Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/323830343a353139633a3a2f33322d313238203d3e20323638343635.roa
File:                     323830343a353139633a3a2f33322d313238203d3e20323638343635.roa (raw, json)
Hash identifier:          Sp7WV4/OtBqKHWqyFgEov71Hfi77cR2wO4sWUsvS1cM=
Subject key identifier:   3E:1D:74:FB:4C:CD:78:11:A4:64:9A:61:53:29:E3:DB:F0:38:0F:E1
Certificate issuer:       /CN=0480C093E98E907CBEAC592394DE5FB72A439B24
Certificate serial:       30EC16E3AB3023CFA78777FB820F4604F22B71B1
Authority key identifier: 04:80:C0:93:E9:8E:90:7C:BE:AC:59:23:94:DE:5F:B7:2A:43:9B:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/323830343a353139633a3a2f33322d313238203d3e20323638343635.roa
Signing time:             Thu 04 Apr 2024 11:52:50 +0000
ROA not before:           Thu 04 Apr 2024 11:47:50 +0000
ROA not after:            Thu 03 Apr 2025 11:52:50 +0000
asID:                     268465
IP address blocks:        2804:519c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/0480C093E98E907CBEAC592394DE5FB72A439B24.crl
                          rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/0480C093E98E907CBEAC592394DE5FB72A439B24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:16:e3:ab:30:23:cf:a7:87:77:fb:82:0f:46:04:f2:2b:71:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0480C093E98E907CBEAC592394DE5FB72A439B24
        Validity
            Not Before: Apr  4 11:47:50 2024 GMT
            Not After : Apr  3 11:52:50 2025 GMT
        Subject: CN=3E1D74FB4CCD7811A4649A615329E3DBF0380FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:7d:b7:23:01:0a:47:da:b5:4b:4c:08:1e:
                    86:c8:f1:2f:9e:37:d1:65:52:90:15:31:1a:d0:83:
                    e2:6c:0a:f6:db:88:f5:26:63:be:8e:4c:3d:29:e1:
                    e3:93:bf:a5:e4:51:43:5f:b2:b6:44:7c:20:6f:1f:
                    37:99:76:f8:eb:a7:ff:77:03:37:f3:37:be:0f:56:
                    e6:55:5e:84:0c:84:01:28:9d:33:ff:28:1d:59:f1:
                    ff:12:0d:2c:ee:9f:e3:94:2e:4b:a0:0a:e3:f7:4d:
                    5e:3e:ff:cf:1d:62:65:bb:83:09:b6:8a:4d:1b:b0:
                    45:f4:16:57:79:64:51:4c:a4:c2:e8:fa:d8:95:47:
                    48:b5:17:48:b5:3c:47:e7:df:76:72:5d:aa:a2:7d:
                    3c:04:f0:7d:64:54:0f:36:f8:bd:ad:94:16:a0:56:
                    a1:ae:e3:e3:57:f6:25:6e:48:ce:29:2f:6b:66:3e:
                    c1:95:dd:b6:18:26:8e:d9:7a:5b:47:ec:4e:95:3a:
                    4f:e6:06:48:78:4a:ca:c9:c1:07:91:11:3e:5d:f1:
                    92:23:5b:0c:3d:5b:88:7e:76:28:64:86:cd:58:8c:
                    0b:a3:26:f6:18:34:2d:1d:4f:28:dd:58:71:d3:ec:
                    53:25:bc:b9:6a:89:72:bf:e5:77:16:62:f5:db:be:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1D:74:FB:4C:CD:78:11:A4:64:9A:61:53:29:E3:DB:F0:38:0F:E1
            X509v3 Authority Key Identifier:
