Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/323830343a366161303a343030303a3a2f33342d313238203d3e20323730333439.roa
File:                     323830343a366161303a343030303a3a2f33342d313238203d3e20323730333439.roa (raw, json)
Hash identifier:          Kv1JM4LkmnEmnavUUz0awOoYfXbIwqf3Ry29PrjuktA=
Subject key identifier:   89:B5:8B:49:89:68:A5:E5:9F:43:D2:70:D7:0A:8E:E3:F0:63:C1:B0
Certificate issuer:       /CN=FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51
Certificate serial:       519F5219875768741934DBE6A1C39D3D0FCEBF1E
Authority key identifier: FC:C3:E4:6E:60:8B:1A:0A:6B:83:2E:4B:E4:3C:8F:3A:F6:D9:8B:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/323830343a366161303a343030303a3a2f33342d313238203d3e20323730333439.roa
Signing time:             Tue 05 Nov 2024 19:19:53 +0000
ROA not before:           Tue 05 Nov 2024 19:14:53 +0000
ROA not after:            Tue 04 Nov 2025 19:19:53 +0000
asID:                     270349
IP address blocks:        2804:6aa0:4000::/34 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.crl
                          rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9f:52:19:87:57:68:74:19:34:db:e6:a1:c3:9d:3d:0f:ce:bf:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51
        Validity
            Not Before: Nov  5 19:14:53 2024 GMT
            Not After : Nov  4 19:19:53 2025 GMT
        Subject: CN=89B58B498968A5E59F43D270D70A8EE3F063C1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:4d:e6:1f:37:e9:56:70:4a:93:1a:2d:35:
                    76:ab:18:19:35:26:5c:d5:5b:99:f5:24:31:9b:2e:
                    33:e5:e3:ba:ac:22:aa:51:e2:17:2f:0d:7c:b3:84:
                    73:4b:10:e4:ce:a2:b0:59:eb:72:fd:a9:b6:1b:f5:
                    9f:6e:d6:3a:ec:5c:d5:86:e2:9d:f7:6f:6a:45:d7:
                    80:fc:df:54:35:cd:f0:b2:6b:3e:b4:bb:34:6d:78:
                    93:cb:73:31:d8:00:f3:c1:0e:47:0f:4f:43:d9:71:
                    5d:16:99:00:31:45:9b:22:51:0d:48:e2:b1:f7:4d:
                    3b:df:ef:23:c0:9d:22:2f:5b:f8:07:13:5c:f6:8d:
                    55:84:68:f9:9b:3b:53:af:ff:f2:95:5e:e4:0d:c0:
                    41:df:19:97:18:74:0f:1a:4a:5d:19:bf:c4:1f:d2:
                    b5:38:67:2a:40:a9:8c:ca:85:98:25:2d:43:64:62:
                    71:f0:97:19:88:2a:73:b9:02:d5:f5:62:70:26:3a:
                    d0:33:55:3d:5f:c9:5f:98:4e:cc:dc:dd:d8:56:63:
                    51:2a:ce:4b:51:3b:f1:ff:df:f9:94:15:f8:38:76:
                    8d:88:9c:52:7a:42:15:90:64:44:8c:e7:70:0e:bf:
                    e3:95:87:55:8c:6e:b5:7c:1d:46:e5:43:12:1c:96:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B5:8B:49:89:68:A5:E5:9F:43:D2:70:D7:0A:8E:E3:F0:63:C1:B0
            X509v3 Authority Key Identifier:
