Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/323830313a38303a316264303a3a2f34342d3434203d3e20323636353132.roa
File:                     323830313a38303a316264303a3a2f34342d3434203d3e20323636353132.roa (raw, json)
Hash identifier:          4rtGSBHnRM9973QhwJ1O1C/ZxQxfBXkaiTkomexnWIw=
Subject key identifier:   C5:88:8F:8E:33:99:2C:03:5C:BD:C8:66:1B:91:79:FF:C1:07:7F:44
Certificate issuer:       /CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2
Certificate serial:       6E8FC982672D0BCDCF236435611418E4FA642311
Authority key identifier: 35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/323830313a38303a316264303a3a2f34342d3434203d3e20323636353132.roa
Signing time:             Thu 04 Apr 2024 15:10:36 +0000
ROA not before:           Thu 04 Apr 2024 15:05:36 +0000
ROA not after:            Thu 03 Apr 2025 15:10:36 +0000
asID:                     266512
IP address blocks:        2801:80:1bd0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl
                          rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8f:c9:82:67:2d:0b:cd:cf:23:64:35:61:14:18:e4:fa:64:23:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2
        Validity
            Not Before: Apr  4 15:05:36 2024 GMT
            Not After : Apr  3 15:10:36 2025 GMT
        Subject: CN=C5888F8E33992C035CBDC8661B9179FFC1077F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:e5:bd:07:3f:84:6d:db:55:82:e3:87:8b:
                    9b:9f:20:18:87:0e:de:f4:1b:ca:36:74:af:99:53:
                    ff:36:28:17:f7:d3:cf:62:fe:5f:d8:4c:3a:5f:84:
                    71:46:4c:9d:7c:27:4c:62:9f:9e:b1:d3:9e:03:e3:
                    2a:08:ae:b5:5c:68:fd:ce:8d:6e:e3:85:cd:3c:cf:
                    28:e0:ae:19:46:d6:89:ef:31:a8:d5:85:d3:0f:a3:
                    9e:87:6b:25:11:3b:dd:c7:ca:cd:92:b3:68:cf:d0:
                    e7:dc:ca:c4:01:f9:8d:15:ca:f1:62:19:0e:65:64:
                    34:14:8e:b7:fb:d8:67:ce:7e:12:38:9f:c8:ec:dc:
                    79:b5:d1:31:78:8b:82:10:43:6f:ee:61:14:6c:b9:
                    6d:d2:7f:4a:05:8d:f7:cd:3d:b8:62:95:b7:ae:eb:
                    8f:14:72:6b:6a:22:8d:81:68:60:b8:cb:7f:40:41:
                    ae:94:cc:7e:87:7f:56:08:7f:0a:7b:50:60:d6:38:
                    48:fc:59:78:da:24:ad:c2:2d:7d:92:cb:04:5d:fa:
                    db:79:47:46:d2:37:f7:06:1b:30:8c:de:68:90:d8:
                    37:1c:7f:53:85:3d:25:e2:cc:d3:bc:7d:44:20:e9:
                    4d:6c:0f:93:78:c2:9a:fe:b5:dd:26:d7:77:94:a6:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:8F:8E:33:99:2C:03:5C:BD:C8:66:1B:91:79:FF:C1:07:7F:44
            X509v3 Authority Key Identifier:
                keyid:35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/323830313a38303a316264303a3a2f34342d3434203d3e20323636353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1bd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:1e:d9:ba:3e:63:d7:58:f8:65:c4:fb:38:7a:34:27:95:
