Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/323830343a313537303a3a2f33332d3333203d3e20323633333838.roa
File:                     323830343a313537303a3a2f33332d3333203d3e20323633333838.roa (raw, json)
Hash identifier:          lP1TV8WzSlnx8zt4q26BgbaRFSPdot+3A4UHjFtkAsQ=
Subject key identifier:   8C:AB:C9:A7:93:08:9F:1D:A0:2D:F2:58:89:D8:79:27:72:B3:D0:60
Certificate issuer:       /CN=5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4
Certificate serial:       72D5F5877611EB8AFF5653E01837CCE32349731E
Authority key identifier: 5A:8D:1D:D7:0C:8B:1F:A2:91:3B:A4:0F:66:76:F7:6F:59:AF:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/323830343a313537303a3a2f33332d3333203d3e20323633333838.roa
Signing time:             Tue 09 Apr 2024 13:48:38 +0000
ROA not before:           Tue 09 Apr 2024 13:43:38 +0000
ROA not after:            Tue 08 Apr 2025 13:48:38 +0000
asID:                     263388
IP address blocks:        2804:1570::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.crl
                          rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d5:f5:87:76:11:eb:8a:ff:56:53:e0:18:37:cc:e3:23:49:73:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4
        Validity
            Not Before: Apr  9 13:43:38 2024 GMT
            Not After : Apr  8 13:48:38 2025 GMT
        Subject: CN=8CABC9A793089F1DA02DF25889D8792772B3D060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:53:b8:7a:34:22:85:0a:2b:ca:50:20:cb:
                    35:f5:8c:78:7f:a8:38:68:2a:9a:9d:5b:8c:fd:ee:
                    99:60:9c:dd:db:c4:e2:53:aa:1c:c8:11:49:61:62:
                    2f:ea:ce:35:b7:a2:86:5a:7f:91:3a:08:34:fe:28:
                    fb:f5:f6:93:36:e6:bd:ed:50:00:0e:73:74:ae:b1:
                    25:46:82:78:83:17:ec:70:86:59:cb:4e:43:76:fe:
                    6b:b0:38:c7:7a:63:53:97:d6:33:47:dd:9e:68:1f:
                    fc:73:98:76:f4:d7:81:34:3e:7d:2d:b2:e8:c8:ed:
                    8e:5b:a3:aa:49:4e:fe:1a:8a:20:d7:0b:ba:39:be:
                    42:b9:12:62:2a:8c:6c:e5:01:d5:55:0f:d4:ab:88:
                    92:a6:23:0e:f2:4a:ed:4a:09:e9:d9:15:27:33:90:
                    0a:a0:de:f9:08:39:e2:be:9e:f2:df:79:f5:f6:66:
                    09:33:3a:88:2a:89:ff:4c:e6:a4:ce:88:36:8a:d4:
                    bf:23:a8:4f:b7:92:5e:6e:fc:cb:14:44:d8:ab:f9:
                    08:6d:7c:ab:2c:33:1b:6c:55:66:de:e8:e1:1b:b3:
                    dd:cf:a8:20:20:c9:53:bd:47:55:9b:6d:d6:dd:ff:
                    e9:11:11:5d:fd:02:82:b5:25:79:0f:8a:cb:b5:e1:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:C9:A7:93:08:9F:1D:A0:2D:F2:58:89:D8:79:27:72:B3:D0:60
            X509v3 Authority Key Identifier:
