Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/323830343a343534303a3a2f33322d3438203d3e20323636393134.roa
File:                     323830343a343534303a3a2f33322d3438203d3e20323636393134.roa (raw, json)
Hash identifier:          jae392fUBOncJCsfv/KpYTWrjZFRUZTBh2tokiU7jBE=
Subject key identifier:   F7:5A:89:39:4F:D8:47:13:6E:28:3F:29:B2:96:5E:4D:5E:C6:D3:14
Certificate issuer:       /CN=5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC
Certificate serial:       743B967E579C2474A07B386AB4E745F51D3E8FD9
Authority key identifier: 5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/323830343a343534303a3a2f33322d3438203d3e20323636393134.roa
Signing time:             Thu 04 Apr 2024 09:06:47 +0000
ROA not before:           Thu 04 Apr 2024 09:01:47 +0000
ROA not after:            Thu 03 Apr 2025 09:06:47 +0000
asID:                     266914
IP address blocks:        2804:4540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.crl
                          rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:96:7e:57:9c:24:74:a0:7b:38:6a:b4:e7:45:f5:1d:3e:8f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC
        Validity
            Not Before: Apr  4 09:01:47 2024 GMT
            Not After : Apr  3 09:06:47 2025 GMT
        Subject: CN=F75A89394FD847136E283F29B2965E4D5EC6D314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:23:33:6e:86:11:5f:af:63:94:d8:20:2a:
                    6a:8a:28:ae:d9:0b:19:bf:47:07:f0:3f:84:c1:6d:
                    13:bb:68:5f:1a:4c:e5:69:93:fa:03:34:57:db:75:
                    70:97:24:a4:e1:af:af:37:33:88:ec:01:7c:3c:42:
                    af:df:50:23:13:59:6e:96:8e:f6:37:8d:a9:34:02:
                    8d:a8:ed:20:3d:fb:4a:0f:14:db:5f:0f:61:36:a2:
                    50:1a:39:b8:2f:6e:55:42:7a:5a:39:bd:4c:8c:fd:
                    66:e4:cd:72:15:36:73:d2:52:a6:89:f9:59:a7:db:
                    2b:6f:26:53:d7:e9:fa:d3:42:2d:39:bc:95:5b:b6:
                    c7:a0:e7:cc:55:0b:bb:60:28:dc:a4:fc:a1:47:5a:
                    40:cd:e0:44:0a:93:f8:dc:8b:90:f4:25:f0:dc:bb:
                    5b:d2:1d:c5:17:d3:bf:76:a3:05:61:30:f4:23:8d:
                    58:25:b2:d2:52:16:a2:a3:0e:93:89:b8:a8:03:e2:
                    e3:14:3a:b3:4a:e7:1b:67:d0:0f:b7:fe:e0:41:f4:
                    9e:ed:87:f1:e4:60:4c:8d:c9:2e:8a:9c:9e:2d:8b:
                    e9:c1:e6:3d:53:21:05:fa:77:ab:df:20:81:4c:39:
                    b1:40:cc:71:99:f8:42:54:09:6c:0c:5d:6c:11:ab:
                    c6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:89:39:4F:D8:47:13:6E:28:3F:29:B2:96:5E:4D:5E:C6:D3:14
            X509v3 Authority Key Identifier:
                keyid:5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/323830343a343534303a3a2f33322d3438203d3e20323636393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4540::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:44:86:65:0d:58:ef:79:6f:50:61:62:a5:a9:e5:9d:78:2c:
