Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a313230303a3a2f34302d3430203d3e20323634313639.roa
File:                     323830343a323338633a313230303a3a2f34302d3430203d3e20323634313639.roa (raw, json)
Hash identifier:          VDKAdQ4/qxBkPKE+5iiZ7NWojh+iUgm2VKpkktCM4yQ=
Subject key identifier:   05:16:D9:7F:39:A6:10:D4:E2:E1:8E:2C:0B:FF:03:01:B2:BF:61:16
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       59AC922CC9464B0150D23BD2738FAE29D37F1ED7
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a313230303a3a2f34302d3430203d3e20323634313639.roa
Signing time:             Tue 06 Aug 2024 13:30:27 +0000
ROA not before:           Tue 06 Aug 2024 13:25:27 +0000
ROA not after:            Tue 05 Aug 2025 13:30:27 +0000
asID:                     264169
IP address blocks:        2804:238c:1200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl
                          rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ac:92:2c:c9:46:4b:01:50:d2:3b:d2:73:8f:ae:29:d3:7f:1e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Aug  6 13:25:27 2024 GMT
            Not After : Aug  5 13:30:27 2025 GMT
        Subject: CN=0516D97F39A610D4E2E18E2C0BFF0301B2BF6116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:08:34:99:90:58:40:3b:b6:12:71:66:0c:
                    30:33:b4:25:89:f7:8f:a3:bc:3e:4e:7c:20:90:68:
                    aa:48:1d:7c:56:7e:6d:13:e3:a7:e2:3e:a8:db:66:
                    21:5f:63:8e:7b:9b:bc:eb:a6:61:74:13:b8:8d:ac:
                    51:f2:49:5f:81:fd:88:0b:c0:0f:5c:90:bc:1d:17:
                    45:07:f3:44:20:5e:ea:6d:78:80:06:24:29:d6:06:
                    cd:8e:1c:38:77:96:8f:86:33:a3:7b:f3:7a:cc:7e:
                    35:09:e0:be:4c:77:93:a9:d8:4d:e7:c2:bf:db:a5:
                    ed:12:ff:f1:48:f9:12:8b:2b:7f:0b:e8:7b:3d:19:
                    9d:5d:56:c1:0e:7c:86:19:5b:f4:b1:76:d7:eb:41:
                    86:dd:6e:ba:c7:fd:02:f8:9e:36:7b:4b:df:2b:6a:
                    42:0f:bf:bf:0e:f5:5f:56:b0:92:39:95:ef:68:6e:
                    97:92:f1:9e:92:65:b8:fb:8c:c3:6f:ba:84:28:2e:
                    78:a3:c1:83:2e:cc:6f:32:36:8c:b1:21:ec:57:54:
                    1c:4b:15:fe:d7:57:44:8e:84:47:8e:a2:fa:79:ae:
                    f3:77:53:aa:4a:98:df:a4:e2:a5:a4:84:97:84:e9:
                    37:e2:2e:76:cf:f1:9b:10:27:40:38:27:ee:2b:2a:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:D9:7F:39:A6:10:D4:E2:E1:8E:2C:0B:FF:03:01:B2:BF:61:16
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a313230303a3a2f34302d3430203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:238c:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:63:09:3d:c5:08:a5:5d:01:5d:17:0f:c5:cb:3a:d8:e7:
