Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d3438203d3e20323634343533.roa
File:                     323830343a316565383a3a2f33322d3438203d3e20323634343533.roa (raw, json)
Hash identifier:          WvssJdW/R1g9PIokArYgAZV+0Nla5ZZ1DVPbR0tTpPk=
Subject key identifier:   FD:DD:07:56:F2:A5:B0:0E:8A:A4:70:34:F2:43:B9:06:E3:D9:D2:58
Certificate issuer:       /CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
Certificate serial:       2F8614892E2C477A9A245A24D3874C2547A6E96F
Authority key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d3438203d3e20323634343533.roa
Signing time:             Wed 05 Jun 2024 19:19:47 +0000
ROA not before:           Wed 05 Jun 2024 19:14:47 +0000
ROA not after:            Wed 04 Jun 2025 19:19:47 +0000
asID:                     264453
IP address blocks:        2804:1ee8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl
                          rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:86:14:89:2e:2c:47:7a:9a:24:5a:24:d3:87:4c:25:47:a6:e9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
        Validity
            Not Before: Jun  5 19:14:47 2024 GMT
            Not After : Jun  4 19:19:47 2025 GMT
        Subject: CN=FDDD0756F2A5B00E8AA47034F243B906E3D9D258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:ea:8e:21:21:39:bc:b6:cf:90:b5:9a:38:
                    9d:b1:2a:e4:03:50:8e:7c:b5:de:1d:92:11:91:4a:
                    59:1b:56:cc:4f:bf:49:f6:dc:5a:ae:ff:5a:fa:80:
                    60:5a:3f:28:c2:ba:f3:34:36:6b:c9:c7:83:f3:e0:
                    19:0b:1b:43:74:d8:cb:75:82:5e:d4:1a:3d:ca:34:
                    42:fe:ca:fd:83:51:79:93:aa:ca:50:4d:fb:69:10:
                    1c:2d:9e:81:e2:85:e1:1f:f3:dd:41:64:dc:cd:a0:
                    fd:b8:5a:b8:0a:be:14:27:b2:99:e3:e3:80:90:4a:
                    2d:39:38:af:54:f5:ff:06:61:a4:5d:b4:4c:7b:22:
                    3d:00:7c:71:c5:af:04:90:05:ab:52:9f:9b:33:27:
                    3f:f6:52:75:1c:88:ad:38:c4:6e:f9:eb:b5:d7:8a:
                    4d:7f:af:dc:9e:e1:56:32:1e:ff:86:93:c6:ce:4f:
                    60:2a:a5:f0:a3:78:b2:b8:f7:c3:6f:46:4d:2c:18:
                    27:43:a2:c0:87:f6:d4:3e:dd:7d:e0:38:0d:74:54:
                    c6:ac:27:64:cd:da:a8:e3:ec:f8:43:85:33:7d:95:
                    cc:a6:54:14:41:23:e9:df:92:3a:bf:6d:48:30:f1:
                    f1:99:2e:2d:02:4b:f6:7c:16:ad:7f:b5:e9:10:a5:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DD:07:56:F2:A5:B0:0E:8A:A4:70:34:F2:43:B9:06:E3:D9:D2:58
            X509v3 Authority Key Identifier:
                keyid:0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d3438203d3e20323634343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ee8::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:1e:cb:b3:0f:a3:53:d7:6b:77:61:85:b0:a7:a4:d5:ae:46:
