Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          KAV4ZvrYEKLV8bo8FMmJE0D9reSDt50nOrcDXqCRCM8=
Subject key identifier:   52:98:3C:F4:18:C2:4A:EB:D3:EA:B6:52:D9:E4:83:46:62:89:08:E8
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       08C988C1A83F033EE88B608A011822CAB93286D6
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Thu 04 Apr 2024 07:56:59 +0000
ROA not before:           Thu 04 Apr 2024 07:51:59 +0000
ROA not after:            Thu 03 Apr 2025 07:56:59 +0000
asID:                     267218
IP address blocks:        2804:4a18:bbbc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c9:88:c1:a8:3f:03:3e:e8:8b:60:8a:01:18:22:ca:b9:32:86:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Apr  4 07:51:59 2024 GMT
            Not After : Apr  3 07:56:59 2025 GMT
        Subject: CN=52983CF418C24AEBD3EAB652D9E48346628908E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:ac:40:5e:dd:3a:9e:f2:1b:c4:4b:e7:86:
                    2f:3a:40:b5:97:28:f4:07:72:1f:20:9b:4a:10:b9:
                    1b:97:1d:1a:55:e1:78:79:6d:86:23:79:8c:bd:31:
                    fd:ab:1c:47:49:e0:00:3c:7a:79:d4:0e:e5:cd:72:
                    fe:39:d5:2b:c7:4c:58:67:67:9b:7c:27:4b:58:d1:
                    6e:a3:0b:25:62:15:2f:c0:76:e3:98:e9:ef:46:e7:
                    8f:bc:aa:09:c1:6a:95:9b:41:f8:6e:ec:8b:29:bb:
                    33:f7:b2:6f:51:43:c9:ba:b4:9f:a2:ad:22:c2:94:
                    08:fb:cd:f2:78:71:bc:d2:81:5e:c0:b7:8a:0c:c1:
                    2a:91:4a:aa:bc:f2:64:74:2c:aa:01:87:10:d7:00:
                    3f:b3:fd:6d:87:c8:d3:5b:32:17:12:a8:0c:26:13:
                    1b:4f:a7:77:1c:31:f5:c9:4b:c3:26:a0:94:15:30:
                    24:dc:c4:71:bf:5d:f7:af:fa:3c:0f:5b:62:f8:8e:
                    bf:ad:53:90:bc:2d:b5:98:b4:6b:3b:0b:35:0d:5f:
                    e9:a2:89:97:ea:99:eb:c1:5f:fa:ea:92:16:e1:5c:
                    0a:1c:1b:0d:29:83:ff:f1:7d:91:dc:6a:d6:b2:d1:
                    cd:1a:b0:c1:7e:6e:cd:ad:2b:62:46:20:ee:2e:e0:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:98:3C:F4:18:C2:4A:EB:D3:EA:B6:52:D9:E4:83:46:62:89:08:E8
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:bbbc::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:1b:b1:9f:b8:c8:38:71:a8:8d:b0:d0:d0:df:1e:0f:98:
         8b:b6:c8:f8:e2:86:91:9e:9d:57:a9:34:4b:5f:8a:22:77:5a:
         2b:76:02:48:19:92:a7:0d:76:21:7e:d8:b6:0a:d6:56:5e:c9:
         be:3f:db:f3:c9:15:38:db:b3:29:b4:bd:28:ad:ef:c1:2e:45:
