelRaWTlhdlN0UURhcXpMUkxk
VjEvMS9GQ0U2NzM2NDgyNDRFQjQ0MTQ2NUQ2NjUxRkM3QTEwQkNCMTEwOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDRTY3MzY0ODI0NEVCNDQx
NDY1RDY2NTFGQzdBMTBCQ0IxMTA5QkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5NUxSMVRRcU1QZEtNRmE0Z3FNTHR4WnpUWlk5YXZTdFFEYXF6TFJMZFYxLzEv
MzIzODMwMzQzYTM0NjEzMTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzIzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKGDANBgkqhkiG9w0BAQsFAAOCAQEANcTJ+DJz
LmXCD7McE5YI3ajN2HnRLZxcx/p3fZtybP2kp2+BSQHk3wUJi8VEkG5D2E8navUC
NgpO9RENSXll6Gi3ZEShglVHjoev9YCa/KtBzZT0Cc+vQQ3fxbyihk0Gmu87sj+8
xrSFrRdiKpPD1gb7/5k6CUvFfqxziRSRDFwVHXyKIgis7qeWEz80UYQM/cEkQMnK
ZkN9N3yMuPhwVH75PxVH/RVO5OioQe7sQlaiCP/4Fpbhwd8CXor3ijsDYtTtEC2D
5evUV5W4EtTcjHDNXvJyXP5TjtxIuRD0qYzl5RmzJAPMGo4gb6XVqQZLEzyNqs3u
9dqu+KRmtRAllA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org