Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa
File:                     323830343a333138343a3a2f33322d3438203d3e20323635303231.roa (raw, json)
Hash identifier:          1IV5KBZY9fhCa8/ybeXnl2tp93uGswI5tL2WatrDLno=
Subject key identifier:   A7:FC:6A:E9:D9:58:7A:3D:C0:79:75:1B:64:23:A7:AA:34:B7:91:60
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       08C41CE8BED47705BB63B675AD1A0422B31679D4
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa
Signing time:             Mon 08 Jul 2024 19:43:05 +0000
ROA not before:           Mon 08 Jul 2024 19:38:05 +0000
ROA not after:            Mon 07 Jul 2025 19:43:05 +0000
asID:                     265021
IP address blocks:        2804:3184::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c4:1c:e8:be:d4:77:05:bb:63:b6:75:ad:1a:04:22:b3:16:79:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:05 2024 GMT
            Not After : Jul  7 19:43:05 2025 GMT
        Subject: CN=A7FC6AE9D9587A3DC079751B6423A7AA34B79160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:e5:0b:ff:37:fb:00:f9:ba:3b:01:7d:9f:
                    85:d6:50:b9:f9:e3:29:aa:1c:ad:35:3b:5a:f9:93:
                    9e:26:8f:63:1f:60:25:a9:37:41:90:77:be:df:20:
                    fb:4c:3e:e3:15:47:70:53:43:4a:07:d2:fa:df:71:
                    c0:95:fd:ce:33:1c:1f:2e:ac:d7:68:d8:13:36:b6:
                    62:15:72:f4:ed:0c:d8:6d:18:de:9a:cd:15:ae:ed:
                    8e:3e:ad:15:0a:8f:9e:fc:f5:3e:2f:59:30:72:22:
                    cb:86:8e:90:6b:ff:d1:b6:ec:6a:6f:de:31:a5:17:
                    ad:90:e4:b0:57:4f:76:1c:e3:eb:f6:41:4a:98:c4:
                    fe:79:aa:79:65:3a:16:79:e6:c4:cc:87:80:f4:fb:
                    b4:86:e5:7c:50:d3:67:ff:ae:ee:f1:ba:85:20:21:
                    61:14:37:5f:28:b6:29:e2:21:6c:6d:c3:50:7d:a4:
                    91:2c:65:56:e1:f0:23:1f:a0:51:a2:33:e2:13:cb:
                    b7:ec:3b:1a:46:4c:9c:e2:56:cd:bc:0f:7b:73:54:
                    19:3c:09:e0:8c:4b:31:85:ee:03:c0:54:bd:54:fc:
                    15:bb:d0:9c:0f:e3:4b:0e:af:f5:35:c2:85:5f:42:
                    68:ad:1f:76:86:31:6f:a3:36:ba:d4:bf:1f:42:9d:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FC:6A:E9:D9:58:7A:3D:C0:79:75:1B:64:23:A7:AA:34:B7:91:60
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3184::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:1b:cb:16:47:b6:bc:7e:76:1b:f0:fb:c2:ba:34:58:4d:
         09:8a:f1:1e:35:84:ea:ae:8d:06:bd:aa:81:5b:4e:ef:f9:bb:
         45:d2:1f:7c:4d:5b:5b:84:b9:98:30:b1:b2:95:25:5b:35:8c:
         03:b2:65:e9:e4:73:e6:42:49:70:e0:b7:53:82:b8:ec:34:91:
         2b:4f:d9:c6:49:20:dd:8d:3b:d8:ca:24:2f:c1:92:f0:87:0e:
         c9:79:04:3c:0e:c4:43:d4:74:87:28:ed:35:91:0f:3a:e2:9b:
         13:13:43:b6:29:24:65:8d:ff:f0:b5:64:76:f9:87:10:08:1e:
         39:e8:dc:7b:15:01:75:81:17:8f:d6:ac:a1:e6:a3:76:ca:67:
         13:90:ad:a6:23:19:04:9f:d7:4b:99:f0:00:71:ec:98:27:41:
         ce:e2:be:5c:04:7b:0a:eb:c5:b1:d0:df:41:ae:e9:fd:0f:26:
         ce:b7:b7:a9:28:32:64:80:4b:2f:a1:90:c0:66:b1:48:bb:20:
         5e:24:f3:84:86:66:56:00:8d:c0:2d:7e:3c:e1:a6:59:e3:c0:
         a4:e6:3a:41:b0:bd:25:33:ee:a6:25:87:4c:f8:9b:96:4e:e2:
         fc:f0:bd:bc:60:f9:b5:8e:a4:e6:0a:c4:ac:90:32:a9:f8:49:
         78:d1:3f:80
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCMQc6L7UdwW7Y7Z1rRoEIrMWedQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFQjkyRjMzMDdCMEU5NENDNzBEOUIyMUI1MEY2RkUy
MTM1Q0Q5ODAeFw0yNDA3MDgxOTM4MDVaFw0yNTA3MDcxOTQzMDVaMDMxMTAvBgNV
BAMTKEE3RkM2QUU5RDk1ODdBM0RDMDc5NzUxQjY0MjNBN0FBMzRCNzkxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4+UL/zf7APm6OwF9n4XWULn5
4ymqHK01O1r5k54mj2MfYCWpN0GQd77fIPtMPuMVR3BTQ0oH0vrfccCV/c4zHB8u
rNdo2BM2tmIVcvTtDNhtGN6azRWu7Y4+rRUKj5789T4vWTByIsuGjpBr/9G27Gpv
3jGlF62Q5LBXT3Yc4+v2QUqYxP55qnllOhZ55sTMh4D0+7SG5XxQ02f/ru7xuoUg
IWEUN18otiniIWxtw1B9pJEsZVbh8CMfoFGiM+ITy7fsOxpGTJziVs28D3tzVBk8
CeCMSzGF7gPAVL1U/BW70JwP40sOr/U1woVfQmitH3aGMW+jNrrUvx9CnWjBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUp/xq6dlYej3AeXUbZCOnqjS3kWAwHwYDVR0j
BBgwFoAUDeuS8zB7DpTMcNmyG1D2/iE1zZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMi8wREVCOTJGMzMwN0IwRTk0Q0M3MEQ5QjIxQjUwRjZGRTIxMzVDRDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERUI5MkYzMzA3QjBFOTRD
QzcwRDlCMjFCNTBGNkZFMjEzNUNEOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzIv
MzIzODMwMzQzYTMzMzEzODM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxhDANBgkqhkiG9w0BAQsFAAOCAQEAabAbyxZH
trx+dhvw+8K6NFhNCYrxHjWE6q6NBr2qgVtO7/m7RdIffE1bW4S5mDCxspUlWzWM
A7Jl6eRz5kJJcOC3U4K47DSRK0/Zxkkg3Y072MokL8GS8IcOyXkEPA7EQ9R0hyjt
NZEPOuKbExNDtikkZY3/8LVkdvmHEAgeOejcexUBdYEXj9asoeajdspnE5CtpiMZ
BJ/XS5nwAHHsmCdBzuK+XAR7CuvFsdDfQa7p/Q8mzre3qSgyZIBLL6GQwGaxSLsg
XiTzhIZmVgCNwC1+POGmWePApOY6QbC9JTPupiWHTPiblk7i/PC9vGD5tY6k5grE
rJAyqfhJeNE/gA==
-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org