Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33322d3332203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33322d3332203d3e20323637333633.roa (raw, json)
Hash identifier:          kL5+UE8fbpasDQPgyGoc8aYRH86wVi0vqR5+WZSB77I=
Subject key identifier:   11:84:A3:D7:FF:3C:BF:72:2A:A4:29:BC:C4:79:1B:FB:C2:A0:56:89
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       382F902F53BEF68734A3795C87038BECE16549C1
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33322d3332203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:53 +0000
ROA not before:           Thu 04 Apr 2024 13:48:53 +0000
ROA not after:            Thu 03 Apr 2025 13:53:53 +0000
asID:                     267363
IP address blocks:        2804:4c50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2f:90:2f:53:be:f6:87:34:a3:79:5c:87:03:8b:ec:e1:65:49:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:53 2024 GMT
            Not After : Apr  3 13:53:53 2025 GMT
        Subject: CN=1184A3D7FF3CBF722AA429BCC4791BFBC2A05689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:08:57:00:87:4c:d9:e7:56:00:c4:a4:1c:
                    bb:ed:eb:2a:8b:eb:d8:be:7e:c1:47:43:bf:ac:81:
                    e5:69:e4:56:4f:71:0f:0c:6e:e3:ea:d8:a1:0a:48:
                    00:49:ca:51:d8:8c:dc:89:01:1a:3e:9f:49:14:46:
                    ba:aa:78:1c:28:d8:29:da:1a:b1:11:c6:2c:c8:b7:
                    c8:55:4e:0a:9c:bf:9f:05:17:c7:7f:7c:9f:a7:1e:
                    d4:af:72:ce:a8:b9:c6:9c:a6:a2:35:4a:56:a6:4b:
                    c2:39:9a:82:0f:2d:43:9c:93:c9:cf:92:60:1b:21:
                    9d:23:05:f1:52:78:ac:72:45:6e:70:c9:e7:69:0a:
                    5b:dc:48:11:81:c8:c5:6d:43:64:24:4a:2c:af:17:
                    fd:d6:c4:8d:ce:b4:b2:fd:bd:40:34:90:48:4c:a2:
                    ba:c5:dc:90:2d:b0:09:bf:e8:7d:7c:c0:8e:f2:20:
                    8e:04:7b:0e:5e:9a:63:83:3b:b7:bf:92:53:5a:ff:
                    c1:de:38:62:58:c0:49:88:cb:ed:c9:2a:8f:88:75:
                    d8:b7:c9:60:89:53:65:83:65:c4:3f:e4:66:ff:a6:
                    c3:a0:4a:4b:d7:87:4f:65:27:07:bd:b1:e5:e7:7a:
                    97:fd:ee:ea:89:b7:0a:26:35:d4:9f:19:99:ce:8c:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:A3:D7:FF:3C:BF:72:2A:A4:29:BC:C4:79:1B:FB:C2:A0:56:89
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33322d3332203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:6d:56:35:9b:1d:10:14:03:58:59:8e:d1:d0:0f:62:0f:
         ea:b1:8e:a9:b7:42:ab:2e:d8:b0:72:43:4d:6a:65:48:85:32:
         d3:42:62:ad:1b:65:77:84:ba:65:55:57:95:65:45:1c:d4:8f:
         99:46:17:64:cd:4a:32:65:bf:43:2a:3b:18:2a:f1:08:98:37:
         58:80:90:a6:ad:c9:d8:e5:2d:ce:fb:36:1a:dc:86:55:be:7a:
         22:31:b0:8a:91:46:fe:f8:93:5b:e7:31:2f:94:d4:41:2d:3f:
         98:31:a8:14:2e:e8:f0:26:75:cb:c4:da:e0:a4:98:92:8a:6f:
         24:c3:b8:7b:42:14:46:7d:88:f7:fb:00:91:3f:2a:0e:66:45:
         fc:b3:5f:3a:f9:1d:78:4e:df:c9:07:60:c1:5f:91:99:9d:41:
         7a:0b:4f:30:f6:46:ad:c1:fc:3f:2e:1e:9b:2f:d2:eb:10:9d:
         03:ba:ac:1a:02:c6:d0:e4:bb:90:57:a4:8b:3c:6a:93:85:3b:
         ad:41:f9:51:01:af:3b:e6:4b:6b:9c:0e:ca:43:35:dc:97:f5:
         3e:e9:61:d5:7e:50:c4:61:03:37:54:1c:6e:de:f4:bf:06:f3:
         0e:cc:d0:fe:7e:b0:e2:be:7b:73:b8:2e:07:55:a4:c2:ac:d0:
         48:d8:e9:85
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOC+QL1O+9oc0o3lchwOL7OFlScEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDNjVCOTE3NUE4QzU1REQxQkU4QjVENkY1MTE1MkQ3
MkM1MDVBQTAeFw0yNDA0MDQxMzQ4NTNaFw0yNTA0MDMxMzUzNTNaMDMxMTAvBgNV
BAMTKDExODRBM0Q3RkYzQ0JGNzIyQUE0MjlCQ0M0NzkxQkZCQzJBMDU2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDQhXAIdM2edWAMSkHLvt6yqL
69i+fsFHQ7+sgeVp5FZPcQ8MbuPq2KEKSABJylHYjNyJARo+n0kURrqqeBwo2Cna
GrERxizIt8hVTgqcv58FF8d/fJ+nHtSvcs6oucacpqI1SlamS8I5moIPLUOck8nP
kmAbIZ0jBfFSeKxyRW5wyedpClvcSBGByMVtQ2QkSiyvF/3WxI3OtLL9vUA0kEhM
orrF3JAtsAm/6H18wI7yII4Eew5emmODO7e/klNa/8HeOGJYwEmIy+3JKo+Iddi3
yWCJU2WDZcQ/5Gb/psOgSkvXh09lJwe9seXnepf97uqJtwomNdSfGZnOjA9rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUEYSj1/88v3IqpCm8xHkb+8KgVokwHwYDVR0j
BBgwFoAU18ZbkXWoxV3Rvotdb1EVLXLFBaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMS9EN0M2NUI5MTc1QThDNTVERDFCRThCNUQ2RjUxMTUyRDcyQzUwNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QzY1QjkxNzVBOEM1NURE
MUJFOEI1RDZGNTExNTJENzJDNTA1QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzEv
MzIzODMwMzQzYTM0NjMzNTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzMzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARMUDANBgkqhkiG9w0BAQsFAAOCAQEAc+ZtVjWb
HRAUA1hZjtHQD2IP6rGOqbdCqy7YsHJDTWplSIUy00JirRtld4S6ZVVXlWVFHNSP
mUYXZM1KMmW/Qyo7GCrxCJg3WICQpq3J2OUtzvs2GtyGVb56IjGwipFG/viTW+cx
L5TUQS0/mDGoFC7o8CZ1y8Ta4KSYkopvJMO4e0IURn2I9/sAkT8qDmZF/LNfOvkd
eE7fyQdgwV+RmZ1BegtPMPZGrcH8Py4emy/S6xCdA7qsGgLG0OS7kFekizxqk4U7
rUH5UQGvO+ZLa5wOykM13Jf1Pulh1X5QxGEDN1Qcbt70vwbzDszQ/n6w4r57c7gu
B1WkwqzQSNjphQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org