         06:05:42:26:44:5a:35:11:03:2b:9c:33:92:9e:41:0f:07:1c:
         6a:9a:82:e9:5b:89:d2:fa:ca:16:45:c6:d2:bd:e4:7e:b6:94:
         e7:cc:7b:ff:07:28:ee:56:7a:3a:c9:da:e9:34:f8:e5:54:db:
         1e:87:13:b0:41:a0:25:a2:57:1d:86:42:1d:33:94:0b:4f:fa:
         76:a9:d3:3e:53:e4:6f:8b:87:10:90:2b:de:01:f5:7b:ee:32:
         ff:89:3a:56:11:7b:f1:97:e1:f2:6c:0d:26:08:f7:bb:b9:b6:
         05:d8:2c:f2:89:af:fb:cc:82:a3:3a:b2:74:bb:0c:15:c3:52:
         60:a2:da:70:60:95:f0:ca:a4:87:6e:2d:bd:ab:a9:0b:6f:4c:
         a2:fa:d7:f9:bd:b5:24:af:8a:8c:92:75:2a:1c:f8:01:ba:32:
         5e:94:e2:cc:32:71:03:bc:27:21:fe:0d:c3:f6:29:45:f1:0f:
         7b:76:48:47:4c:4b:7b:37:3c:b6:02:f0:fc:cc:93:df:12:18:
         47:34:6a:96:13:15:a8:5a:fe:65:4e:e3:a1:b9:06:c0:5b:89:
         76:c1:b1:1a:3a:60:12:cd:8b:8d:e2:9d:53:27:17:e4:e4:ea:
         d1:10:39:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdDuWflecJHSgezhqtOdF9R0+j9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBMTYzRkIzMjg0QjNEMUE1RDc1MEM1ODg2QURBNjQx
NERDM0ZBQzAeFw0yNDA0MDQwOTAxNDdaFw0yNTA0MDMwOTA2NDdaMDMxMTAvBgNV
BAMTKEY3NUE4OTM5NEZEODQ3MTM2RTI4M0YyOUIyOTY1RTRENUVDNkQzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwSMzboYRX69jlNggKmqKKK7Z
Cxm/RwfwP4TBbRO7aF8aTOVpk/oDNFfbdXCXJKThr683M4jsAXw8Qq/fUCMTWW6W
jvY3jak0Ao2o7SA9+0oPFNtfD2E2olAaObgvblVCelo5vUyM/WbkzXIVNnPSUqaJ
+Vmn2ytvJlPX6frTQi05vJVbtseg58xVC7tgKNyk/KFHWkDN4EQKk/jci5D0JfDc
u1vSHcUX0792owVhMPQjjVglstJSFqKjDpOJuKgD4uMUOrNK5xtn0A+3/uBB9J7t
h/HkYEyNyS6KnJ4ti+nB5j1TIQX6d6vfIIFMObFAzHGZ+EJUCWwMXWwRq8b1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU91qJOU/YRxNuKD8pspZeTV7G0xQwHwYDVR0j
BBgwFoAUW6Fj+zKEs9Gl11DFiGraZBTcP6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm1wSEtVM2F1ZnJxS1BpMzRIZXc1VE1zdjNuNjkzUDRLR0wyc1VqQUg4
WVQvMS81QkExNjNGQjMyODRCM0QxQTVENzUwQzU4ODZBREE2NDE0REMzRkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTE2M0ZCMzI4NEIzRDFB
NUQ3NTBDNTg4NkFEQTY0MTREQzNGQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZtcEhLVTNhdWZycUtQaTM0SGV3NVRNc3YzbjY5M1A0S0dMMnNVakFIOFlULzEv
MzIzODMwMzQzYTM0MzUzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzkzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARFQDANBgkqhkiG9w0BAQsFAAOCAQEAiESGZQ1Y
73lvUGFipanlnXgsBgVCJkRaNREDK5wzkp5BDwccapqC6VuJ0vrKFkXG0r3kfraU
58x7/wco7lZ6Osna6TT45VTbHocTsEGgJaJXHYZCHTOUC0/6dqnTPlPkb4uHEJAr
3gH1e+4y/4k6VhF78Zfh8mwNJgj3u7m2Bdgs8omv+8yCozqydLsMFcNSYKLacGCV
8Mqkh24tvaupC29MovrX+b21JK+KjJJ1Khz4AboyXpTizDJxA7wnIf4Nw/YpRfEP
e3ZIR0xLezc8tgLw/MyT3xIYRzRqlhMVqFr+ZU7jobkGwFuJdsGxGjpgEs2LjeKd
UycX5OTq0RA5uQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:56 2024 by rpki-client on console-fra.rpki-client.org