Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/323830343a363931633a3a2f33322d313238203d3e20323730323439.roa
File:                     323830343a363931633a3a2f33322d313238203d3e20323730323439.roa (raw, json)
Hash identifier:          7eSjsPLAs1CVSaOuphF4LugwOhXouyti4qn5hkvk6mc=
Subject key identifier:   7A:AB:0F:42:85:13:D2:7E:03:14:27:52:63:F7:47:D3:65:F9:F3:25
Certificate issuer:       /CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
Certificate serial:       52C7EACD67AC9BB7F906AC6004521DA6ADC1DE1A
Authority key identifier: 01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/323830343a363931633a3a2f33322d313238203d3e20323730323439.roa
Signing time:             Wed 03 Apr 2024 22:20:47 +0000
ROA not before:           Wed 03 Apr 2024 22:15:47 +0000
ROA not after:            Wed 02 Apr 2025 22:20:47 +0000
asID:                     270249
IP address blocks:        2804:691c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl
                          rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c7:ea:cd:67:ac:9b:b7:f9:06:ac:60:04:52:1d:a6:ad:c1:de:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
        Validity
            Not Before: Apr  3 22:15:47 2024 GMT
            Not After : Apr  2 22:20:47 2025 GMT
        Subject: CN=7AAB0F428513D27E0314275263F747D365F9F325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:3a:69:36:7f:6e:db:f9:63:93:57:39:9a:
                    f1:2c:5a:cd:0a:bd:73:01:02:a9:04:e3:60:85:bc:
                    3d:e9:ba:56:d3:96:47:c7:69:fc:be:79:7c:5d:6c:
                    d9:6b:92:00:02:6f:52:60:44:84:05:b7:c7:f2:06:
                    48:70:92:ee:25:21:1d:5b:15:16:7d:f8:d8:a9:62:
                    cb:17:1e:ab:35:90:ae:df:fe:f1:90:10:e1:92:de:
                    f7:17:8d:70:14:c6:74:db:4d:0e:4d:5c:6d:6e:58:
                    ef:c5:05:74:2b:87:78:ad:77:d1:c1:3a:52:d2:c2:
                    89:ee:68:10:06:73:f1:22:48:82:fc:53:70:00:db:
                    ee:5c:a5:02:4d:74:72:6a:51:80:ac:d9:b6:37:c6:
                    c9:43:96:1e:05:8c:26:35:7f:7b:f1:a4:77:d3:4f:
                    36:ae:a4:74:6e:e7:8b:11:7e:78:1a:8e:52:55:4e:
                    5c:ad:84:9e:2c:6c:c2:6c:ab:58:7c:92:f9:91:7a:
                    97:ed:82:3d:ed:85:f6:70:23:06:53:33:11:a1:c8:
                    b1:9b:26:b2:9d:49:84:da:80:1e:4e:59:56:7b:91:
                    1f:d7:73:9f:fc:35:99:f6:63:39:21:18:ab:ec:12:
                    4a:59:9a:c6:34:6b:70:8d:e5:bb:ad:41:ca:a1:8f:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AB:0F:42:85:13:D2:7E:03:14:27:52:63:F7:47:D3:65:F9:F3:25
            X509v3 Authority Key Identifier:
                keyid:01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/323830343a363931633a3a2f33322d313238203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:691c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:7a:85:76:35:e0:00:08:77:6e:69:53:e8:c9:fc:ef:d8:8f:
