Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa
File:                     323830343a363266343a3a2f33322d313238203d3e20323639333330.roa (raw, json)
Hash identifier:          2njn5KRkxZX0hIVR3x0bnJdmyBQzqDoMLRQ6hIGhHI0=
Subject key identifier:   A5:20:AD:D7:E2:CB:53:CB:CB:63:78:5F:E5:E2:AE:55:A7:71:20:69
Certificate issuer:       /CN=8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA
Certificate serial:       6A103973EF6EB28774A935F51E4AEDFD997677F2
Authority key identifier: 8D:0A:BC:E6:EF:A9:E9:CD:18:01:8C:50:CA:DB:F2:10:16:79:C9:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa
Signing time:             Thu 04 Apr 2024 17:35:58 +0000
ROA not before:           Thu 04 Apr 2024 17:30:58 +0000
ROA not after:            Thu 03 Apr 2025 17:35:58 +0000
asID:                     269330
IP address blocks:        2804:62f4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.crl
                          rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:10:39:73:ef:6e:b2:87:74:a9:35:f5:1e:4a:ed:fd:99:76:77:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA
        Validity
            Not Before: Apr  4 17:30:58 2024 GMT
            Not After : Apr  3 17:35:58 2025 GMT
        Subject: CN=A520ADD7E2CB53CBCB63785FE5E2AE55A7712069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:be:94:65:4a:43:6b:e6:93:11:5b:e2:9e:
                    f2:ae:c6:df:c4:9e:66:9d:ab:aa:ae:55:dc:ab:80:
                    f2:c0:27:ed:8f:3e:c6:cd:ec:6a:5b:8a:2a:74:d3:
                    92:ca:9d:8f:6b:b5:11:df:b8:fc:00:81:05:3f:1c:
                    ba:4a:03:6b:db:6b:97:48:b0:55:8d:b7:72:16:a8:
                    57:b8:24:f6:03:0d:05:bd:ec:62:d6:f7:dd:16:86:
                    0d:a9:11:6b:df:2b:41:ea:1b:c4:ed:75:09:cc:01:
                    21:5e:3d:3e:cc:be:ec:13:76:0f:75:5a:c2:46:92:
                    94:e2:ce:db:d8:92:f4:ff:35:a9:95:35:5f:2c:20:
                    82:31:4d:9f:e0:b0:ef:53:b4:2c:10:f6:5b:78:e4:
                    6b:52:5d:28:a3:8a:83:fb:56:8d:07:14:6a:91:61:
                    fc:4c:6d:01:a4:a7:3e:fe:10:4b:b6:32:21:48:4b:
                    30:b5:b7:f0:45:a1:2c:38:da:64:b5:3a:65:24:c5:
                    ab:78:2e:28:96:fa:18:18:ad:39:f4:28:2d:9d:ec:
                    69:54:7c:36:f2:82:cd:78:77:c0:3e:53:bd:cd:55:
                    4f:7e:ed:ac:db:c9:ff:af:9e:48:d2:9b:1a:c4:34:
                    7e:d6:d5:b1:9e:25:e2:f6:2d:ec:ca:32:3a:d7:55:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:20:AD:D7:E2:CB:53:CB:CB:63:78:5F:E5:E2:AE:55:A7:71:20:69
            X509v3 Authority Key Identifier:
                keyid:8D:0A:BC:E6:EF:A9:E9:CD:18:01:8C:50:CA:DB:F2:10:16:79:C9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:72:46:fb:a1:ff:96:4b:6c:80:60:aa:12:67:4d:42:14:e4:
         0e:c0:21:37:41:f7:c2:32:6a:78:9d:6c:b4:66:c8:9e:de:12:
         3b:78:a1:a3:72:83:13:49:ee:67:b4:a1:01:b9:91:59:c4:2d:
         18:5a:b8:d9:77:9b:19:b0:6d:97:95:22:3e:e1:15:a8:33:94:
         10:86:ff:ab:06:d5:40:92:c3:57:f3:73:01:39:4c:d3:16:02:
         c8:f7:be:5c:66:45:a6:22:05:d6:19:be:20:45:8a:4c:e5:db:
         b1:bc:c4:6e:14:90:8e:5b:05:2c:77:66:b8:56:db:0b:0a:23:
         60:d2:c7:fc:26:9a:ee:58:a5:59:ea:51:f4:21:c5:4e:f7:06:
         3c:bf:ab:f0:78:e5:d1:97:56:1a:f8:5c:18:0f:15:83:7a:19:
         42:75:9d:ec:86:71:0c:98:73:7c:af:c5:34:bd:9e:f7:72:02:
         a7:b0:d1:b2:ec:e1:f5:50:e1:a2:45:1f:5d:09:bb:b3:cb:d9:
         1b:ba:fd:d6:be:2d:de:ce:aa:42:f9:ef:47:d6:0f:5c:d8:7f:
         d0:4d:3b:3f:50:69:9c:9b:10:17:d5:0e:fe:13:11:b5:f1:32:
         b1:4f:33:31:9b:bf:a5:0c:81:28:21:4a:95:30:61:1e:e9:e1:
         ca:39:87:bf
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUahA5c+9usod0qTX1Hkrt/Zl2d/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQwQUJDRTZFRkE5RTlDRDE4MDE4QzUwQ0FEQkYyMTAx
Njc5QzlBQTAeFw0yNDA0MDQxNzMwNThaFw0yNTA0MDMxNzM1NThaMDMxMTAvBgNV
BAMTKEE1MjBBREQ3RTJDQjUzQ0JDQjYzNzg1RkU1RTJBRTU1QTc3MTIwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcOb6UZUpDa+aTEVvinvKuxt/E
nmadq6quVdyrgPLAJ+2PPsbN7Gpbiip005LKnY9rtRHfuPwAgQU/HLpKA2vba5dI
sFWNt3IWqFe4JPYDDQW97GLW990Whg2pEWvfK0HqG8TtdQnMASFePT7MvuwTdg91
WsJGkpTiztvYkvT/NamVNV8sIIIxTZ/gsO9TtCwQ9lt45GtSXSijioP7Vo0HFGqR
YfxMbQGkpz7+EEu2MiFISzC1t/BFoSw42mS1OmUkxat4LiiW+hgYrTn0KC2d7GlU
fDbygs14d8A+U73NVU9+7azbyf+vnkjSmxrENH7W1bGeJeL2LezKMjrXVcD7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUpSCt1+LLU8vLY3hf5eKuVadxIGkwHwYDVR0j
BBgwFoAUjQq85u+p6c0YAYxQytvyEBZ5yaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3dXVXBTV2trVnlqRnZUUjN2eFNyakpVSm0zck5BR2g1aFhCMlREZkhp
cFgvMS84RDBBQkNFNkVGQTlFOUNEMTgwMThDNTBDQURCRjIxMDE2NzlDOUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMEFCQ0U2RUZBOUU5Q0Qx
ODAxOEM1MENBREJGMjEwMTY3OUM5QUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3V1VwU1dra1Z5akZ2VFIzdnhTcmpKVUptM3JOQUdoNWhYQjJURGZIaXBYLzEv
MzIzODMwMzQzYTM2MzI2NjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMzMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGL0MA0GCSqGSIb3DQEBCwUAA4IBAQCackb7
of+WS2yAYKoSZ01CFOQOwCE3QffCMmp4nWy0Zsie3hI7eKGjcoMTSe5ntKEBuZFZ
xC0YWrjZd5sZsG2XlSI+4RWoM5QQhv+rBtVAksNX83MBOUzTFgLI975cZkWmIgXW
Gb4gRYpM5duxvMRuFJCOWwUsd2a4VtsLCiNg0sf8JpruWKVZ6lH0IcVO9wY8v6vw
eOXRl1Ya+FwYDxWDehlCdZ3shnEMmHN8r8U0vZ73cgKnsNGy7OH1UOGiRR9dCbuz
y9kbuv3Wvi3ezqpC+e9H1g9c2H/QTTs/UGmcmxAX1Q7+ExG18TKxTzMxm7+lDIEo
IUqVMGEe6eHKOYe/
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org