Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          Qm9F4f/yVN0ENjW0IwnYRCLhielJPNgxL+gqti6Ox44=
Subject key identifier:   14:F0:9E:E2:EF:85:9F:EE:CC:7E:19:8F:E2:0A:93:06:28:42:4F:D2
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       5EF7C001510248CD6076D3966541CE07E19CD5DE
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:50 +0000
ROA not before:           Thu 04 Apr 2024 13:48:50 +0000
ROA not after:            Thu 03 Apr 2025 13:53:50 +0000
asID:                     267363
IP address blocks:        2804:4c50:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 15:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:c0:01:51:02:48:cd:60:76:d3:96:65:41:ce:07:e1:9c:d5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:50 2024 GMT
            Not After : Apr  3 13:53:50 2025 GMT
        Subject: CN=14F09EE2EF859FEECC7E198FE20A930628424FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:66:dd:17:c2:8b:9a:d3:9f:d9:a1:ea:f9:
                    08:72:8b:6f:f1:a1:62:18:45:6c:d1:f0:7e:64:29:
                    e8:4f:c0:f5:41:c3:a4:ce:e3:9a:75:45:7d:ab:ae:
                    5f:b8:de:8b:30:a4:d3:21:e5:d4:29:8a:3d:66:1c:
                    a0:01:5a:e1:f2:75:7b:02:fd:60:75:64:9b:81:ac:
                    0c:7a:3b:96:00:c9:d2:dc:7a:b8:30:b0:bb:56:dc:
                    56:bc:7f:f1:b9:92:45:88:bc:95:db:91:90:62:65:
                    a4:8e:86:0e:98:df:8f:f2:62:40:1a:68:b5:6a:02:
                    96:bc:2f:f5:85:c7:69:41:e7:49:c9:45:b8:98:f6:
                    60:22:a9:7c:e4:04:f3:fc:7f:80:5e:b2:da:72:85:
                    3a:7c:b2:24:8a:3d:af:a9:10:57:07:ab:c5:86:eb:
                    fb:0e:05:c3:3d:06:07:73:a2:72:59:88:6f:07:77:
                    f0:5a:1c:4d:74:7a:96:69:99:3e:c9:41:77:74:ec:
                    03:39:8e:8c:48:c6:5e:82:7d:2e:f9:ed:47:24:99:
                    19:52:59:dc:d1:29:45:d7:42:b4:b1:80:43:83:bc:
                    f2:65:72:a9:b9:49:da:84:3f:e5:44:25:13:e7:2a:
                    1a:17:b8:cc:c2:83:e7:8e:f6:dd:fe:1b:60:c5:30:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F0:9E:E2:EF:85:9F:EE:CC:7E:19:8F:E2:0A:93:06:28:42:4F:D2
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:31:80:5b:2a:a8:5b:4e:5f:02:69:78:79:fe:37:bd:d8:
         d0:80:e7:6d:b9:fc:70:c4:38:d5:aa:2b:47:e6:6f:f6:ee:ea:
         96:b3:28:43:d1:ba:00:0f:b6:a5:5b:f4:bf:dc:33:01:a2:dc:
         82:78:ac:23:97:ba:4f:1d:47:08:63:d2:47:9c:6b:e1:6c:66:
         b6:ae:b0:b5:1f:ee:85:33:51:a9:3b:8f:b3:a5:8f:47:83:4e:
         c9:62:4e:1f:26:55:07:46:82:98:b9:29:e1:12:d5:ce:bf:13:
         79:f2:9d:b5:36:79:a4:82:46:28:c7:f8:48:0a:6b:de:9a:1f:
         79:66:72:00:74:2b:40:a0:ca:a2:e4:60:e8:ce:72:6c:85:a7:
         69:cb:aa:aa:57:d5:1d:76:ee:99:6c:24:af:b0:22:13:3f:78:
         a6:2c:88:02:43:09:a4:2d:88:9d:ba:7b:38:8b:05:4d:6f:71:
         16:8b:f1:2b:b3:bd:75:6f:91:9c:e1:6f:52:42:8a:f5:70:8a:
         77:53:bf:21:6b:c1:de:7c:6f:b0:9e:9a:ad:15:53:f4:55:ff:
         06:74:4a:b7:ed:b3:fa:08:5a:95:63:ef:b5:df:d5:c7:13:89:
         f7:9d:e8:79:96:36:42:b9:01:6c:0a:51:cc:80:d0:d0:27:f2:
         7a:bc:21:2f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXvfAAVECSM1gdtOWZUHOB+Gc1d4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDNjVCOTE3NUE4QzU1REQxQkU4QjVENkY1MTE1MkQ3
MkM1MDVBQTAeFw0yNDA0MDQxMzQ4NTBaFw0yNTA0MDMxMzUzNTBaMDMxMTAvBgNV
BAMTKDE0RjA5RUUyRUY4NTlGRUVDQzdFMTk4RkUyMEE5MzA2Mjg0MjRGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/42bdF8KLmtOf2aHq+Qhyi2/x
oWIYRWzR8H5kKehPwPVBw6TO45p1RX2rrl+43oswpNMh5dQpij1mHKABWuHydXsC
/WB1ZJuBrAx6O5YAydLcergwsLtW3Fa8f/G5kkWIvJXbkZBiZaSOhg6Y34/yYkAa
aLVqApa8L/WFx2lB50nJRbiY9mAiqXzkBPP8f4BestpyhTp8siSKPa+pEFcHq8WG
6/sOBcM9BgdzonJZiG8Hd/BaHE10epZpmT7JQXd07AM5joxIxl6CfS757UckmRlS
WdzRKUXXQrSxgEODvPJlcqm5SdqEP+VEJRPnKhoXuMzCg+eO9t3+G2DFMG4hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFPCe4u+Fn+7MfhmP4gqTBihCT9IwHwYDVR0j
BBgwFoAU18ZbkXWoxV3Rvotdb1EVLXLFBaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMS9EN0M2NUI5MTc1QThDNTVERDFCRThCNUQ2RjUxMTUyRDcyQzUwNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QzY1QjkxNzVBOEM1NURE
MUJFOEI1RDZGNTExNTJENzJDNTA1QUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzEv
MzIzODMwMzQzYTM0NjMzNTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigETFCAMA0GCSqGSIb3DQEBCwUA
A4IBAQApqTGAWyqoW05fAml4ef43vdjQgOdtufxwxDjVqitH5m/27uqWsyhD0boA
D7alW/S/3DMBotyCeKwjl7pPHUcIY9JHnGvhbGa2rrC1H+6FM1GpO4+zpY9Hg07J
Yk4fJlUHRoKYuSnhEtXOvxN58p21NnmkgkYox/hICmvemh95ZnIAdCtAoMqi5GDo
znJshadpy6qqV9Uddu6ZbCSvsCITP3imLIgCQwmkLYiduns4iwVNb3EWi/Ers711
b5Gc4W9SQor1cIp3U78ha8HefG+wnpqtFVP0Vf8GdEq37bP6CFqVY++139XHE4n3
neh5ljZCuQFsClHMgNDQJ/J6vCEv
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:15 2024 by rpki-client on console-ams.rpki-client.org