Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/323830343a316432633a3a2f33322d3332203d3e20323634333532.roa
File:                     323830343a316432633a3a2f33322d3332203d3e20323634333532.roa (raw, json)
Hash identifier:          AxeJ2mHN6zv+qr1VGR9MNymbIoqDJ+Dn7JEZnTRHwmY=
Subject key identifier:   20:60:AC:A3:69:03:94:19:09:6C:F9:FD:72:61:B9:50:D0:2A:FA:E9
Certificate issuer:       /CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0
Certificate serial:       7A5605F0D9DAAC16491924BCA5D6C2CB79AB9CD6
Authority key identifier: A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/323830343a316432633a3a2f33322d3332203d3e20323634333532.roa
Signing time:             Mon 08 Apr 2024 20:14:47 +0000
ROA not before:           Mon 08 Apr 2024 20:09:47 +0000
ROA not after:            Mon 07 Apr 2025 20:14:47 +0000
asID:                     264352
IP address blocks:        2804:1d2c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.crl
                          rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:56:05:f0:d9:da:ac:16:49:19:24:bc:a5:d6:c2:cb:79:ab:9c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0
        Validity
            Not Before: Apr  8 20:09:47 2024 GMT
            Not After : Apr  7 20:14:47 2025 GMT
        Subject: CN=2060ACA369039419096CF9FD7261B950D02AFAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:4e:53:15:19:f1:5b:03:b1:28:1e:2e:30:
                    48:5f:62:8d:aa:70:ea:0d:61:92:89:6d:c2:fd:cb:
                    9b:7b:82:61:21:6c:60:ee:68:ff:f4:9c:f6:56:6e:
                    82:14:a0:b5:7d:fe:fb:1e:86:c0:b4:30:54:37:01:
                    8f:be:a1:b7:e3:78:6b:96:29:e8:80:81:56:fe:5c:
                    67:d7:14:c7:57:6d:9c:cf:42:73:de:c4:53:93:3d:
                    8c:7b:90:0f:a7:0e:ab:c1:16:4b:cf:3a:51:a3:8a:
                    9c:3f:21:55:e9:97:28:ae:8d:03:f3:61:1d:49:bd:
                    0d:21:91:c1:1c:84:89:ed:51:4a:62:b4:18:71:d9:
                    b6:52:e7:b1:fb:74:0f:67:5d:ea:6a:4a:65:a9:8b:
                    db:c0:42:f9:43:94:ca:17:d4:83:77:20:0a:d1:1c:
                    f4:31:bf:cb:fd:04:d8:20:a1:7a:9f:09:36:74:1f:
                    37:bf:3b:84:49:a1:82:a2:c9:f1:62:17:a1:ad:fc:
                    84:6b:cc:e9:de:c2:3c:a8:8f:e1:fd:fe:14:ea:c0:
                    c4:35:8d:f3:ad:30:41:3b:65:97:a6:a3:4a:c3:15:
                    e5:a7:67:13:42:e2:5e:fa:51:b7:16:94:af:dc:f8:
                    96:65:63:18:ff:01:81:d7:bf:b6:f3:14:ef:72:38:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:60:AC:A3:69:03:94:19:09:6C:F9:FD:72:61:B9:50:D0:2A:FA:E9
            X509v3 Authority Key Identifier:
