Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa
File:                     323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa (raw, json)
Hash identifier:          9rpYAwpulxa8poh/g/MGWiHe5wMlqY+QKWc+tEbuKPw=
Subject key identifier:   1A:B6:C3:46:5C:11:20:D6:9F:90:49:8B:26:F0:9B:EF:BA:77:DB:04
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0DF345DB3CF0F33B757B5D72800506BCA609EC3D
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     53173
IP address blocks:        2804:e4c:3c00::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f3:45:db:3c:f0:f3:3b:75:7b:5d:72:80:05:06:bc:a6:09:ec:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=1AB6C3465C1120D69F90498B26F09BEFBA77DB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:8a:5b:db:e2:1c:ea:b9:fa:42:a3:46:e6:
                    d1:a3:7c:a3:9a:4a:4b:17:52:28:e4:7b:1f:36:b5:
                    18:02:b1:91:d6:47:ff:65:9d:c4:2f:56:69:9c:93:
                    2d:ad:98:50:ea:59:86:fe:3f:07:4e:43:84:2e:92:
                    3b:42:02:32:ef:ab:f0:b5:69:9a:43:c1:45:77:b1:
                    79:f5:db:ce:4f:ff:20:b2:24:42:74:5a:c7:38:5c:
                    1c:c3:ff:40:2d:99:9a:29:cf:ba:2f:56:f5:d5:30:
                    37:4b:82:77:6b:51:24:a6:b1:6a:dc:a3:29:6d:55:
                    fb:d3:40:4a:f5:7e:ba:31:aa:63:c7:07:e3:22:c5:
                    74:9e:fe:b5:7d:77:41:f6:0a:8a:9f:53:00:b1:20:
                    be:a5:e3:37:e3:67:42:a5:54:cb:ce:14:87:60:04:
                    6d:9e:15:23:5d:7a:2b:79:4f:3f:24:0a:99:75:b2:
                    2a:f3:cd:51:90:c6:a3:47:01:8f:5b:8e:49:c5:1f:
                    11:10:e4:e5:74:18:39:4a:09:d7:3d:0b:79:c6:5d:
                    71:18:75:95:5e:f2:11:be:2e:d3:6f:43:d8:a0:00:
                    29:15:98:c0:41:da:9b:51:81:7a:87:50:98:54:d3:
                    fb:06:a8:35:51:0e:06:06:61:fc:8d:7e:74:a3:80:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B6:C3:46:5C:11:20:D6:9F:90:49:8B:26:F0:9B:EF:BA:77:DB:04
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c:3c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         10:fc:e2:83:82:d7:87:45:d9:43:bb:9e:e9:da:48:b5:50:76:
         03:89:a1:f6:26:a7:ed:96:47:63:25:47:03:8a:f5:87:86:07:
         59:70:91:5c:8b:59:94:4b:0e:62:7a:52:cd:04:09:45:01:81:
         39:e1:df:5f:38:2f:d5:0f:8a:2f:0b:7a:0a:4d:fc:1a:2a:d9:
         24:60:a1:43:66:89:d3:2a:e1:38:6f:ae:af:80:14:c3:dc:14:
         f3:6e:67:0f:a7:22:b5:c8:21:a2:de:68:dd:6a:40:af:02:75:
         db:af:bb:cb:6e:ab:0c:10:2d:3c:c7:7d:e9:71:8c:fe:41:7d:
         dd:15:53:14:9f:fb:72:ab:2a:8c:80:e4:df:49:ab:f0:0d:24:
         db:99:a9:06:67:91:a1:02:ad:2f:a3:73:66:fc:2a:99:e3:a5:
         b7:c9:10:83:c8:41:83:e0:4d:a1:69:72:8d:0e:fb:12:78:a5:
         dd:3f:f8:3f:af:d3:9d:73:55:7f:07:bf:2b:82:a0:fc:5a:69:
         3c:27:80:95:ca:63:09:a8:3b:54:6a:91:9f:75:0d:08:22:98:
         44:f3:de:30:a1:3c:e5:6b:66:22:07:00:14:f2:58:40:25:b4:
         7c:5f:7d:af:8d:e4:33:f0:66:9f:99:7f:97:f3:85:9d:57:df:
         5f:21:b1:54
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUDfNF2zzw8zt1e11ygAUGvKYJ7D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNDA0MDQwMjIxMTZaFw0yNTA0MDMwMjI2MTZaMDMxMTAvBgNV
BAMTKDFBQjZDMzQ2NUMxMTIwRDY5RjkwNDk4QjI2RjA5QkVGQkE3N0RCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqIpb2+Ic6rn6QqNG5tGjfKOa
SksXUijkex82tRgCsZHWR/9lncQvVmmcky2tmFDqWYb+PwdOQ4QukjtCAjLvq/C1
aZpDwUV3sXn1285P/yCyJEJ0Wsc4XBzD/0AtmZopz7ovVvXVMDdLgndrUSSmsWrc
oyltVfvTQEr1froxqmPHB+MixXSe/rV9d0H2CoqfUwCxIL6l4zfjZ0KlVMvOFIdg
BG2eFSNdeit5Tz8kCpl1sirzzVGQxqNHAY9bjknFHxEQ5OV0GDlKCdc9C3nGXXEY
dZVe8hG+LtNvQ9igACkVmMBB2ptRgXqHUJhU0/sGqDVRDgYGYfyNfnSjgMEJAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUGrbDRlwRINafkEmLJvCb77p32wQwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzIzODMwMzQzYTY1MzQ2MzNhMzM2MzMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNl
MjAzNTMzMzEzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKAQOTDwwDQYJKoZIhvcNAQELBQADggEB
ABD84oOC14dF2UO7nunaSLVQdgOJofYmp+2WR2MlRwOK9YeGB1lwkVyLWZRLDmJ6
Us0ECUUBgTnh3184L9UPii8LegpN/Boq2SRgoUNmidMq4Thvrq+AFMPcFPNuZw+n
IrXIIaLeaN1qQK8Cdduvu8tuqwwQLTzHfelxjP5Bfd0VUxSf+3KrKoyA5N9Jq/AN
JNuZqQZnkaECrS+jc2b8KpnjpbfJEIPIQYPgTaFpco0O+xJ4pd0/+D+v051zVX8H
vyuCoPxaaTwngJXKYwmoO1RqkZ91DQgimETz3jChPOVrZiIHABTyWEAltHxffa+N
5DPwZp+Zf5fzhZ1X318hsVQ=
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org