         6c:b1:5c:d5:57:4f:28:d1:38:2d:50:71:a3:8f:7d:ae:f9:ab:
         c2:b0:e3:cd:5b:91:31:88:cb:da:5a:14:3e:b2:f5:e1:4f:e6:
         62:a7:91:62:dd:da:a2:79:65:df:d7:5f:1f:42:5a:44:a5:df:
         79:17:e2:85:eb:b7:c8:8d:58:de:80:ef:e2:77:a6:31:4f:b6:
         2f:c0:bb:54:19:e3:23:ac:0e:5b:9b:6e:74:30:fd:23:75:83:
         af:fb:9d:df:d0:93:0b:8f:55:06:a6:3f:f1:bb:ee:a8:1f:b8:
         6f:a6:21:0b:89:22:ca:92:cf:e6:8b:ad:d2:09:c6:ba:81:f2:
         d5:6e:78:08:41:0c:5e:83:06:44:dc:c2:44:b1:7c:56:ea:1a:
         f6:8e:2f:fb:77:14:e5:9c:d8:11:df:45:c5:6c:a3:c7:5b:a3:
         78:a4:07:7e:82:31:69:61:44:5a:da:88:f1:03:2d:36:3f:2b:
         35:1a:63:c5
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUCMmIwag/Az7oi2CKARgiyrkyhtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNFNjczNjQ4MjQ0RUI0NDE0NjVENjY1MUZDN0ExMEJD
QjExMDlCRTAeFw0yNDA0MDQwNzUxNTlaFw0yNTA0MDMwNzU2NTlaMDMxMTAvBgNV
BAMTKDUyOTgzQ0Y0MThDMjRBRUJEM0VBQjY1MkQ5RTQ4MzQ2NjI4OTA4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RqxAXt06nvIbxEvnhi86QLWX
KPQHch8gm0oQuRuXHRpV4Xh5bYYjeYy9Mf2rHEdJ4AA8ennUDuXNcv451SvHTFhn
Z5t8J0tY0W6jCyViFS/AduOY6e9G54+8qgnBapWbQfhu7IspuzP3sm9RQ8m6tJ+i
rSLClAj7zfJ4cbzSgV7At4oMwSqRSqq88mR0LKoBhxDXAD+z/W2HyNNbMhcSqAwm
ExtPp3ccMfXJS8MmoJQVMCTcxHG/Xfev+jwPW2L4jr+tU5C8LbWYtGs7CzUNX+mi
iZfqmevBX/rqkhbhXAocGw0pg//xfZHcatay0c0asMF+bs2tK2JGIO4u4Jm3AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUUpg89BjCSuvT6rZS2eSDRmKJCOgwHwYDVR0j
BBgwFoAU/OZzZIJE60QUZdZlH8ehC8sRCb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXk1TFIxVFFxTVBkS01GYTRncU1MdHhaelRaWTlhdlN0UURhcXpMUkxk
VjEvMS9GQ0U2NzM2NDgyNDRFQjQ0MTQ2NUQ2NjUxRkM3QTEwQkNCMTEwOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDRTY3MzY0ODI0NEVCNDQx
NDY1RDY2NTFGQzdBMTBCQ0IxMTA5QkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5NUxSMVRRcU1QZEtNRmE0Z3FNTHR4WnpUWlk5YXZTdFFEYXF6TFJMZFYxLzEv
MzIzODMwMzQzYTM0NjEzMTM4M2E2MjYyNjI2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNzMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEShi7vDANBgkqhkiG9w0BAQsF
AAOCAQEAABsbsZ+4yDhxqI2w0NDfHg+Yi7bI+OKGkZ6dV6k0S1+KIndaK3YCSBmS
pw12IX7YtgrWVl7Jvj/b88kVONuzKbS9KK3vwS5FbLFc1VdPKNE4LVBxo499rvmr
wrDjzVuRMYjL2loUPrL14U/mYqeRYt3aonll39dfH0JaRKXfeRfiheu3yI1Y3oDv
4nemMU+2L8C7VBnjI6wOW5tudDD9I3WDr/ud39CTC49VBqY/8bvuqB+4b6YhC4ki
ypLP5out0gnGuoHy1W54CEEMXoMGRNzCRLF8Vuoa9o4v+3cU5ZzYEd9FxWyjx1uj
eKQHfoIxaWFEWtqI8QMtNj8rNRpjxQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:37 2024 by rpki-client on console-fra.rpki-client.org