Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa
File:                     323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa (raw, json)
Hash identifier:          PuIblyB1+ZAty3gOa2qw7Hx014hAP2iuzgZMeR+o950=
Subject key identifier:   FC:A5:5D:DE:55:AE:5C:07:A7:BD:62:42:40:D7:F2:8F:E2:35:52:7A
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       5E0373C4B9F18FEF5A36A914382AF4ABD3C5E15C
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:49 +0000
ROA not before:           Thu 04 Apr 2024 04:32:49 +0000
ROA not after:            Thu 03 Apr 2025 04:37:49 +0000
asID:                     28210
IP address blocks:        2804:56c:2100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:03:73:c4:b9:f1:8f:ef:5a:36:a9:14:38:2a:f4:ab:d3:c5:e1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:49 2024 GMT
            Not After : Apr  3 04:37:49 2025 GMT
        Subject: CN=FCA55DDE55AE5C07A7BD624240D7F28FE235527A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:11:9c:f8:d1:f7:d2:9b:e8:74:6f:14:64:
                    10:00:1b:62:38:39:a1:c6:14:58:da:44:ed:0d:a9:
                    61:69:a8:28:77:2d:e6:78:05:12:a8:ae:04:ee:fb:
                    26:6c:3f:d3:24:4e:5c:bd:89:90:0e:43:a9:d7:38:
                    35:29:ce:91:04:f7:8c:cf:e4:6d:9f:de:66:cf:0d:
                    c0:92:84:4d:f0:59:3d:c5:c2:ae:86:02:00:f2:66:
                    21:02:55:f1:28:a4:94:22:37:08:ca:49:ea:98:32:
                    86:7a:a5:8c:34:10:cc:11:92:b5:55:15:24:b5:32:
                    04:33:6a:36:8d:9d:b0:c7:61:a0:b7:ee:93:0a:ef:
                    e3:0c:51:fe:f9:45:43:e9:93:07:53:e2:4c:7b:a5:
                    5a:a9:bb:34:f6:76:45:47:9e:28:e3:d4:e1:aa:0e:
                    5f:e4:52:44:68:c9:5f:f2:3f:80:fb:9f:08:96:78:
                    4f:b6:35:09:9b:70:17:67:d8:b7:40:f8:1d:9d:46:
                    f6:be:20:ec:1f:39:86:5b:7d:51:b8:26:49:be:9e:
                    36:fb:55:32:08:5d:91:7c:a5:c8:bd:4a:65:e5:08:
                    10:55:41:f7:d9:3e:0c:58:d2:c4:c7:85:48:9e:56:
                    5b:fa:5f:21:c8:d0:f1:8e:36:94:11:f0:21:ce:03:
                    68:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A5:5D:DE:55:AE:5C:07:A7:BD:62:42:40:D7:F2:8F:E2:35:52:7A
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:b6:d0:ab:7d:6b:40:e0:d9:27:b0:19:0d:12:a8:54:b0:a2:
         b0:07:54:da:8d:f0:fc:36:b8:82:3f:bc:39:bf:42:2a:58:67:
         e8:16:9d:66:2e:08:38:ee:13:df:81:e7:bf:88:9a:45:56:9a:
         2c:7b:fc:05:57:51:88:78:26:5c:43:ac:ea:31:41:0f:30:6e:
         b5:9c:18:6f:36:2a:a5:1f:b0:e2:50:da:0e:d8:6a:d8:58:00:
         02:62:15:90:6b:f8:8b:be:64:2b:30:18:c9:0a:5e:2a:57:91:
         f0:9a:f3:81:f4:ee:d5:a1:69:f9:14:b8:07:a7:ee:2e:89:ad:
         ed:e7:a8:4e:6b:31:60:fd:c3:0b:1c:81:30:9e:e4:8d:7b:94:
         1f:66:28:9c:b8:74:43:cd:73:cd:1f:fc:22:2f:91:8f:cc:e7:
         72:21:ec:d5:96:75:9e:f2:58:5f:51:18:51:50:47:ff:d7:27:
         26:25:64:fa:d8:76:f6:5c:59:58:1d:be:23:9a:9a:13:4d:da:
         03:6b:8f:70:51:cc:15:d1:2f:89:b2:a2:db:29:c0:3b:f1:3e:
         1d:4f:e8:68:86:e7:04:3e:d6:55:51:7b:38:ac:69:6f:5e:90:
         aa:15:93:6b:08:4e:62:01:b2:ef:5c:79:fd:5c:51:ff:27:5e:
         4b:6e:0f:cd
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUXgNzxLnxj+9aNqkUOCr0q9PF4VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNDA0MDQwNDMyNDlaFw0yNTA0MDMwNDM3NDlaMDMxMTAvBgNV
BAMTKEZDQTU1RERFNTVBRTVDMDdBN0JENjI0MjQwRDdGMjhGRTIzNTUyN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmCBGc+NH30pvodG8UZBAAG2I4
OaHGFFjaRO0NqWFpqCh3LeZ4BRKorgTu+yZsP9MkTly9iZAOQ6nXODUpzpEE94zP
5G2f3mbPDcCShE3wWT3Fwq6GAgDyZiECVfEopJQiNwjKSeqYMoZ6pYw0EMwRkrVV
FSS1MgQzajaNnbDHYaC37pMK7+MMUf75RUPpkwdT4kx7pVqpuzT2dkVHnijj1OGq
Dl/kUkRoyV/yP4D7nwiWeE+2NQmbcBdn2LdA+B2dRva+IOwfOYZbfVG4Jkm+njb7
VTIIXZF8pci9SmXlCBBVQffZPgxY0sTHhUieVlv6XyHI0PGONpQR8CHOA2gZAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU/KVd3lWuXAenvWJCQNfyj+I1UnowHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzIzODMwMzQzYTM1MzY2MzNhMzIzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM4MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQFbCEwDQYJKoZIhvcNAQELBQADggEB
AMm20Kt9a0Dg2SewGQ0SqFSworAHVNqN8Pw2uII/vDm/QipYZ+gWnWYuCDjuE9+B
57+ImkVWmix7/AVXUYh4JlxDrOoxQQ8wbrWcGG82KqUfsOJQ2g7YathYAAJiFZBr
+Iu+ZCswGMkKXipXkfCa84H07tWhafkUuAen7i6Jre3nqE5rMWD9wwscgTCe5I17
lB9mKJy4dEPNc80f/CIvkY/M53Ih7NWWdZ7yWF9RGFFQR//XJyYlZPrYdvZcWVgd
viOamhNN2gNrj3BRzBXRL4myotspwDvxPh1P6GiG5wQ+1lVRezisaW9ekKoVk2sI
TmIBsu9cef1cUf8nXktuD80=
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:53 2024 by rpki-client on console-ams.rpki-client.org