                keyid:FC:C3:E4:6E:60:8B:1A:0A:6B:83:2E:4B:E4:3C:8F:3A:F6:D9:8B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/323830343a366161303a343030303a3a2f33342d313238203d3e20323730333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6aa0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:c5:30:10:5b:47:18:dc:9a:11:6d:b7:e8:90:a7:0b:8f:
         d3:16:96:91:6a:93:d5:19:14:20:7f:bb:af:09:c4:81:a2:03:
         2d:02:a3:11:16:48:0f:2f:42:91:74:cd:5b:d9:57:4c:1d:10:
         8d:55:ce:c1:a5:b4:46:d5:77:20:d9:c0:05:2b:41:23:2a:c1:
         e1:ae:1e:e0:09:5e:87:e1:fd:62:5d:eb:4e:81:c5:c6:ce:ba:
         0d:61:e4:2b:4c:48:cf:4d:56:f3:9b:a0:3e:3a:c5:b2:54:ab:
         09:27:7a:f1:32:49:a7:92:7b:be:32:a3:45:58:5a:2c:1d:0c:
         da:35:b7:00:1d:6a:65:4d:1c:59:ac:62:f3:a4:89:9e:09:7c:
         f9:bf:b0:6f:2f:f1:63:c1:3f:63:2e:65:69:19:fe:0e:95:9d:
         f0:12:8a:67:71:22:81:29:68:37:cc:60:47:22:2f:34:cb:09:
         fb:c4:fd:d9:fe:b3:cd:6f:bb:03:ba:d1:bc:e0:a0:c8:a6:d4:
         9f:2c:07:31:8f:65:cd:14:3a:a2:32:80:5a:09:b9:0b:3f:29:
         4a:47:df:43:1e:35:92:8a:7e:15:f4:c1:8f:54:40:f0:d9:bd:
         9f:77:66:c4:1d:ed:06:c6:80:7c:a9:cc:0c:83:75:e1:ba:20:
         e1:20:e4:89
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUUZ9SGYdXaHQZNNvmocOdPQ/Ovx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNDM0U0NkU2MDhCMUEwQTZCODMyRTRCRTQzQzhGM0FG
NkQ5OEI1MTAeFw0yNDExMDUxOTE0NTNaFw0yNTExMDQxOTE5NTNaMDMxMTAvBgNV
BAMTKDg5QjU4QjQ5ODk2OEE1RTU5RjQzRDI3MEQ3MEE4RUUzRjA2M0MxQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKk3mHzfpVnBKkxotNXarGBk1
JlzVW5n1JDGbLjPl47qsIqpR4hcvDXyzhHNLEOTOorBZ63L9qbYb9Z9u1jrsXNWG
4p33b2pF14D831Q1zfCyaz60uzRteJPLczHYAPPBDkcPT0PZcV0WmQAxRZsiUQ1I
4rH3TTvf7yPAnSIvW/gHE1z2jVWEaPmbO1Ov//KVXuQNwEHfGZcYdA8aSl0Zv8Qf
0rU4ZypAqYzKhZglLUNkYnHwlxmIKnO5AtX1YnAmOtAzVT1fyV+YTszc3dhWY1Eq
zktRO/H/3/mUFfg4do2InFJ6QhWQZESM53AOv+OVh1WMbrV8HUblQxIclmovAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUibWLSYlopeWfQ9Jw1wqO4/BjwbAwHwYDVR0j
BBgwFoAU/MPkbmCLGgprgy5L5DyPOvbZi1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERLOFVnc1BMajI2QXZWa3lEQnBOcmo0MWU4ZWFabjJSNXJGNnlmdjdR
YUQvMC9GQ0MzRTQ2RTYwOEIxQTBBNkI4MzJFNEJFNDNDOEYzQUY2RDk4QjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDQzNFNDZFNjA4QjFBMEE2
QjgzMkU0QkU0M0M4RjNBRjZEOThCNTEuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB
pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhESzhVZ3NQTGoyNkF2Vmt5REJwTnJqNDFlOGVhWm4yUjVyRjZ5ZnY3UWFELzAv
MzIzODMwMzQzYTM2NjE2MTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMxMzIzODIw
M2QzZTIwMzIzNzMwMzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKARqoEAwDQYJKoZIhvcNAQEL
BQADggEBAHmoxTAQW0cY3JoRbbfokKcLj9MWlpFqk9UZFCB/u68JxIGiAy0CoxEW
SA8vQpF0zVvZV0wdEI1VzsGltEbVdyDZwAUrQSMqweGuHuAJXofh/WJd606BxcbO
ug1h5CtMSM9NVvOboD46xbJUqwknevEySaeSe74yo0VYWiwdDNo1twAdamVNHFms
YvOkiZ4JfPm/sG8v8WPBP2MuZWkZ/g6VnfASimdxIoEpaDfMYEciLzTLCfvE/dn+
s81vuwO60bzgoMim1J8sBzGPZc0UOqIygFoJuQs/KUpH30MeNZKKfhX0wY9UQPDZ
vZ93ZsQd7QbGgHypzAyDdeG6IOEg5Ik=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org