Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/323830343a353531303a3a2f33322d3438203d3e20323638363837.roa
File:                     323830343a353531303a3a2f33322d3438203d3e20323638363837.roa (raw, json)
Hash identifier:          1rirR8VSX7pUtwjOnDo8v3WbqbxY8P8SvyjkNy7n5xQ=
Subject key identifier:   0A:EF:5A:B7:5F:A3:79:00:42:4A:90:E8:59:38:28:F2:79:F9:52:46
Certificate issuer:       /CN=5E1114F349B885222E5B551B7066E55CEE43A516
Certificate serial:       456059AE5E9A2CBD92C30C8F9459B0E091108150
Authority key identifier: 5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E1114F349B885222E5B551B7066E55CEE43A516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/323830343a353531303a3a2f33322d3438203d3e20323638363837.roa
Signing time:             Thu 04 Apr 2024 21:27:14 +0000
ROA not before:           Thu 04 Apr 2024 21:22:14 +0000
ROA not after:            Thu 03 Apr 2025 21:27:14 +0000
asID:                     268687
IP address blocks:        2804:5510::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.crl
                          rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E1114F349B885222E5B551B7066E55CEE43A516.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:60:59:ae:5e:9a:2c:bd:92:c3:0c:8f:94:59:b0:e0:91:10:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E1114F349B885222E5B551B7066E55CEE43A516
        Validity
            Not Before: Apr  4 21:22:14 2024 GMT
            Not After : Apr  3 21:27:14 2025 GMT
        Subject: CN=0AEF5AB75FA37900424A90E8593828F279F95246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:f2:af:30:6f:7a:2f:5f:ac:19:ea:5b:81:
                    2f:42:c9:04:44:87:d3:3c:a4:b5:24:c6:f3:9c:e8:
                    90:63:f6:8a:90:6f:69:4f:c5:31:76:5d:bf:7a:52:
                    82:95:a8:7e:7f:59:57:27:bf:64:3a:f6:1a:1c:80:
                    64:be:cd:c3:19:8f:12:2b:7f:23:c0:79:58:f0:37:
                    bc:ef:27:80:5b:6f:5a:37:7f:72:d4:84:cf:05:0c:
                    ce:db:8d:ea:53:cc:25:56:08:8e:73:bf:91:ca:06:
                    e2:b5:16:20:08:0d:18:d8:05:74:96:c6:21:33:fb:
                    a7:cb:28:af:51:67:bb:63:52:aa:d5:6e:b1:09:a9:
                    4c:05:db:b7:42:e4:cf:b1:56:f7:c5:5e:40:be:32:
                    7e:5a:21:90:1b:b2:ba:e6:35:ef:33:63:57:a2:bb:
                    55:28:1b:b4:52:a9:50:a0:d2:e0:1c:43:a4:0e:04:
                    1e:e7:69:0b:91:ea:f9:fe:87:dc:3a:cd:32:bc:a1:
                    ad:d1:1e:17:6f:e9:78:7d:80:d7:1c:49:b0:a5:0a:
                    4e:be:6f:53:cd:d3:b6:a7:ec:cf:74:95:42:01:58:
                    fb:b7:5e:a7:89:f0:3f:57:4c:b8:8e:bc:1c:db:91:
                    95:88:7d:03:2e:cf:76:99:bd:cb:0a:a5:b8:6f:ed:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EF:5A:B7:5F:A3:79:00:42:4A:90:E8:59:38:28:F2:79:F9:52:46
            X509v3 Authority Key Identifier:
