Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3a2f33332d3333203d3e20323632363131.roa
File:                     323830343a326663383a3a2f33332d3333203d3e20323632363131.roa (raw, json)
Hash identifier:          TLe+yKonubt6B1Kasm+riIk3XQ79CI4NkcJMXLsLV6Y=
Subject key identifier:   88:33:AD:6C:2F:43:EE:4A:B9:3F:4F:D2:59:57:67:F8:63:55:3A:A4
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       5A19EC5D1CB5A663CE77F64625EC54B5BD740980
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3a2f33332d3333203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:25 +0000
ROA not before:           Wed 17 Apr 2024 14:15:25 +0000
ROA not after:            Wed 16 Apr 2025 14:20:25 +0000
asID:                     262611
IP address blocks:        2804:2fc8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:19:ec:5d:1c:b5:a6:63:ce:77:f6:46:25:ec:54:b5:bd:74:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:25 2024 GMT
            Not After : Apr 16 14:20:25 2025 GMT
        Subject: CN=8833AD6C2F43EE4AB93F4FD2595767F863553AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:ca:08:fe:dc:7f:21:d2:9f:14:a3:18:b0:
                    f5:32:00:63:11:23:93:46:4c:db:43:34:0b:43:48:
                    b5:74:e9:db:d3:1b:66:d0:df:b9:6f:60:a2:29:80:
                    1f:fc:89:b5:1a:63:38:f4:8b:60:36:95:a3:f8:f2:
                    f2:8e:3b:53:c4:86:31:58:83:0e:91:0a:c7:c5:9f:
                    ee:c9:e2:70:1b:26:77:76:c4:71:e1:00:42:d1:d9:
                    47:5b:12:9b:29:52:0a:36:5a:52:e3:82:78:3c:01:
                    40:6d:1e:04:38:a6:0c:d0:d1:10:36:3f:a7:4f:80:
                    e4:ca:0d:40:7f:d3:67:9d:66:36:83:18:91:12:06:
                    2a:89:83:16:c7:f1:31:9a:36:b1:ab:84:2b:0b:c1:
                    45:4d:af:60:85:8b:18:15:86:2b:2c:e7:a4:d6:1a:
                    8b:b4:ff:d1:d3:ab:3f:ac:3a:76:a1:8c:74:cf:d9:
                    d1:12:71:81:59:2a:77:0d:2d:fe:e1:34:2f:6b:ea:
                    48:ba:57:9f:fe:13:f0:55:44:4f:61:95:e3:72:9a:
                    c7:f5:32:54:91:8a:7e:d0:04:57:ff:70:32:5d:d7:
                    bd:0e:cd:da:8b:64:94:b2:ad:a5:42:85:bb:8d:ae:
                    44:44:07:c3:c3:b6:42:5c:6e:e9:3c:6e:1e:6d:85:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:AD:6C:2F:43:EE:4A:B9:3F:4F:D2:59:57:67:F8:63:55:3A:A4
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3a2f33332d3333203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:6b:c0:ed:49:ff:97:16:5f:85:a5:c6:cd:9d:0b:e2:7c:
         57:c3:28:15:9d:46:b6:6a:98:10:ac:34:00:22:ed:98:1b:27:
         1d:a5:62:d9:30:6a:16:13:6a:63:cb:ca:32:e8:b4:08:29:09:
         bf:ff:46:d7:2b:48:c2:bd:df:7d:10:ba:82:0d:50:40:a6:d6:
         f2:da:43:cb:bd:a8:2f:29:28:54:14:65:ee:75:b5:f6:83:9e:
         72:c8:b4:c9:6b:91:16:24:92:5d:d2:46:cc:20:ae:c8:cc:bd:
         2d:0b:f8:fe:6c:8b:36:2a:27:ef:a7:29:5e:89:a1:18:29:a8:
         24:f8:95:2a:b9:69:ec:0d:91:05:56:d2:b4:1f:3b:8f:5e:a1:
         98:c4:31:ec:0e:7b:0d:2e:11:e6:90:9a:fc:ec:af:32:33:c5:
         a2:c9:7c:13:a8:78:f7:81:77:9d:07:58:aa:28:1a:9b:67:be:
         50:2a:29:2f:8c:b7:f7:b9:0d:a7:55:8c:71:a4:79:38:c7:be:
         0f:19:6d:45:1a:03:14:c5:14:5a:6a:db:2d:94:c8:13:a3:24:
         e4:b7:cc:a4:8c:6c:b5:46:d1:04:e1:9c:d9:59:1f:33:c0:f0:
         4e:54:1d:53:0f:df:3d:c7:06:72:ea:b5:c4:db:37:2d:ba:f9:
         25:e7:59:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWhnsXRy1pmPOd/ZGJexUtb10CYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMjQ2NzNBRjk0RjZFOEE3MTcxODg3QjYwQkY0RUJF
OUQxNUU3MzAeFw0yNDA0MTcxNDE1MjVaFw0yNTA0MTYxNDIwMjVaMDMxMTAvBgNV
BAMTKDg4MzNBRDZDMkY0M0VFNEFCOTNGNEZEMjU5NTc2N0Y4NjM1NTNBQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqsoI/tx/IdKfFKMYsPUyAGMR
I5NGTNtDNAtDSLV06dvTG2bQ37lvYKIpgB/8ibUaYzj0i2A2laP48vKOO1PEhjFY
gw6RCsfFn+7J4nAbJnd2xHHhAELR2UdbEpspUgo2WlLjgng8AUBtHgQ4pgzQ0RA2
P6dPgOTKDUB/02edZjaDGJESBiqJgxbH8TGaNrGrhCsLwUVNr2CFixgVhiss56TW
Gou0/9HTqz+sOnahjHTP2dEScYFZKncNLf7hNC9r6ki6V5/+E/BVRE9hleNymsf1
MlSRin7QBFf/cDJd170OzdqLZJSyraVChbuNrkREB8PDtkJcbuk8bh5thZdxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiDOtbC9D7kq5P0/SWVdn+GNVOqQwHwYDVR0j
BBgwFoAU0rJGc6+U9uinFxiHtgv06+nRXnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJUOHZyRGpxeTRiV2FNQ3RGUDI0Q0ZVNWhNeldoSFJranZneFp5UUJR
a3AvMC9EMkIyNDY3M0FGOTRGNkU4QTcxNzE4ODdCNjBCRjRFQkU5RDE1RTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQjI0NjczQUY5NEY2RThB
NzE3MTg4N0I2MEJGNEVCRTlEMTVFNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FyVDh2ckRqcXk0YldhTUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAv
MzIzODMwMzQzYTMyNjY2MzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMy
MzYzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQvyAAwDQYJKoZIhvcNAQELBQADggEBAAG8a8Dt
Sf+XFl+FpcbNnQvifFfDKBWdRrZqmBCsNAAi7ZgbJx2lYtkwahYTamPLyjLotAgp
Cb//RtcrSMK9330QuoINUECm1vLaQ8u9qC8pKFQUZe51tfaDnnLItMlrkRYkkl3S
RswgrsjMvS0L+P5sizYqJ++nKV6JoRgpqCT4lSq5aewNkQVW0rQfO49eoZjEMewO
ew0uEeaQmvzsrzIzxaLJfBOoePeBd50HWKooGptnvlAqKS+Mt/e5DadVjHGkeTjH
vg8ZbUUaAxTFFFpq2y2UyBOjJOS3zKSMbLVG0QThnNlZHzPA8E5UHVMP3z3HBnLq
tcTbNy26+SXnWWw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org