                keyid:04:80:C0:93:E9:8E:90:7C:BE:AC:59:23:94:DE:5F:B7:2A:43:9B:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/0480C093E98E907CBEAC592394DE5FB72A439B24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/323830343a353139633a3a2f33322d313238203d3e20323638343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:519c::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:02:13:8c:0d:32:94:c8:96:36:82:16:c7:8d:1b:2e:f7:
         e6:30:f0:8c:79:a0:c2:74:12:65:d3:d4:57:8f:0c:00:64:58:
         cf:08:8c:46:32:48:5b:b8:d8:d1:e3:4b:a1:c3:6e:ed:89:7a:
         59:b4:79:6b:90:67:08:e2:30:b0:17:09:f1:5e:86:e9:27:15:
         38:38:1f:23:7e:e6:cf:38:9b:f0:a4:27:b6:62:f0:ee:8c:3b:
         ff:65:de:4d:6d:42:7b:5f:75:dd:11:c9:35:d1:3e:4a:14:8c:
         3b:0f:98:37:26:b9:78:2a:6a:07:93:ed:59:6a:87:d2:5b:1d:
         0d:c3:8e:7e:07:b9:48:f9:cd:63:ce:b0:7a:80:b3:8a:10:6e:
         8a:51:70:89:9c:df:55:61:26:fc:f1:0c:22:7a:c7:2b:33:a0:
         b2:cd:fa:0e:62:3e:95:ba:e1:57:14:2a:04:76:07:a7:6a:15:
         38:82:11:86:c5:58:6b:4c:a1:11:c5:6b:42:30:0b:3c:53:89:
         ef:92:1f:7a:67:9e:3b:78:64:4b:4f:5d:73:d0:1d:a5:c5:3e:
         91:c2:24:16:c3:6e:52:af:d1:16:bd:62:ad:0b:0f:b9:a4:ad:
         3a:bd:ec:51:6a:53:18:f1:17:d2:a3:51:e4:35:63:8a:51:c1:
         6d:12:bc:78
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUMOwW46swI8+nh3f7gg9GBPIrcbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4MEMwOTNFOThFOTA3Q0JFQUM1OTIzOTRERTVGQjcy
QTQzOUIyNDAeFw0yNDA0MDQxMTQ3NTBaFw0yNTA0MDMxMTUyNTBaMDMxMTAvBgNV
BAMTKDNFMUQ3NEZCNENDRDc4MTFBNDY0OUE2MTUzMjlFM0RCRjAzODBGRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3n23IwEKR9q1S0wIHobI8S+e
N9FlUpAVMRrQg+JsCvbbiPUmY76OTD0p4eOTv6XkUUNfsrZEfCBvHzeZdvjrp/93
AzfzN74PVuZVXoQMhAEonTP/KB1Z8f8SDSzun+OULkugCuP3TV4+/88dYmW7gwm2
ik0bsEX0Fld5ZFFMpMLo+tiVR0i1F0i1PEfn33ZyXaqifTwE8H1kVA82+L2tlBag
VqGu4+NX9iVuSM4pL2tmPsGV3bYYJo7ZeltH7E6VOk/mBkh4SsrJwQeRET5d8ZIj
Www9W4h+dihkhs1YjAujJvYYNC0dTyjdWHHT7FMlvLlqiXK/5XcWYvXbvuYZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUPh10+0zNeBGkZJphUynj2/A4D+EwHwYDVR0j
BBgwFoAUBIDAk+mOkHy+rFkjlN5ftypDmyQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUhqTnVkUGZDdUJMd1VzNFlLUFJYMjVuN05xR1d6akZYZFpjd3doaVo4
ZXYvMS8wNDgwQzA5M0U5OEU5MDdDQkVBQzU5MjM5NERFNUZCNzJBNDM5QjI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODBDMDkzRTk4RTkwN0NC
RUFDNTkyMzk0REU1RkI3MkE0MzlCMjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlIak51ZFBmQ3VCTHdVczRZS1BSWDI1bjdOcUdXempGWGRaY3d3aGlaOGV2LzEv
MzIzODMwMzQzYTM1MzEzOTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFGcMA0GCSqGSIb3DQEBCwUAA4IBAQCC6gIT
jA0ylMiWNoIWx40bLvfmMPCMeaDCdBJl09RXjwwAZFjPCIxGMkhbuNjR40uhw27t
iXpZtHlrkGcI4jCwFwnxXobpJxU4OB8jfubPOJvwpCe2YvDujDv/Zd5NbUJ7X3Xd
Eck10T5KFIw7D5g3Jrl4KmoHk+1ZaofSWx0Nw45+B7lI+c1jzrB6gLOKEG6KUXCJ
nN9VYSb88QwiescrM6CyzfoOYj6VuuFXFCoEdgenahU4ghGGxVhrTKERxWtCMAs8
U4nvkh96Z547eGRLT11z0B2lxT6RwiQWw25Sr9EWvWKtCw+5pK06vexRalMY8RfS
o1HkNWOKUcFtErx4
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:00 2024 by rpki-client on console-fra.rpki-client.org