Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33332d3333203d3e20323637333633.roa (raw, json)
Hash identifier:          gr7Lg3OdX/6BRnvWwWJ5HA8ib6VFxj8mGQTlJs2byQA=
Subject key identifier:   02:C8:02:05:A1:80:12:16:2F:54:0C:D6:34:7D:7C:75:FD:4A:7F:24
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       5AACDDD94934E39387A8AEA94B0DC755C6F5D4AE
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:52 +0000
ROA not before:           Thu 04 Apr 2024 13:48:52 +0000
ROA not after:            Thu 03 Apr 2025 13:53:52 +0000
asID:                     267363
IP address blocks:        2804:4c50::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ac:dd:d9:49:34:e3:93:87:a8:ae:a9:4b:0d:c7:55:c6:f5:d4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:52 2024 GMT
            Not After : Apr  3 13:53:52 2025 GMT
        Subject: CN=02C80205A18012162F540CD6347D7C75FD4A7F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:55:79:38:7b:1d:24:d3:af:cb:1c:7d:85:
                    7c:31:b3:4d:75:83:07:10:c8:33:f1:ab:e7:7f:8a:
                    fc:54:7b:51:34:da:2b:8f:2c:21:52:7c:01:53:4b:
                    98:81:b6:19:93:c4:a5:cd:23:e4:85:70:af:ad:18:
                    c0:b7:c0:b9:91:2d:74:4b:ed:40:e7:cc:49:52:06:
                    8b:15:5d:1d:cd:e4:a8:37:c7:d1:ed:20:5b:0d:81:
                    1a:f1:b4:f1:2c:62:fd:04:be:73:1a:70:44:5f:79:
                    a1:59:3c:7f:a7:f6:44:a7:0f:a3:b5:d4:9e:69:c9:
                    c6:1e:24:9c:c4:31:65:49:2c:59:c5:8a:5c:9f:0d:
                    b1:87:11:0b:ac:e3:da:e0:37:2e:a2:d4:fa:94:0f:
                    b6:98:29:9f:60:27:7a:a3:c1:2e:5a:ae:c0:a0:6a:
                    04:ce:75:c4:33:44:27:7b:ec:10:90:d3:70:fc:98:
                    cf:ce:43:50:fa:d8:06:6f:75:f3:0d:5c:0d:33:d8:
                    20:91:a9:90:a7:d9:5a:d5:46:8e:15:54:9c:f1:a9:
                    d8:c6:b0:5c:4b:79:b3:f4:42:a4:33:43:46:05:67:
                    63:3b:be:04:c4:38:c5:55:40:34:8c:6c:1f:4e:bd:
                    17:11:23:51:c3:9f:2a:8b:4e:07:98:9d:5b:ad:a3:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C8:02:05:A1:80:12:16:2F:54:0C:D6:34:7D:7C:75:FD:4A:7F:24
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:e2:72:8f:d9:9c:c3:9a:89:41:a0:69:d5:53:c4:1d:5a:a1:
         f1:2e:32:54:70:bd:27:ad:a2:95:e5:2e:2b:53:21:28:27:72:
         42:67:57:f3:83:e4:f1:d6:ac:c9:5a:3e:1c:93:fe:88:9e:45:
         a7:88:90:bc:be:6a:bb:48:b0:e2:52:3d:3c:78:38:e2:47:1d:
         9a:32:c5:04:ae:16:81:01:52:3d:d0:0f:e8:8c:c2:a6:ec:cf:
         e1:6f:39:63:e9:f0:6e:50:91:21:c0:e3:43:51:e6:b1:76:b8:
         5e:ce:1c:0e:95:a3:13:8d:96:b4:40:fc:d4:61:1c:7e:4a:cf:
         eb:0e:f1:b1:70:d1:38:90:84:e4:a9:73:57:d3:c6:fe:24:d2:
         bc:a5:1c:aa:79:ca:ba:22:a9:a3:46:30:e4:3b:3f:0c:a4:8c:
         e4:a4:97:cb:9c:97:74:cf:0e:25:41:67:15:52:9a:36:d3:86:
         7c:05:bb:d5:72:26:05:1b:a6:cc:e0:0c:e0:f2:53:01:6b:c9:
         63:df:75:b4:3a:9b:c5:72:da:b8:2e:8f:8c:28:ea:bd:d0:79:
         3f:c4:db:4a:f4:fd:3e:43:48:ce:5c:80:dc:2e:52:e7:f1:36:
         14:1c:f6:a6:3c:87:8e:62:77:1a:11:42:32:46:15:2f:3b:42:
         93:84:25:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWqzd2Uk045OHqK6pSw3HVcb11K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDNjVCOTE3NUE4QzU1REQxQkU4QjVENkY1MTE1MkQ3
MkM1MDVBQTAeFw0yNDA0MDQxMzQ4NTJaFw0yNTA0MDMxMzUzNTJaMDMxMTAvBgNV
BAMTKDAyQzgwMjA1QTE4MDEyMTYyRjU0MENENjM0N0Q3Qzc1RkQ0QTdGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfFV5OHsdJNOvyxx9hXwxs011
gwcQyDPxq+d/ivxUe1E02iuPLCFSfAFTS5iBthmTxKXNI+SFcK+tGMC3wLmRLXRL
7UDnzElSBosVXR3N5Kg3x9HtIFsNgRrxtPEsYv0EvnMacERfeaFZPH+n9kSnD6O1
1J5pycYeJJzEMWVJLFnFilyfDbGHEQus49rgNy6i1PqUD7aYKZ9gJ3qjwS5arsCg
agTOdcQzRCd77BCQ03D8mM/OQ1D62AZvdfMNXA0z2CCRqZCn2VrVRo4VVJzxqdjG
sFxLebP0QqQzQ0YFZ2M7vgTEOMVVQDSMbB9OvRcRI1HDnyqLTgeYnVuto0vDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAsgCBaGAEhYvVAzWNH18df1KfyQwHwYDVR0j
BBgwFoAU18ZbkXWoxV3Rvotdb1EVLXLFBaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMS9EN0M2NUI5MTc1QThDNTVERDFCRThCNUQ2RjUxMTUyRDcyQzUwNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QzY1QjkxNzVBOEM1NURE
MUJFOEI1RDZGNTExNTJENzJDNTA1QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzEv
MzIzODMwMzQzYTM0NjMzNTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzMzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARMUAAwDQYJKoZIhvcNAQELBQADggEBABXico/Z
nMOaiUGgadVTxB1aofEuMlRwvSetopXlLitTISgnckJnV/OD5PHWrMlaPhyT/oie
RaeIkLy+artIsOJSPTx4OOJHHZoyxQSuFoEBUj3QD+iMwqbsz+FvOWPp8G5QkSHA
40NR5rF2uF7OHA6VoxONlrRA/NRhHH5Kz+sO8bFw0TiQhOSpc1fTxv4k0rylHKp5
yroiqaNGMOQ7PwykjOSkl8ucl3TPDiVBZxVSmjbThnwFu9VyJgUbpszgDODyUwFr
yWPfdbQ6m8Vy2rguj4wo6r3QeT/E20r0/T5DSM5cgNwuUufxNhQc9qY8h45idxoR
QjJGFS87QpOEJT0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org