Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa
File:                     323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa (raw, json)
Hash identifier:          WA5EyPRn/YodRKmsEOQNtUOHXo2BZS26dBUr3qEsLHs=
Subject key identifier:   C6:62:2C:5A:79:A3:91:13:14:1B:D1:EE:4E:1D:10:4E:EB:F8:D3:BE
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       6C464BD94E275E04571E9E3004752B5CC01DBBB4
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:44:53 +0000
ROA not before:           Fri 01 Nov 2024 13:39:53 +0000
ROA not after:            Fri 31 Oct 2025 13:44:53 +0000
asID:                     263484
IP address blocks:        2804:1290:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:46:4b:d9:4e:27:5e:04:57:1e:9e:30:04:75:2b:5c:c0:1d:bb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:39:53 2024 GMT
            Not After : Oct 31 13:44:53 2025 GMT
        Subject: CN=C6622C5A79A39113141BD1EE4E1D104EEBF8D3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:15:9c:12:11:dd:a8:ba:40:ee:2f:92:04:76:
                    ff:21:e8:0b:a8:ad:a4:db:98:9b:f3:95:03:f8:6d:
                    f7:3b:f0:61:a7:6e:d8:b0:ee:a2:6a:8f:12:e2:bc:
                    b5:ac:cd:14:a6:da:d7:db:13:55:15:34:a0:0e:8f:
                    39:6a:43:cc:90:d2:c9:55:5a:45:85:6c:57:13:95:
                    7f:e3:f2:23:63:a3:41:13:2d:63:91:7b:73:05:99:
                    6c:ed:3b:df:c9:f7:48:8e:b2:67:58:6f:a3:ea:d7:
                    79:f0:b0:8e:04:99:8b:c6:c7:00:ce:ee:a0:d2:d9:
                    d1:fc:b8:73:25:a6:70:37:b7:16:33:b6:66:3b:7e:
                    a9:6c:11:09:db:8f:f0:f3:25:fc:2b:62:2f:2f:b3:
                    84:2c:8c:3d:1a:ae:37:0c:4c:19:91:47:6b:8b:53:
                    8c:c5:cb:c7:9a:96:c2:b9:23:44:42:c8:ba:83:56:
                    c2:bb:11:72:55:38:6b:e8:29:ac:56:34:c9:9a:18:
                    57:75:31:7a:ac:c1:86:86:5d:2f:28:3a:7e:1d:e7:
                    b7:25:02:dc:cb:f4:ba:6b:be:5f:5b:eb:f4:d9:ff:
                    91:2d:23:ad:12:ad:aa:08:3a:3f:fb:5c:f1:fe:97:
                    6c:90:6b:6d:7a:4d:ba:0d:91:25:35:f7:8c:4d:ec:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:2C:5A:79:A3:91:13:14:1B:D1:EE:4E:1D:10:4E:EB:F8:D3:BE
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:2e:73:20:db:c4:a0:c7:a1:62:11:5e:6e:96:50:ae:d6:04:
         63:73:bb:f4:1c:3a:3e:cb:1f:14:20:9d:b7:46:74:09:7c:0d:
         78:9f:e8:62:80:58:25:72:11:c3:22:10:37:af:fc:8a:3e:bd:
         d3:b6:bc:d5:9e:2a:06:e1:ba:35:d0:27:55:09:a9:0e:cb:68:
         d2:c8:b3:5c:98:8c:bc:d8:34:c4:ee:8a:3e:8e:2d:19:e9:b1:
         3b:af:73:d8:7f:0e:80:af:8b:db:e8:6e:c9:be:d5:c4:e8:62:
         c5:06:ea:9f:c0:f1:db:cc:63:f4:df:fa:98:ad:bc:d5:cc:62:
         80:37:04:ec:f3:58:e6:97:72:56:7f:28:22:ab:44:1b:e5:ab:
         53:98:11:33:7f:50:0c:a2:d5:15:19:f6:ad:68:0c:84:af:fa:
         97:e3:95:34:23:bd:3a:2a:85:c3:04:d9:b1:c8:bf:bd:5d:c9:
         02:8d:6b:fd:ad:ab:8a:a5:52:0d:15:1d:3b:f5:86:ba:ea:8f:
         7f:c3:a8:b7:1d:50:42:b0:f1:32:91:41:e2:1b:15:53:f1:57:
         d8:2e:12:db:00:db:69:74:54:b4:09:af:f4:ff:1e:ab:ff:da:
         71:1e:f9:cb:ff:32:d6:24:df:d3:7a:46:f6:d2:3a:ce:04:72:
         a9:57:b5:05
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbEZL2U4nXgRXHp4wBHUrXMAdu7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBMURBRDNFRkMwRUUwRUQ0N0U4OUMxMUExQ0E0NTE1
MUY2OEMxNjAeFw0yNDExMDExMzM5NTNaFw0yNTEwMzExMzQ0NTNaMDMxMTAvBgNV
BAMTKEM2NjIyQzVBNzlBMzkxMTMxNDFCRDFFRTRFMUQxMDRFRUJGOEQzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqFZwSEd2oukDuL5IEdv8h6Auo
raTbmJvzlQP4bfc78GGnbtiw7qJqjxLivLWszRSm2tfbE1UVNKAOjzlqQ8yQ0slV
WkWFbFcTlX/j8iNjo0ETLWORe3MFmWztO9/J90iOsmdYb6Pq13nwsI4EmYvGxwDO
7qDS2dH8uHMlpnA3txYztmY7fqlsEQnbj/DzJfwrYi8vs4QsjD0arjcMTBmRR2uL
U4zFy8ealsK5I0RCyLqDVsK7EXJVOGvoKaxWNMmaGFd1MXqswYaGXS8oOn4d57cl
AtzL9Lprvl9b6/TZ/5EtI60SraoIOj/7XPH+l2yQa216TboNkSU194xN7Kl7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUxmIsWnmjkRMUG9HuTh0QTuv4074wHwYDVR0j
BBgwFoAUAqHa0+/A7g7UfonBGhykUVH2jBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNGaXJNc0tZa05oRkRiblZydTF6aGhyUnZHRWdxOTV4WmNOa0hwNEN2
WVIvMC8wMkExREFEM0VGQzBFRTBFRDQ3RTg5QzExQTFDQTQ1MTUxRjY4QzE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQTFEQUQzRUZDMEVFMEVE
NDdFODlDMTFBMUNBNDUxNTFGNjhDMTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRmlyTXNLWWtOaEZEYm5WcnUxemhoclJ2R0VncTk1eFpjTmtIcDRDdllSLzAv
MzIzODMwMzQzYTMxMzIzOTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEpBAMA0GCSqGSIb3DQEBCwUA
A4IBAQCYLnMg28Sgx6FiEV5ullCu1gRjc7v0HDo+yx8UIJ23RnQJfA14n+higFgl
chHDIhA3r/yKPr3TtrzVnioG4bo10CdVCakOy2jSyLNcmIy82DTE7oo+ji0Z6bE7
r3PYfw6Ar4vb6G7JvtXE6GLFBuqfwPHbzGP03/qYrbzVzGKANwTs81jml3JWfygi
q0Qb5atTmBEzf1AMotUVGfataAyEr/qX45U0I706KoXDBNmxyL+9XckCjWv9rauK
pVINFR079Ya66o9/w6i3HVBCsPEykUHiGxVT8VfYLhLbANtpdFS0Ca/0/x6r/9px
HvnL/zLWJN/Tekb20jrOBHKpV7UF
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org