                keyid:A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/323830343a316432633a3a2f33322d3332203d3e20323634333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:c0:b7:a7:09:ca:b8:31:81:dc:e9:45:b2:9f:1f:a5:a7:
         d5:6f:13:1a:79:0a:ac:08:1d:79:ea:4f:87:c4:8d:e3:7a:1d:
         76:32:c4:71:eb:e1:26:46:3b:1c:4b:87:74:d0:79:cc:42:05:
         d1:d2:26:d2:35:eb:77:80:25:5e:e0:0f:84:66:16:d5:65:82:
         90:58:50:ec:e2:77:08:9a:b5:a9:a7:37:e4:8e:94:25:4c:6d:
         e6:30:e5:47:1c:ad:3e:0b:06:be:61:fa:0c:20:93:0d:47:cf:
         5d:a7:75:1d:eb:73:ac:63:26:b1:2f:07:4c:52:72:49:0f:eb:
         44:61:03:8a:36:b4:d0:47:ae:39:8a:b0:a3:62:de:1c:22:ec:
         4a:2b:40:da:ae:9f:42:f1:24:b8:64:77:f2:61:71:a9:23:2d:
         a1:2b:85:d7:a7:91:62:5e:a6:fb:4d:e1:7b:5e:b9:47:08:66:
         c5:2e:3a:47:f5:e1:85:9b:4d:eb:6e:9d:31:93:ed:e7:56:a1:
         09:3d:4b:8f:58:56:81:e0:02:61:aa:f4:c5:b2:f9:0f:1c:93:
         3f:0d:c7:b6:42:b2:ee:bc:48:f4:e5:99:36:45:f0:28:7e:01:
         6c:28:50:3f:2b:b8:e4:a0:66:71:bf:d1:6f:8b:2e:1e:06:a9:
         5c:bc:04:be
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUelYF8NnarBZJGSS8pdbCy3mrnNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFOEE2QTFGNTc3MTBCNzBDMjUxNUYyMTU5NTY1NURB
RkM0QkNFMDAeFw0yNDA0MDgyMDA5NDdaFw0yNTA0MDcyMDE0NDdaMDMxMTAvBgNV
BAMTKDIwNjBBQ0EzNjkwMzk0MTkwOTZDRjlGRDcyNjFCOTUwRDAyQUZBRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqU5TFRnxWwOxKB4uMEhfYo2q
cOoNYZKJbcL9y5t7gmEhbGDuaP/0nPZWboIUoLV9/vsehsC0MFQ3AY++obfjeGuW
KeiAgVb+XGfXFMdXbZzPQnPexFOTPYx7kA+nDqvBFkvPOlGjipw/IVXplyiujQPz
YR1JvQ0hkcEchIntUUpitBhx2bZS57H7dA9nXepqSmWpi9vAQvlDlMoX1IN3IArR
HPQxv8v9BNggoXqfCTZ0Hze/O4RJoYKiyfFiF6Gt/IRrzOnewjyoj+H9/hTqwMQ1
jfOtMEE7ZZemo0rDFeWnZxNC4l76UbcWlK/c+JZlYxj/AYHXv7bzFO9yOOwnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIGCso2kDlBkJbPn9cmG5UNAq+ukwHwYDVR0j
BBgwFoAUouimofV3ELcMJRXyFZVlXa/EvOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1OV3hSOFMxbnFUOWRreGoxN1Q0UzFEZ2oxRkozejMyNFduZjdQaFJ6
V2QvMC9BMkU4QTZBMUY1NzcxMEI3MEMyNTE1RjIxNTk1NjU1REFGQzRCQ0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyRThBNkExRjU3NzEwQjcw
QzI1MTVGMjE1OTU2NTVEQUZDNEJDRTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNTld4UjhTMW5xVDlka3hqMTdUNFMxRGdqMUZKM3ozMjRXbmY3UGhSeldkLzAv
MzIzODMwMzQzYTMxNjQzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQdLDANBgkqhkiG9w0BAQsFAAOCAQEAH7zAt6cJ
yrgxgdzpRbKfH6Wn1W8TGnkKrAgdeepPh8SN43oddjLEcevhJkY7HEuHdNB5zEIF
0dIm0jXrd4AlXuAPhGYW1WWCkFhQ7OJ3CJq1qac35I6UJUxt5jDlRxytPgsGvmH6
DCCTDUfPXad1HetzrGMmsS8HTFJySQ/rRGEDija00EeuOYqwo2LeHCLsSitA2q6f
QvEkuGR38mFxqSMtoSuF16eRYl6m+03he165RwhmxS46R/XhhZtN626dMZPt51ah
CT1Lj1hWgeACYar0xbL5DxyTPw3HtkKy7rxI9OWZNkXwKH4BbChQPyu45KBmcb/R
b4suHgapXLwEvg==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:39 2024 by rpki-client on console-ams.rpki-client.org