Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/323830343a316235633a3a2f33322d3438203d3e203238333334.roa
File:                     323830343a316235633a3a2f33322d3438203d3e203238333334.roa (raw, json)
Hash identifier:          97O924tCKj9Yt3wh/bhXi40jcMm8zxshQMmvXakKB8k=
Subject key identifier:   81:DD:47:8F:D6:8E:BE:28:A8:EF:E3:8D:DE:35:3B:E3:66:F8:0F:04
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       60574A84586DC278A7B2A43A50A6B25D7FB15822
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/323830343a316235633a3a2f33322d3438203d3e203238333334.roa
Signing time:             Wed 03 Apr 2024 18:30:03 +0000
ROA not before:           Wed 03 Apr 2024 18:25:03 +0000
ROA not after:            Wed 02 Apr 2025 18:30:03 +0000
asID:                     28334
IP address blocks:        2804:1b5c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:57:4a:84:58:6d:c2:78:a7:b2:a4:3a:50:a6:b2:5d:7f:b1:58:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Apr  3 18:25:03 2024 GMT
            Not After : Apr  2 18:30:03 2025 GMT
        Subject: CN=81DD478FD68EBE28A8EFE38DDE353BE366F80F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:dd:ca:65:cc:2a:52:03:3d:0b:79:00:94:
                    b4:9b:df:20:05:bf:b0:0c:52:c2:bb:a9:e7:ad:19:
                    d0:71:38:cb:d7:41:9e:f1:ca:e3:54:d2:f4:81:68:
                    66:57:f0:8f:9c:60:ba:c3:55:56:b4:7f:70:9d:d7:
                    7d:07:3a:1c:74:43:db:88:ec:ef:3d:1d:3e:8f:2c:
                    59:84:41:39:56:77:aa:39:b0:b8:9a:45:ca:6c:66:
                    6a:60:09:cb:fb:65:c5:6d:7d:ee:83:62:b0:9a:2a:
                    4f:1f:37:a8:b4:9b:af:bf:e7:29:0e:4c:34:6d:25:
                    eb:32:45:89:c0:ee:91:bf:55:e5:c5:f7:51:f0:e0:
                    2f:db:9d:34:8c:5a:fa:7a:82:76:80:78:6d:e0:28:
                    56:1b:38:a3:60:b6:d7:4c:12:d3:65:8f:36:b2:9e:
                    62:ae:83:63:76:9f:78:3e:a7:dd:b7:4f:11:f0:d6:
                    14:e2:75:29:d3:58:16:72:b7:b4:f4:18:8d:3b:a3:
                    d1:66:83:64:02:4c:86:08:46:a0:74:a0:a7:6c:56:
                    7b:12:ee:e7:3b:2f:57:10:94:39:dd:30:c3:82:c1:
                    72:9a:4e:25:44:ef:34:b3:5f:42:be:88:44:87:71:
                    28:d3:f2:e7:e8:55:ea:fe:11:46:81:df:9c:42:6e:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:47:8F:D6:8E:BE:28:A8:EF:E3:8D:DE:35:3B:E3:66:F8:0F:04
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/323830343a316235633a3a2f33322d3438203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:a6:e7:91:18:f0:c6:93:43:dd:6d:3b:3b:32:22:14:bc:0a:
         0a:64:8a:5c:b7:3c:c4:b9:f7:a4:56:fc:78:0c:81:28:94:b3:
         b0:a9:c9:58:06:24:b5:72:7c:0f:31:67:8b:59:8f:87:19:58:
         5a:ec:d6:7f:e4:71:22:b1:f4:96:02:fc:33:24:44:40:19:52:
         90:05:0b:da:09:e6:a2:91:bb:91:6a:9b:df:44:29:1a:a9:bf:
         14:e8:3e:09:10:a7:cd:f1:89:84:90:5d:6d:ad:ab:ba:09:03:
         60:7d:13:31:e5:4e:98:b0:91:47:5d:66:14:27:36:2e:6d:bb:
         45:40:e4:db:e9:e9:03:29:d7:f0:ab:72:70:b1:05:9d:f7:f5:
         04:de:2e:2c:cf:55:f3:62:82:7e:2b:fa:93:3f:64:7f:3c:5b:
         9f:26:4f:b6:5f:5d:02:d4:87:36:98:63:26:89:5f:ce:39:bc:
         db:54:a5:f6:f3:c1:f2:0c:f8:e7:d1:58:46:61:14:b8:79:95:
         18:24:db:ac:00:11:99:15:d6:62:5f:3a:2b:7b:d7:b1:ea:00:
         da:1a:80:45:13:db:a0:f5:f0:ac:97:b7:0f:50:07:a1:d5:8b:
         84:91:f5:57:8f:58:e2:e3:75:5b:69:c1:5b:c9:a6:6e:d9:24:
         4a:16:27:66
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUYFdKhFhtwninsqQ6UKayXX+xWCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0NDUxRUZGOUQxQTc0RjJCQTZDMzdDRTYwOUU3MTYy
Q0M0NzZFMTAeFw0yNDA0MDMxODI1MDNaFw0yNTA0MDIxODMwMDNaMDMxMTAvBgNV
BAMTKDgxREQ0NzhGRDY4RUJFMjhBOEVGRTM4RERFMzUzQkUzNjZGODBGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgN3KZcwqUgM9C3kAlLSb3yAF
v7AMUsK7qeetGdBxOMvXQZ7xyuNU0vSBaGZX8I+cYLrDVVa0f3Cd130HOhx0Q9uI
7O89HT6PLFmEQTlWd6o5sLiaRcpsZmpgCcv7ZcVtfe6DYrCaKk8fN6i0m6+/5ykO
TDRtJesyRYnA7pG/VeXF91Hw4C/bnTSMWvp6gnaAeG3gKFYbOKNgttdMEtNljzay
nmKug2N2n3g+p923TxHw1hTidSnTWBZyt7T0GI07o9Fmg2QCTIYIRqB0oKdsVnsS
7uc7L1cQlDndMMOCwXKaTiVE7zSzX0K+iESHcSjT8ufoVer+EUaB35xCbikhAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUgd1Hj9aOviio7+ON3jU742b4DwQwHwYDVR0j
BBgwFoAU+0RR7/nRp08rpsN85gnnFizEduEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMS9GQjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDQ1MUVGRjlEMUE3NEYy
QkE2QzM3Q0U2MDlFNzE2MkNDNDc2RTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLb2IzWlhvbTJVVjJRQ1RKRkNVYXZMUE5HSnFIbmhCZW9Fb0E5NWo1aFI1LzEv
MzIzODMwMzQzYTMxNjIzNTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMz
MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEG1wwDQYJKoZIhvcNAQELBQADggEBAFum55EY8MaT
Q91tOzsyIhS8Cgpkily3PMS596RW/HgMgSiUs7CpyVgGJLVyfA8xZ4tZj4cZWFrs
1n/kcSKx9JYC/DMkREAZUpAFC9oJ5qKRu5Fqm99EKRqpvxToPgkQp83xiYSQXW2t
q7oJA2B9EzHlTpiwkUddZhQnNi5tu0VA5Nvp6QMp1/CrcnCxBZ339QTeLizPVfNi
gn4r+pM/ZH88W58mT7ZfXQLUhzaYYyaJX845vNtUpfbzwfIM+OfRWEZhFLh5lRgk
26wAEZkV1mJfOit717HqANoagEUT26D18KyXtw9QB6HVi4SR9VePWOLjdVtpwVvJ
pm7ZJEoWJ2Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org