Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          YNNVri2yBcmhan0MO3HthdxHBmGwvB55LfzG/T2LjNw=
Subject key identifier:   00:1C:AE:4C:62:4E:D2:A2:B1:CD:64:52:EB:83:F1:53:13:52:91:CF
Certificate issuer:       /CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
Certificate serial:       3B1D5FF8E879B9A9FF738266B7173250B7FE0519
Authority key identifier: 41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Mon 06 May 2024 18:30:24 +0000
ROA not before:           Mon 06 May 2024 18:25:24 +0000
ROA not after:            Mon 05 May 2025 18:30:24 +0000
asID:                     269664
IP address blocks:        2804:6800:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1d:5f:f8:e8:79:b9:a9:ff:73:82:66:b7:17:32:50:b7:fe:05:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
        Validity
            Not Before: May  6 18:25:24 2024 GMT
            Not After : May  5 18:30:24 2025 GMT
        Subject: CN=001CAE4C624ED2A2B1CD6452EB83F153135291CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:1e:6b:38:4a:1e:13:91:61:e0:ed:18:d8:
                    d2:0d:9b:e6:d8:9e:e3:9c:a2:af:6c:23:37:8d:3e:
                    54:bd:3c:86:bb:f9:42:e6:f8:da:a1:1f:cc:10:fe:
                    7a:68:7d:31:45:19:31:3f:3b:16:b5:83:d7:ac:fc:
                    c6:4e:1b:c6:9a:a3:bf:71:2d:cf:0d:4b:7f:e4:f7:
                    70:c4:54:63:bd:df:30:e6:86:c7:2f:e7:f3:f2:c5:
                    63:47:d9:24:b6:b5:ca:ab:71:59:8b:c0:e1:c8:67:
                    c4:4c:18:65:1f:5c:1a:b9:6d:44:0d:e2:1a:47:88:
                    e0:75:80:b5:f5:ca:cd:67:bf:c8:9f:59:fb:1d:ad:
                    a5:8d:4a:e0:b3:f3:d1:da:cf:cc:e3:51:61:2b:62:
                    e3:c0:d3:e0:48:f1:1c:33:3b:64:cb:2b:ab:a4:75:
                    0c:4a:c4:cb:d2:64:6c:45:25:b0:29:39:cd:e5:12:
                    8f:14:4d:27:bc:21:61:1f:9c:d8:32:ce:b4:fd:fa:
                    04:5b:62:86:92:37:df:23:50:3b:a5:61:32:59:a9:
                    36:50:da:12:1d:c5:c3:e3:ae:0e:dd:cf:fd:13:8f:
                    e5:f2:ca:21:51:1e:a7:67:e1:b5:44:ac:74:fb:32:
                    bb:d6:f1:8e:32:ff:2b:87:c5:40:e0:89:15:2c:de:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1C:AE:4C:62:4E:D2:A2:B1:CD:64:52:EB:83:F1:53:13:52:91:CF
            X509v3 Authority Key Identifier:
                keyid:41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a343030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:a1:ad:76:c0:b8:a5:9d:52:e6:52:fb:dd:22:e4:dd:33:
         f7:ab:62:e3:ba:4f:4c:ee:58:70:5f:2e:6f:00:74:b8:25:24:
         79:12:d5:21:62:a7:51:04:74:ca:7c:dc:2d:9d:82:73:ec:2e:
         a6:a6:27:29:01:c5:6d:3b:05:cf:d8:bb:1d:0e:a0:b1:ed:30:
         09:17:8b:29:82:a0:51:97:90:b3:b9:9b:60:0e:2e:a9:c6:ea:
         df:36:7d:94:de:40:43:d5:eb:5f:71:f7:b7:1c:0b:6c:f1:df:
         00:06:88:88:b7:7c:8a:99:a0:2a:4a:87:f8:26:3a:b0:f6:7d:
         28:c1:7c:e3:d0:2f:a2:93:e8:8f:8d:66:62:d9:6a:59:ea:d9:
         3c:3d:3f:66:af:5d:64:0a:cc:4f:6c:0e:75:be:c0:fe:92:7d:
         eb:90:eb:f3:c6:b8:58:a9:26:a6:ef:13:18:b1:4f:32:fa:49:
         a8:b2:d4:d8:e0:24:19:13:3f:24:25:62:d0:42:8e:84:eb:41:
         27:f7:7f:c8:06:d2:06:61:b2:d6:e7:cb:94:35:7a:a1:75:8a:
         9a:e1:09:99:54:90:e3:bc:42:38:3f:86:e0:69:76:b5:f1:3a:
         04:5b:e2:4e:7a:ad:a6:4f:8c:72:74:f0:68:95:2a:72:81:8e:
         57:79:39:9f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOx1f+Oh5uan/c4JmtxcyULf+BRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzRTNENEYwMTEwREZCQTkyM0Q2RjUzNTc5QkU4RTgx
QUJEQ0MwNTAeFw0yNDA1MDYxODI1MjRaFw0yNTA1MDUxODMwMjRaMDMxMTAvBgNV
BAMTKDAwMUNBRTRDNjI0RUQyQTJCMUNENjQ1MkVCODNGMTUzMTM1MjkxQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwB5rOEoeE5Fh4O0Y2NINm+bY
nuOcoq9sIzeNPlS9PIa7+ULm+NqhH8wQ/npofTFFGTE/Oxa1g9es/MZOG8aao79x
Lc8NS3/k93DEVGO93zDmhscv5/PyxWNH2SS2tcqrcVmLwOHIZ8RMGGUfXBq5bUQN
4hpHiOB1gLX1ys1nv8ifWfsdraWNSuCz89Haz8zjUWErYuPA0+BI8RwzO2TLK6uk
dQxKxMvSZGxFJbApOc3lEo8UTSe8IWEfnNgyzrT9+gRbYoaSN98jUDulYTJZqTZQ
2hIdxcPjrg7dz/0Tj+XyyiFRHqdn4bVErHT7MrvW8Y4y/yuHxUDgiRUs3sCvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUAByuTGJO0qKxzWRS64PxUxNSkc8wHwYDVR0j
BBgwFoAUQT49TwEQ37qSPW9TV5vo6Bq9zAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1
NzQvMS80MTNFM0Q0RjAxMTBERkJBOTIzRDZGNTM1NzlCRThFODFBQkRDQzA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxM0UzRDRGMDExMERGQkE5
MjNENkY1MzU3OUJFOEU4MUFCRENDMDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3TFpVSzd3YVRaakNqU25aYnZ3akpHUDF5TGs4aWZXb2kzMUhKcWoxdTc0LzEv
MzIzODMwMzQzYTM2MzgzMDMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM2MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEaABAMA0GCSqGSIb3DQEBCwUA
A4IBAQAoPqGtdsC4pZ1S5lL73SLk3TP3q2Ljuk9M7lhwXy5vAHS4JSR5EtUhYqdR
BHTKfNwtnYJz7C6mpicpAcVtOwXP2LsdDqCx7TAJF4spgqBRl5CzuZtgDi6pxurf
Nn2U3kBD1etfcfe3HAts8d8ABoiIt3yKmaAqSof4Jjqw9n0owXzj0C+ik+iPjWZi
2WpZ6tk8PT9mr11kCsxPbA51vsD+kn3rkOvzxrhYqSam7xMYsU8y+kmostTY4CQZ
Ez8kJWLQQo6E60En93/IBtIGYbLW58uUNXqhdYqa4QmZVJDjvEI4P4bgaXa18ToE
W+JOeq2mT4xydPBolSpygY5XeTmf
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org