Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa
File:                     323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (raw, json)
Hash identifier:          S7kJDoCcNaThVOAGrv888uaSpqFlDfOV2iGQ9Rm40hw=
Subject key identifier:   92:40:63:62:0B:89:B9:E7:D7:05:CA:15:37:11:72:21:93:8C:E5:8F
Certificate issuer:       /CN=DE888425B89835354B62227D843F72DA4DC0E2E4
Certificate serial:       6B3B90F91BDEB92E85447EAB9DD5D8D3C8059E1E
Authority key identifier: DE:88:84:25:B8:98:35:35:4B:62:22:7D:84:3F:72:DA:4D:C0:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE888425B89835354B62227D843F72DA4DC0E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa
Signing time:             Thu 04 Apr 2024 07:08:53 +0000
ROA not before:           Thu 04 Apr 2024 07:03:53 +0000
ROA not after:            Thu 03 Apr 2025 07:08:53 +0000
asID:                     263142
IP address blocks:        2804:1760::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.crl
                          rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE888425B89835354B62227D843F72DA4DC0E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 10:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3b:90:f9:1b:de:b9:2e:85:44:7e:ab:9d:d5:d8:d3:c8:05:9e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE888425B89835354B62227D843F72DA4DC0E2E4
        Validity
            Not Before: Apr  4 07:03:53 2024 GMT
            Not After : Apr  3 07:08:53 2025 GMT
        Subject: CN=924063620B89B9E7D705CA1537117221938CE58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:cb:ff:06:86:43:36:43:bf:af:86:ea:42:
                    ec:f1:0c:d2:fd:6b:84:da:b1:9d:a9:49:21:fc:fe:
                    52:6b:bf:e6:54:d6:c1:50:ae:ec:db:d1:e8:f6:16:
                    90:7c:83:46:7f:6b:ca:be:47:63:35:1d:75:d4:fe:
                    44:09:3e:f7:72:43:0b:6c:fd:c3:0c:88:97:23:a0:
                    25:a8:63:77:9f:89:e6:75:6d:f4:a4:88:e7:a1:be:
                    de:57:ad:a2:33:a6:6c:43:f2:69:5a:ba:10:f9:65:
                    ac:63:55:f7:b8:c9:f6:08:7a:ae:16:7b:ca:db:53:
                    3d:b6:d2:91:14:b1:84:8e:d8:2a:9c:29:fd:07:7c:
                    7d:ff:28:01:1a:1f:b3:bf:4f:77:b6:be:71:eb:bf:
                    64:28:a7:38:f7:ec:4b:67:ff:93:8a:ac:00:3f:aa:
                    4e:f6:30:96:a0:63:9a:f3:3a:dc:7f:95:d7:68:ae:
                    18:18:87:d5:0c:92:30:d4:62:a3:d1:43:95:19:81:
                    a4:f7:a2:ed:3f:ca:34:10:85:68:a4:74:e2:b3:ef:
                    58:f3:da:b4:15:e2:a8:7c:d3:57:9e:da:63:7c:f3:
                    71:00:b6:03:7a:16:73:22:fe:c4:b7:63:0f:27:d6:
                    c7:d0:74:0a:13:f8:df:6e:2c:90:4e:00:2c:cc:08:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:63:62:0B:89:B9:E7:D7:05:CA:15:37:11:72:21:93:8C:E5:8F
            X509v3 Authority Key Identifier:
                keyid:DE:88:84:25:B8:98:35:35:4B:62:22:7D:84:3F:72:DA:4D:C0:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE888425B89835354B62227D843F72DA4DC0E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1760::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:d2:f7:86:44:2d:8d:5e:85:0c:25:d2:13:96:dc:9b:fc:07:
         31:4b:24:11:dc:a9:12:e2:1a:f4:e7:10:92:3c:5c:71:e0:38:
         f3:62:f2:5f:6a:77:95:10:23:0c:dc:4d:52:dd:fe:9d:91:59:
         74:f2:da:d0:c7:a6:97:8d:76:4b:8b:45:30:35:f7:08:ad:64:
         e7:76:ca:ea:06:96:25:2d:34:73:bd:b7:72:5a:68:16:31:51:
         79:9e:f9:71:19:35:06:26:60:fe:00:0d:db:63:98:93:5b:01:
         42:9a:02:78:ae:ef:89:81:1c:55:f2:d9:b8:c8:2b:3f:81:ec:
         5d:d2:d4:4e:03:dd:1f:ba:c7:b4:bb:72:bb:f6:cc:25:32:b1:
         43:eb:b7:5a:1b:0d:dd:35:12:97:c3:53:db:6e:fc:12:86:4f:
         9d:fb:59:34:28:5e:33:6a:b9:52:13:7f:c3:0a:1f:cf:db:4a:
         32:c6:2f:c8:08:2b:aa:a1:4c:f7:e2:d8:b9:a7:89:2a:f1:de:
         72:77:58:e8:8a:d8:89:13:23:6c:df:84:1f:58:43:94:e8:3b:
         c9:d0:97:3f:c4:94:d1:91:79:48:56:6f:63:e8:3a:41:c4:ce:
         6e:13:f6:24:10:cd:05:a2:57:0c:28:be:1d:fa:33:80:42:52:
         ec:17:3c:57
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUazuQ+RveuS6FRH6rndXY08gFnh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU4ODg0MjVCODk4MzUzNTRCNjIyMjdEODQzRjcyREE0
REMwRTJFNDAeFw0yNDA0MDQwNzAzNTNaFw0yNTA0MDMwNzA4NTNaMDMxMTAvBgNV
BAMTKDkyNDA2MzYyMEI4OUI5RTdENzA1Q0ExNTM3MTE3MjIxOTM4Q0U1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP48v/BoZDNkO/r4bqQuzxDNL9
a4TasZ2pSSH8/lJrv+ZU1sFQruzb0ej2FpB8g0Z/a8q+R2M1HXXU/kQJPvdyQwts
/cMMiJcjoCWoY3efieZ1bfSkiOehvt5XraIzpmxD8mlauhD5ZaxjVfe4yfYIeq4W
e8rbUz220pEUsYSO2CqcKf0HfH3/KAEaH7O/T3e2vnHrv2Qopzj37Etn/5OKrAA/
qk72MJagY5rzOtx/lddorhgYh9UMkjDUYqPRQ5UZgaT3ou0/yjQQhWikdOKz71jz
2rQV4qh801ee2mN883EAtgN6FnMi/sS3Yw8n1sfQdAoT+N9uLJBOACzMCFAzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUkkBjYguJuefXBcoVNxFyIZOM5Y8wHwYDVR0j
BBgwFoAU3oiEJbiYNTVLYiJ9hD9y2k3A4uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4
c1kvMS9ERTg4ODQyNUI4OTgzNTM1NEI2MjIyN0Q4NDNGNzJEQTREQzBFMkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFODg4NDI1Qjg5ODM1MzU0
QjYyMjI3RDg0M0Y3MkRBNERDMEUyRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZU1FKQ1lKdmtLUXFQckJmZnhEd3FCR2VaOGlaTEh2eTdtOGlUNlFKeHNZLzEv
MzIzODMwMzQzYTMxMzczNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBdgMA0GCSqGSIb3DQEBCwUAA4IBAQBj0veG
RC2NXoUMJdITltyb/AcxSyQR3KkS4hr05xCSPFxx4DjzYvJfaneVECMM3E1S3f6d
kVl08trQx6aXjXZLi0UwNfcIrWTndsrqBpYlLTRzvbdyWmgWMVF5nvlxGTUGJmD+
AA3bY5iTWwFCmgJ4ru+JgRxV8tm4yCs/gexd0tROA90fuse0u3K79swlMrFD67da
Gw3dNRKXw1PbbvwShk+d+1k0KF4zarlSE3/DCh/P20oyxi/ICCuqoUz34ti5p4kq
8d5yd1joitiJEyNs34QfWEOU6DvJ0Jc/xJTRkXlIVm9j6DpBxM5uE/YkEM0FolcM
KL4d+jOAQlLsFzxX
-----END CERTIFICATE-----
Generated at Fri Sep 27 10:45:44 2024 by rpki-client on console-fra.rpki-client.org