         00:da:38:8d:9b:57:38:eb:e7:c5:c2:a0:d4:80:d9:09:7f:ae:
         76:22:aa:3d:58:0b:3d:fe:8d:02:b9:47:ca:e2:5f:52:9d:14:
         b8:da:41:bd:11:e7:5f:f1:86:d2:b7:27:ac:64:7d:d1:12:bb:
         a3:ac:b9:94:6c:99:83:f7:15:1b:7e:10:bf:cc:bd:1d:cc:c9:
         b9:52:e8:55:82:73:8b:bb:4a:53:54:7e:69:12:d4:aa:54:0d:
         f3:ea:3e:3f:ac:16:52:8e:78:61:eb:b5:0a:8d:bb:78:de:9e:
         db:26:8f:d7:7e:74:7a:51:a3:ea:f4:f6:94:0d:70:e7:cf:d2:
         e1:38:99:ff:bc:4c:1e:cb:e4:87:34:37:91:7b:30:90:60:9d:
         f8:6a:0a:b0:69:f9:d5:24:29:90:82:09:74:59:67:8e:57:b7:
         5f:26:9f:f1:e6:69:c8:29:b0:8f:65:8e:9f:ec:f8:0d:2a:01:
         af:17:fb:0b:56:9f:c2:57:72:3b:15:38:2e:ca:d7:2b:3f:9f:
         e6:76:72:af:cc:6a:b6:3d:1c:89:6f:04:41:07:51:6b:1a:02:
         a9:4c:a5:08:e7:e6:ff:45:da:52:9c:af:fd:ad:a9:5d:b7:0b:
         9a:e7:c1:43
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUsfqzWesm7f5BqxgBFIdpq3B3howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDExRTEzRTMzNzg3RjA0MjFFQzQxRjg1OEY0QkM5QkQy
QTlERDcwRjAeFw0yNDA0MDMyMjE1NDdaFw0yNTA0MDIyMjIwNDdaMDMxMTAvBgNV
BAMTKDdBQUIwRjQyODUxM0QyN0UwMzE0Mjc1MjYzRjc0N0QzNjVGOUYzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUTppNn9u2/ljk1c5mvEsWs0K
vXMBAqkE42CFvD3pulbTlkfHafy+eXxdbNlrkgACb1JgRIQFt8fyBkhwku4lIR1b
FRZ9+NipYssXHqs1kK7f/vGQEOGS3vcXjXAUxnTbTQ5NXG1uWO/FBXQrh3itd9HB
OlLSwonuaBAGc/EiSIL8U3AA2+5cpQJNdHJqUYCs2bY3xslDlh4FjCY1f3vxpHfT
TzaupHRu54sRfngajlJVTlythJ4sbMJsq1h8kvmRepftgj3thfZwIwZTMxGhyLGb
JrKdSYTagB5OWVZ7kR/Xc5/8NZn2YzkhGKvsEkpZmsY0a3CN5butQcqhj2KFAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUeqsPQoUT0n4DFCdSY/dH02X58yUwHwYDVR0j
BBgwFoAUAR4T4zeH8EIexB+Fj0vJvSqd1w8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9BZ3NvVktORm16clBzUFZXQnRpTVpERXM1d1BreUVhU3IxQzh3ZmNV
elAvMS8wMTFFMTNFMzM3ODdGMDQyMUVDNDFGODU4RjRCQzlCRDJBOURENzBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxMUUxM0UzMzc4N0YwNDIx
RUM0MUY4NThGNEJDOUJEMkE5REQ3MEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvQWdzb1ZLTkZtenJQc1BWV0J0aU1aREVzNXdQa3lFYVNyMUM4d2ZjVXpQLzEv
MzIzODMwMzQzYTM2MzkzMTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzMjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGkcMA0GCSqGSIb3DQEBCwUAA4IBAQBneoV2
NeAACHduaVPoyfzv2I8A2jiNm1c46+fFwqDUgNkJf652Iqo9WAs9/o0CuUfK4l9S
nRS42kG9Eedf8YbStyesZH3RErujrLmUbJmD9xUbfhC/zL0dzMm5UuhVgnOLu0pT
VH5pEtSqVA3z6j4/rBZSjnhh67UKjbt43p7bJo/XfnR6UaPq9PaUDXDnz9LhOJn/
vEwey+SHNDeRezCQYJ34agqwafnVJCmQggl0WWeOV7dfJp/x5mnIKbCPZY6f7PgN
KgGvF/sLVp/CV3I7FTguytcrP5/mdnKvzGq2PRyJbwRBB1FrGgKpTKUI5+b/RdpS
nK/9raldtwua58FD
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:10 2024 by rpki-client on console-fra.rpki-client.org