         78:d3:4a:33:88:62:b2:b4:bf:3a:15:85:53:8d:19:74:78:da:
         d2:1f:34:d5:11:3b:a8:be:d2:af:65:4f:a0:8a:d8:4e:7b:2d:
         91:3d:8c:26:fa:1d:f6:7f:b4:7c:0d:70:6c:56:1b:2c:be:ff:
         53:fe:88:39:b8:22:10:2a:db:51:69:86:9c:d1:ba:b4:61:de:
         f9:99:ae:56:ae:75:d4:ac:15:9b:19:40:ec:79:58:cf:0b:fb:
         ea:eb:ba:54:bf:f7:8e:b0:55:45:b6:24:89:be:67:d4:1a:3d:
         76:5b:ef:39:52:0c:ea:b1:03:64:c8:97:fd:93:6e:b3:48:da:
         69:20:d2:17:6b:50:ee:86:3b:f7:98:7b:21:2c:36:af:6b:5d:
         9e:14:63:e6:56:b3:5e:ae:d4:c6:d2:26:1a:5d:24:26:03:d7:
         53:52:f6:19:53:b4:8a:26:4d:58:be:02:aa:53:16:dc:e7:b3:
         3b:4f:23:d6:6c:0a:93:d1:fd:be:8c:fd:16:88:8f:5e:4b:bc:
         cc:24:43:f0:cf:ff:cb:4c:8c:64:d5:b7:60:28:2a:dd:2b:2b:
         f0:55:0d:e9:67:29:eb:b7:34:94:34:31:eb:38:ec:4d:f3:13:
         77:1f:fa:c7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL4YUiS4sR3qaJFok04dMJUem6W8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM2NURFQjY3QjMwNzA1QTMxM0VGOEZBRDdBMEQ2RTJC
RTIyRDE4NDAeFw0yNDA2MDUxOTE0NDdaFw0yNTA2MDQxOTE5NDdaMDMxMTAvBgNV
BAMTKEZEREQwNzU2RjJBNUIwMEU4QUE0NzAzNEYyNDNCOTA2RTNEOUQyNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYOqOISE5vLbPkLWaOJ2xKuQD
UI58td4dkhGRSlkbVsxPv0n23Fqu/1r6gGBaPyjCuvM0NmvJx4Pz4BkLG0N02Mt1
gl7UGj3KNEL+yv2DUXmTqspQTftpEBwtnoHiheEf891BZNzNoP24WrgKvhQnspnj
44CQSi05OK9U9f8GYaRdtEx7Ij0AfHHFrwSQBatSn5szJz/2UnUciK04xG7567XX
ik1/r9ye4VYyHv+Gk8bOT2AqpfCjeLK498NvRk0sGCdDosCH9tQ+3X3gOA10VMas
J2TN2qjj7PhDhTN9lcymVBRBI+nfkjq/bUgw8fGZLi0CS/Z8Fq1/tekQpXR9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/d0HVvKlsA6KpHA08kO5BuPZ0lgwHwYDVR0j
BBgwFoAUDGXetnswcFoxPvj616DW4r4i0YQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtOM00xdWVRNXdaN212TnR4VU1EcEpKa2Zka1daYUxTYXZRS1dGRGM5
Q1ovMC8wQzY1REVCNjdCMzA3MDVBMzEzRUY4RkFEN0EwRDZFMkJFMjJEMTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDNjVERUI2N0IzMDcwNUEz
MTNFRjhGQUQ3QTBENkUyQkUyMkQxODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrTjNNMXVlUTV3Wjdtdk50eFVNRHBKSmtmZGtXWmFMU2F2UUtXRkRjOUNaLzAv
MzIzODMwMzQzYTMxNjU2NTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQe6DANBgkqhkiG9w0BAQsFAAOCAQEABx7Lsw+j
U9drd2GFsKek1a5GeNNKM4hisrS/OhWFU40ZdHja0h801RE7qL7Sr2VPoIrYTnst
kT2MJvod9n+0fA1wbFYbLL7/U/6IObgiECrbUWmGnNG6tGHe+ZmuVq511KwVmxlA
7HlYzwv76uu6VL/3jrBVRbYkib5n1Bo9dlvvOVIM6rEDZMiX/ZNus0jaaSDSF2tQ
7oY795h7ISw2r2tdnhRj5lazXq7UxtImGl0kJgPXU1L2GVO0iiZNWL4CqlMW3Oez
O08j1mwKk9H9voz9FoiPXku8zCRD8M//y0yMZNW3YCgq3Ssr8FUN6Wcp67c0lDQx
6zjsTfMTdx/6xw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:30:59 2024 by rpki-client on console-ams.rpki-client.org