         45:03:ea:2d:52:a6:7e:c5:1a:06:6c:f1:90:15:86:88:c6:cd:
         a9:d3:2a:ee:5f:54:9c:44:a7:e8:ed:25:1d:95:21:58:e8:57:
         32:47:62:fe:25:b1:ab:48:84:ad:7d:d9:08:37:6c:25:57:86:
         ef:6b:d6:09:82:0c:cc:0a:2c:fc:76:7f:0c:0a:af:d7:66:ed:
         07:a4:0d:ad:17:a6:83:b3:69:0b:b5:0d:06:9d:0e:fb:12:b4:
         96:37:36:b8:02:04:44:ad:b1:4b:a5:05:d7:6a:21:aa:6d:6d:
         2f:cc:0f:4f:36:24:06:9f:54:94:95:56:bd:19:5a:3a:e2:33:
         cb:52:84:79:10:8b:91:8a:2d:f9:99:8b:ab:52:af:30:76:ff:
         22:a6:87:3a:69:a9:7c:8a:8f:a2:43:1f:3d:f3:f7:93:db:f2:
         46:09:d8:a7:4c:6c:48:5b:0b:f4:41:5f:4f:d3:dd:33:ca:e2:
         09:2d:74:d3:8a:e6:5a:ac:1f:fd:ee:c6:c5:79:a6:1d:77:bd:
         f3:0d:1f:8c:fe:eb:4f:c5:c6:a8:bc:48:5d:1a:23:69:80:7f:
         84:a9:84:f7:10:14:70:9d:2e:ce:e2:0f:23:de:ae:ea:51:42:
         f2:0b:7e:5b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWaySLMlGSwFQ0jvSc4+uKdN/HtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFGNDQ2QTQ1QThBRUU2NkEyMUQ3NEU5ODJDNzJDRDRC
N0IyMkNFMDAeFw0yNDA4MDYxMzI1MjdaFw0yNTA4MDUxMzMwMjdaMDMxMTAvBgNV
BAMTKDA1MTZEOTdGMzlBNjEwRDRFMkUxOEUyQzBCRkYwMzAxQjJCRjYxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LAg0mZBYQDu2EnFmDDAztCWJ
94+jvD5OfCCQaKpIHXxWfm0T46fiPqjbZiFfY457m7zrpmF0E7iNrFHySV+B/YgL
wA9ckLwdF0UH80QgXupteIAGJCnWBs2OHDh3lo+GM6N783rMfjUJ4L5Md5Op2E3n
wr/bpe0S//FI+RKLK38L6Hs9GZ1dVsEOfIYZW/SxdtfrQYbdbrrH/QL4njZ7S98r
akIPv78O9V9WsJI5le9obpeS8Z6SZbj7jMNvuoQoLnijwYMuzG8yNoyxIexXVBxL
Ff7XV0SOhEeOovp5rvN3U6pKmN+k4qWkhJeE6TfiLnbP8ZsQJ0A4J+4rKpHTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBRbZfzmmENTi4Y4sC/8DAbK/YRYwHwYDVR0j
BBgwFoAUWvRGpFqK7maiHXTpgscs1LeyLOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpzblBtVnFnZHpjODJYb1ZjWHY0ZlRLZjlSUWl6ZER6U1BlcmNITVhu
WWgvMC81QUY0NDZBNDVBOEFFRTY2QTIxRDc0RTk4MkM3MkNENEI3QjIyQ0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjQ0NkE0NUE4QUVFNjZB
MjFENzRFOTgyQzcyQ0Q0QjdCMjJDRTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhKc25QbVZxZ2R6YzgyWG9WY1h2NGZUS2Y5UlFpemREelNQZXJjSE1YblloLzAv
MzIzODMwMzQzYTMyMzMzODYzM2EzMTMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMxMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEI4wSMA0GCSqGSIb3DQEBCwUA
A4IBAQAurmMJPcUIpV0BXRcPxcs62OdFA+otUqZ+xRoGbPGQFYaIxs2p0yruX1Sc
RKfo7SUdlSFY6FcyR2L+JbGrSIStfdkIN2wlV4bva9YJggzMCiz8dn8MCq/XZu0H
pA2tF6aDs2kLtQ0GnQ77ErSWNza4AgRErbFLpQXXaiGqbW0vzA9PNiQGn1SUlVa9
GVo64jPLUoR5EIuRii35mYurUq8wdv8ipoc6aal8io+iQx898/eT2/JGCdinTGxI
Wwv0QV9P090zyuIJLXTTiuZarB/97sbFeaYdd73zDR+M/utPxcaovEhdGiNpgH+E
qYT3EBRwnS7O4g8j3q7qUULyC35b
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:49 2024 by rpki-client on console-fra.rpki-client.org