         bd:f7:36:49:ec:bd:ba:48:2a:ca:b3:e5:f9:82:f3:81:44:b4:
         14:1e:e2:a8:37:16:c0:65:4c:99:42:0b:03:d9:ff:f8:16:6d:
         41:a1:3a:b5:83:0a:5b:3c:d1:0b:cd:16:56:bb:55:57:6e:cf:
         3a:3a:61:5c:65:66:6b:72:ec:b3:97:f2:e5:68:5f:a0:d7:c5:
         2e:2e:3f:b4:28:e3:93:9c:e7:62:2b:14:70:cf:62:c8:66:a2:
         96:b8:17:46:be:4e:87:0b:78:22:bf:fb:0f:38:13:2e:aa:28:
         cb:fe:ab:d6:15:2a:1f:f5:f9:8f:49:91:ba:b9:c0:70:e3:f0:
         18:8d:15:14:63:61:70:07:ff:39:68:69:09:a8:1b:43:42:1d:
         f5:04:63:90:76:8b:bc:fa:8e:a7:24:32:71:f6:ca:33:ea:56:
         bc:fb:61:cf:9b:98:88:bf:86:89:a1:27:62:cc:65:85:cf:9b:
         ef:38:10:52:c7:ba:ba:08:dc:60:67:c2:e0:98:7a:de:ad:91:
         e6:7b:80:6e:52:2b:e1:a5:23:10:a6:7a:22:a1:83:5d:d8:a8:
         45:20:19:c2:d6:d2:fe:c3:e2:db:64:e7:a4:40:78:2a:0b:a4:
         cd:b7:dd:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUbo/JgmctC83PI2Q1YRQY5PpkIxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVGN0I2QTAzQ0I3RDIxRDA3MDk0QkQ0NDFEMzA5NjA5
MkNCOTNCMjAeFw0yNDA0MDQxNTA1MzZaFw0yNTA0MDMxNTEwMzZaMDMxMTAvBgNV
BAMTKEM1ODg4RjhFMzM5OTJDMDM1Q0JEQzg2NjFCOTE3OUZGQzEwNzdGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfuW9Bz+EbdtVguOHi5ufIBiH
Dt70G8o2dK+ZU/82KBf3089i/l/YTDpfhHFGTJ18J0xin56x054D4yoIrrVcaP3O
jW7jhc08zyjgrhlG1onvMajVhdMPo56HayURO93Hys2Ss2jP0OfcysQB+Y0VyvFi
GQ5lZDQUjrf72GfOfhI4n8js3Hm10TF4i4IQQ2/uYRRsuW3Sf0oFjffNPbhilbeu
648UcmtqIo2BaGC4y39AQa6UzH6Hf1YIfwp7UGDWOEj8WXjaJK3CLX2SywRd+tt5
R0bSN/cGGzCM3miQ2Dccf1OFPSXizNO8fUQg6U1sD5N4wpr+td0m13eUpjHlAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUxYiPjjOZLANcvchmG5F5/8EHf0QwHwYDVR0j
BBgwFoAUNfe2oDy30h0HCUvUQdMJYJLLk7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ROYkhIZEJLbmh5blU0ZjlnMU00Z0x3aGVwRFZKY1ZpcDJEbXZldVVX
Y1gvMS8zNUY3QjZBMDNDQjdEMjFEMDcwOTRCRDQ0MUQzMDk2MDkyQ0I5M0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1RjdCNkEwM0NCN0QyMUQw
NzA5NEJENDQxRDMwOTYwOTJDQjkzQjIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdUTmJISGRCS25oeW5VNGY5ZzFNNGdMd2hlcERWSmNWaXAyRG12ZXVVV2NYLzEv
MzIzODMwMzEzYTM4MzAzYTMxNjI2NDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjM2MzUzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEAgBvQMA0GCSqGSIb3DQEBCwUAA4IB
AQA2xh7Zuj5j11j4ZcT7OHo0J5W99zZJ7L26SCrKs+X5gvOBRLQUHuKoNxbAZUyZ
QgsD2f/4Fm1BoTq1gwpbPNELzRZWu1VXbs86OmFcZWZrcuyzl/LlaF+g18UuLj+0
KOOTnOdiKxRwz2LIZqKWuBdGvk6HC3giv/sPOBMuqijL/qvWFSof9fmPSZG6ucBw
4/AYjRUUY2FwB/85aGkJqBtDQh31BGOQdou8+o6nJDJx9soz6la8+2HPm5iIv4aJ
oSdizGWFz5vvOBBSx7q6CNxgZ8LgmHrerZHme4BuUivhpSMQpnoioYNd2KhFIBnC
1tL+w+LbZOekQHgqC6TNt90U
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:03 2024 by rpki-client on console-ams.rpki-client.org