                keyid:5A:8D:1D:D7:0C:8B:1F:A2:91:3B:A4:0F:66:76:F7:6F:59:AF:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/323830343a313537303a3a2f33332d3333203d3e20323633333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1570::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:04:7d:fa:c4:80:1e:b1:c1:7c:9b:d7:56:34:9d:d9:72:
         49:1c:01:7d:6b:7c:12:48:f7:38:ad:83:ea:4a:5e:22:2e:44:
         5f:9c:26:79:b7:b7:6c:9e:23:fe:58:00:0c:32:2e:e0:92:98:
         b1:f7:6f:3e:72:6b:c6:b0:8c:bc:f7:65:e4:1e:39:bc:c3:75:
         f7:23:7f:65:52:4e:34:0c:0e:2b:0b:4c:3a:f3:4a:b0:cd:3c:
         b6:2e:ec:d8:42:e1:3c:29:80:73:c2:a5:7c:2a:e9:88:cd:22:
         39:bc:9a:b0:59:3f:f2:21:ff:34:d3:89:5e:84:61:82:c7:51:
         54:9e:c4:97:a2:5f:69:6d:87:12:c9:8b:1c:8a:35:1a:6a:95:
         6d:b7:5f:3e:ea:c6:9a:c0:a4:d8:f3:59:c2:d8:77:f2:49:a9:
         d6:5e:08:a2:44:db:12:e7:38:91:84:7f:a8:9a:c7:53:ac:7f:
         fc:03:2c:4f:03:8c:c5:8c:0c:f2:db:2b:be:93:cc:b9:f4:ad:
         8d:12:6c:d7:bc:16:f7:44:58:3c:e7:9d:5c:bc:d6:5c:c2:5e:
         67:93:5d:93:21:0e:2e:28:c4:da:8b:aa:d4:98:eb:84:10:de:
         e8:92:e0:7e:6d:b1:b0:aa:87:77:00:17:b5:06:5b:0f:05:37:
         ae:82:06:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUctX1h3YR64r/VlPgGDfM4yNJcx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4RDFERDcwQzhCMUZBMjkxM0JBNDBGNjY3NkY3NkY1
OUFGN0VCNDAeFw0yNDA0MDkxMzQzMzhaFw0yNTA0MDgxMzQ4MzhaMDMxMTAvBgNV
BAMTKDhDQUJDOUE3OTMwODlGMURBMDJERjI1ODg5RDg3OTI3NzJCM0QwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHslO4ejQihQorylAgyzX1jHh/
qDhoKpqdW4z97plgnN3bxOJTqhzIEUlhYi/qzjW3ooZaf5E6CDT+KPv19pM25r3t
UAAOc3SusSVGgniDF+xwhlnLTkN2/muwOMd6Y1OX1jNH3Z5oH/xzmHb014E0Pn0t
sujI7Y5bo6pJTv4aiiDXC7o5vkK5EmIqjGzlAdVVD9SriJKmIw7ySu1KCenZFScz
kAqg3vkIOeK+nvLfefX2ZgkzOogqif9M5qTOiDaK1L8jqE+3kl5u/MsURNir+Qht
fKssMxtsVWbe6OEbs93PqCAgyVO9R1Wbbdbd/+kREV39AoK1JXkPisu14WtDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjKvJp5MInx2gLfJYidh5J3Kz0GAwHwYDVR0j
BBgwFoAUWo0d1wyLH6KRO6QPZnb3b1mvfrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJvTnNWMVBiZVZGQTJaNjg1WG1IdTJkSkVDTkJEWmVBenc3R3Fwa0hO
OGovMC81QThEMURENzBDOEIxRkEyOTEzQkE0MEY2Njc2Rjc2RjU5QUY3RUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBOEQxREQ3MEM4QjFGQTI5
MTNCQTQwRjY2NzZGNzZGNTlBRjdFQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCb05zVjFQYmVWRkEyWjY4NVhtSHUyZEpFQ05CRFplQXp3N0dxcGtITjhqLzAv
MzIzODMwMzQzYTMxMzUzNzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzMzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQVcAAwDQYJKoZIhvcNAQELBQADggEBAA4NBH36
xIAescF8m9dWNJ3ZckkcAX1rfBJI9zitg+pKXiIuRF+cJnm3t2yeI/5YAAwyLuCS
mLH3bz5ya8awjLz3ZeQeObzDdfcjf2VSTjQMDisLTDrzSrDNPLYu7NhC4TwpgHPC
pXwq6YjNIjm8mrBZP/Ih/zTTiV6EYYLHUVSexJeiX2lthxLJixyKNRpqlW23Xz7q
xprApNjzWcLYd/JJqdZeCKJE2xLnOJGEf6iax1Osf/wDLE8DjMWMDPLbK76TzLn0
rY0SbNe8FvdEWDznnVy81lzCXmeTXZMhDi4oxNqLqtSY64QQ3uiS4H5tsbCqh3cA
F7UGWw8FN66CBgI=
-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:51 2024 by rpki-client on console-fra.rpki-client.org