                keyid:5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E1114F349B885222E5B551B7066E55CEE43A516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/323830343a353531303a3a2f33322d3438203d3e20323638363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5510::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:c6:eb:77:17:b4:d1:1a:97:9d:b9:0d:9b:2b:37:9c:5d:
         83:50:4d:4c:e0:9a:0a:0d:bf:dc:da:53:68:30:56:e9:e0:39:
         5f:d2:89:6a:ff:78:59:2c:2b:23:e0:ce:ac:1f:29:e4:23:2a:
         f4:dc:a8:67:fe:99:2b:55:7b:e7:00:be:b5:9e:7d:6f:f8:2e:
         8f:23:97:94:2a:01:c3:aa:83:f3:92:fd:cb:01:d8:97:57:69:
         25:c3:2f:3e:cf:9d:6c:bb:43:36:fb:3e:96:2a:3d:d8:76:af:
         e8:18:73:ff:81:f3:5e:0b:ae:3a:3b:42:08:e6:4c:b6:0e:f9:
         e6:3f:31:ed:d5:c8:83:21:34:21:03:86:ed:d3:09:50:9a:56:
         66:79:6b:82:2a:49:de:23:68:05:19:7e:b8:3f:57:0a:9d:64:
         bc:52:9f:b3:31:03:9b:f3:c5:67:68:f0:b4:8e:ed:c5:ab:0c:
         0f:fd:fb:3d:f5:c7:42:bd:e2:e1:4a:22:e0:21:5f:84:7f:2d:
         eb:54:c5:ee:b2:f4:0a:c4:16:ed:fe:df:6d:95:01:e6:0e:e6:
         66:a6:99:73:81:b6:ae:aa:f5:33:b0:94:97:ce:cf:c7:4e:db:
         d4:b7:db:09:86:41:4d:53:14:89:41:4a:67:3a:f3:c5:17:7d:
         ec:bd:12:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURWBZrl6aLL2SwwyPlFmw4JEQgVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUxMTE0RjM0OUI4ODUyMjJFNUI1NTFCNzA2NkU1NUNF
RTQzQTUxNjAeFw0yNDA0MDQyMTIyMTRaFw0yNTA0MDMyMTI3MTRaMDMxMTAvBgNV
BAMTKDBBRUY1QUI3NUZBMzc5MDA0MjRBOTBFODU5MzgyOEYyNzlGOTUyNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BfKvMG96L1+sGepbgS9CyQRE
h9M8pLUkxvOc6JBj9oqQb2lPxTF2Xb96UoKVqH5/WVcnv2Q69hocgGS+zcMZjxIr
fyPAeVjwN7zvJ4Bbb1o3f3LUhM8FDM7bjepTzCVWCI5zv5HKBuK1FiAIDRjYBXSW
xiEz+6fLKK9RZ7tjUqrVbrEJqUwF27dC5M+xVvfFXkC+Mn5aIZAbsrrmNe8zY1ei
u1UoG7RSqVCg0uAcQ6QOBB7naQuR6vn+h9w6zTK8oa3RHhdv6Xh9gNccSbClCk6+
b1PN07an7M90lUIBWPu3XqeJ8D9XTLiOvBzbkZWIfQMuz3aZvcsKpbhv7dUnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCu9at1+jeQBCSpDoWTgo8nn5UkYwHwYDVR0j
BBgwFoAUXhEU80m4hSIuW1UbcGblXO5DpRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGF3dFY4cndCNkNqUVpQNXExRkhtYkdZVDdtNVZ1blY3TmN2ZFJKdDlQ
RW8vMS81RTExMTRGMzQ5Qjg4NTIyMkU1QjU1MUI3MDY2RTU1Q0VFNDNBNTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFMTExNEYzNDlCODg1MjIy
RTVCNTUxQjcwNjZFNTVDRUU0M0E1MTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhhd3RWOHJ3QjZDalFaUDVxMUZIbWJHWVQ3bTVWdW5WN05jdmRSSnQ5UEVvLzEv
MzIzODMwMzQzYTM1MzUzMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzYzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARVEDANBgkqhkiG9w0BAQsFAAOCAQEADVDG63cX
tNEal525DZsrN5xdg1BNTOCaCg2/3NpTaDBW6eA5X9KJav94WSwrI+DOrB8p5CMq
9NyoZ/6ZK1V75wC+tZ59b/gujyOXlCoBw6qD85L9ywHYl1dpJcMvPs+dbLtDNvs+
lio92Hav6Bhz/4HzXguuOjtCCOZMtg755j8x7dXIgyE0IQOG7dMJUJpWZnlrgipJ
3iNoBRl+uD9XCp1kvFKfszEDm/PFZ2jwtI7txasMD/37PfXHQr3i4Uoi4CFfhH8t
61TF7rL0CsQW7f7fbZUB5g7mZqaZc4G2rqr1M7CUl87Px07b1LfbCYZBTVMUiUFK
ZzrzxRd97L0Siw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:08 2024 by rpki-client on console-ams.rpki-client.org