Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/323830343a326665303a3a2f33322d3438203d3e20323634393138.roa
File:                     323830343a326665303a3a2f33322d3438203d3e20323634393138.roa (raw, json)
Hash identifier:          71C7Ns93wj0HbNGwfkVZ1ke/w0tCyHABFNqJiIDFCPc=
Subject key identifier:   B4:B7:96:6B:17:FA:35:70:89:9A:BA:82:0D:B7:D3:BF:14:F0:47:BE
Certificate issuer:       /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Certificate serial:       463CBDCDBEEE86CAE78B77179DAEB715485AF7D3
Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/323830343a326665303a3a2f33322d3438203d3e20323634393138.roa
Signing time:             Thu 04 Apr 2024 02:50:23 +0000
ROA not before:           Thu 04 Apr 2024 02:45:23 +0000
ROA not after:            Thu 03 Apr 2025 02:50:23 +0000
asID:                     264918
IP address blocks:        2804:2fe0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl
                          rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3c:bd:cd:be:ee:86:ca:e7:8b:77:17:9d:ae:b7:15:48:5a:f7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
        Validity
            Not Before: Apr  4 02:45:23 2024 GMT
            Not After : Apr  3 02:50:23 2025 GMT
        Subject: CN=B4B7966B17FA3570899ABA820DB7D3BF14F047BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:a3:69:5b:64:c8:94:81:65:16:56:7c:75:
                    57:10:26:c9:6b:d5:c5:72:5a:0a:b4:9b:ce:18:86:
                    65:5e:da:01:34:c5:17:1c:c6:8f:77:f7:a5:64:e1:
                    e8:29:4f:c9:11:31:b4:4f:01:7d:27:29:2e:6c:b3:
                    1c:40:26:36:14:2d:29:b0:38:1d:a0:e4:1b:55:36:
                    0a:82:39:2a:e0:c6:8b:7b:41:a0:02:a4:06:62:4f:
                    cc:bd:9f:0d:c5:e8:3c:a0:9a:a4:da:75:7e:cb:51:
                    07:85:5f:0a:86:67:e5:f4:2e:ce:e5:a1:94:5a:75:
                    6c:6a:a5:99:ae:31:e3:98:9b:d1:50:64:6e:a1:23:
                    18:57:74:ed:0c:a0:87:c2:75:3d:9b:cb:21:7c:ff:
                    2c:0d:02:fc:65:ac:2c:d1:22:2f:b6:21:82:a3:02:
                    91:48:c2:d3:38:1e:2d:c3:e1:c3:f1:28:18:f0:08:
                    d3:a7:25:dd:4b:84:a3:f5:9b:e7:8b:4c:af:88:84:
                    47:16:80:ab:a4:57:9c:7b:72:60:fa:08:42:23:a1:
                    e8:6e:39:38:31:54:c3:f2:4f:b6:51:5e:2f:36:b5:
                    58:1a:ad:3c:ae:b3:6b:6d:a8:11:97:aa:65:98:ef:
                    b6:3c:df:16:1b:4f:45:2b:c9:6c:6d:11:08:15:87:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:96:6B:17:FA:35:70:89:9A:BA:82:0D:B7:D3:BF:14:F0:47:BE
            X509v3 Authority Key Identifier:
                keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/323830343a326665303a3a2f33322d3438203d3e20323634393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:c3:e4:5c:b3:ab:f0:64:50:82:2a:e9:1b:9c:a3:ab:64:
         38:3d:85:d1:fb:2f:e9:a1:45:c6:57:de:07:d7:4f:5a:f5:7e:
         6d:65:52:ff:e6:0a:88:29:d0:7d:41:43:4a:e4:37:4f:26:f7:
         3d:f5:61:ed:3e:fa:ae:54:b7:f6:2a:31:2e:3d:6f:a3:59:a8:
         b9:5c:19:65:3d:1e:93:7b:12:5b:05:73:87:25:ac:c2:ae:25:
         2d:4e:c8:14:70:af:b3:80:5e:ff:57:3f:3e:01:7b:c6:c7:4d:
         33:9b:69:f6:b1:80:a5:3e:c6:5c:42:0a:62:43:ec:54:9a:e5:
         91:75:03:cd:20:7e:24:fc:5b:af:77:4b:f5:23:8e:70:49:51:
         df:2b:ff:08:19:33:64:17:b6:39:8b:fd:b5:87:aa:65:e8:7d:
         8c:6c:ac:f7:e0:0d:a6:3a:ff:e7:a7:10:66:e1:21:4d:cb:8a:
         74:1b:6b:27:f0:eb:db:0a:ee:ea:87:2f:9d:4c:d0:14:bf:1f:
         77:64:2a:e0:c6:e1:77:a5:d8:8a:b1:3b:86:57:1a:81:49:24:
         15:32:e9:84:c0:d0:72:81:87:76:3c:41:8c:86:58:a2:8e:9f:
         0a:c6:1a:dc:37:cd:d9:09:d1:42:46:2e:55:06:db:aa:a1:38:
         88:a1:d5:86
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURjy9zb7uhsrni3cXna63FUha99MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE4RUZGQTUyRTREQjM5M0E3N0VDQTE3QkNCNEM4QTUx
QzQxM0U2MjAeFw0yNDA0MDQwMjQ1MjNaFw0yNTA0MDMwMjUwMjNaMDMxMTAvBgNV
BAMTKEI0Qjc5NjZCMTdGQTM1NzA4OTlBQkE4MjBEQjdEM0JGMTRGMDQ3QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgqNpW2TIlIFlFlZ8dVcQJslr
1cVyWgq0m84YhmVe2gE0xRccxo9396Vk4egpT8kRMbRPAX0nKS5ssxxAJjYULSmw
OB2g5BtVNgqCOSrgxot7QaACpAZiT8y9nw3F6DygmqTadX7LUQeFXwqGZ+X0Ls7l
oZRadWxqpZmuMeOYm9FQZG6hIxhXdO0MoIfCdT2byyF8/ywNAvxlrCzRIi+2IYKj
ApFIwtM4Hi3D4cPxKBjwCNOnJd1LhKP1m+eLTK+IhEcWgKukV5x7cmD6CEIjoehu
OTgxVMPyT7ZRXi82tVgarTyus2ttqBGXqmWY77Y83xYbT0UryWxtEQgVh29lAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtLeWaxf6NXCJmrqCDbfTvxTwR74wHwYDVR0j
BBgwFoAUGo7/pS5Ns5OnfsoXvLTIpRxBPmIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWMxd1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1U
RVYvMS8xQThFRkZBNTJFNERCMzkzQTc3RUNBMTdCQ0I0QzhBNTFDNDEzRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBOEVGRkE1MkU0REIzOTNB
NzdFQ0ExN0JDQjRDOEE1MUM0MTNFNjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjMXdVV0NOcXU1cEU5TWs1U2FZWVBETjE5MWp6dnBHUTNzNzkyWDFNVEVWLzEv
MzIzODMwMzQzYTMyNjY2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQv4DANBgkqhkiG9w0BAQsFAAOCAQEAGlLD5Fyz
q/BkUIIq6Ruco6tkOD2F0fsv6aFFxlfeB9dPWvV+bWVS/+YKiCnQfUFDSuQ3Tyb3
PfVh7T76rlS39ioxLj1vo1mouVwZZT0ek3sSWwVzhyWswq4lLU7IFHCvs4Be/1c/
PgF7xsdNM5tp9rGApT7GXEIKYkPsVJrlkXUDzSB+JPxbr3dL9SOOcElR3yv/CBkz
ZBe2OYv9tYeqZeh9jGys9+ANpjr/56cQZuEhTcuKdBtrJ/Dr2wru6ocvnUzQFL8f
d2Qq4Mbhd6XYirE7hlcagUkkFTLphMDQcoGHdjxBjIZYoo6fCsYa3DfN2QnRQkYu
VQbbqqE4iKHVhg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:41 2024 by rpki-client on console-ams.rpki-client.org