Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa
File:                     323830343a326362633a3a2f33352d3335203d3e20323635323430.roa (raw, json)
Hash identifier:          y9SBMFb8v7KtxW6cdSQ0qlmJ2KGKKLS4lC+jErVZikk=
Subject key identifier:   A2:ED:E6:21:B4:ED:77:B8:3A:6B:B4:1C:31:1A:33:C6:C3:5E:C2:3F
Certificate issuer:       /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial:       4F690DCB954C06431C6097745ACAD9B6D13BC0F9
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa
Signing time:             Thu 04 Apr 2024 04:19:39 +0000
ROA not before:           Thu 04 Apr 2024 04:14:39 +0000
ROA not after:            Thu 03 Apr 2025 04:19:39 +0000
asID:                     265240
IP address blocks:        2804:2cbc::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl
                          rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:69:0d:cb:95:4c:06:43:1c:60:97:74:5a:ca:d9:b6:d1:3b:c0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
        Validity
            Not Before: Apr  4 04:14:39 2024 GMT
            Not After : Apr  3 04:19:39 2025 GMT
        Subject: CN=A2EDE621B4ED77B83A6BB41C311A33C6C35EC23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:e0:c3:ec:0d:75:a2:2f:9d:ad:8e:5d:9c:
                    b3:dd:44:8b:cc:fb:09:aa:4e:30:15:e8:bb:1e:cc:
                    54:64:28:c9:1b:fd:c8:87:75:ad:93:c8:16:d4:ca:
                    2e:90:ea:ea:f3:9b:f1:d8:fa:e5:07:3c:0b:8f:25:
                    b9:0e:9a:6e:59:3a:1a:b1:59:8c:dd:6f:f4:25:ce:
                    38:15:22:99:47:69:a7:9e:b5:c4:aa:45:66:af:65:
                    b4:df:f1:64:a8:c9:e0:b6:3c:95:41:48:25:22:81:
                    1d:29:f2:fb:fe:8a:2e:40:32:2c:ea:8f:b2:76:91:
                    04:0c:1e:8b:e1:d1:57:63:36:be:fc:54:b1:e2:36:
                    fc:f5:98:e1:7c:d6:27:77:49:44:ee:97:75:e0:7e:
                    9c:9c:1e:21:01:1b:fd:3b:8b:68:bf:ec:de:25:4c:
                    09:25:80:e7:a6:5b:23:1c:3d:98:ce:6b:6d:1c:9a:
                    67:e5:a6:81:63:5e:07:ef:14:44:a2:fe:9d:a7:be:
                    dc:75:77:0e:df:0b:a8:59:21:e0:52:20:1c:d5:01:
                    95:ca:cf:92:36:9d:e9:b3:4d:aa:cf:08:82:bf:b8:
                    ec:5c:f5:5a:9b:03:40:ac:17:a3:66:df:82:1f:ae:
                    15:e1:a0:67:5d:01:17:54:5e:96:97:b0:7b:42:67:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:ED:E6:21:B4:ED:77:B8:3A:6B:B4:1C:31:1A:33:C6:C3:5E:C2:3F
            X509v3 Authority Key Identifier:
                keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cbc::/35

    Signature Algorithm: sha256WithRSAEncryption
         07:e0:df:c2:07:ca:88:c2:a1:6a:43:d2:8a:fa:2c:f1:b1:c2:
         7a:48:0d:f8:76:80:fe:14:9e:f3:ae:ac:c8:98:e3:9c:9c:57:
         e9:65:15:1d:c8:06:3a:2f:25:fe:f1:ee:80:bd:20:de:2f:d6:
         9d:a4:13:16:a0:d6:b7:a5:d8:e1:55:a0:8d:99:4a:e3:b3:45:
         72:a9:85:54:7e:cf:1e:da:fb:e6:41:73:02:6b:d4:60:36:94:
         57:5f:3b:56:32:ac:af:7d:21:66:4f:a6:ac:8e:90:26:3e:3b:
         2f:80:92:c4:2c:a0:2c:3c:2d:47:70:aa:9a:81:6b:f2:03:ae:
         08:4b:7e:7c:5f:9a:3b:0a:60:78:3b:36:c3:9c:1f:98:8d:ad:
         59:a3:4a:bd:91:6f:89:a5:a7:af:56:5f:d9:01:bd:af:94:c1:
         36:2d:51:1e:b7:ab:ed:7b:4a:09:e3:a5:9c:f7:98:82:9c:cc:
         24:ff:db:51:1f:5c:f3:64:2c:57:22:52:8a:d7:ed:44:cd:0b:
         32:54:8e:ce:c2:9e:8c:c7:84:1d:22:e9:80:48:88:f2:be:30:
         ce:34:a1:1a:8f:06:63:59:35:1a:e2:38:19:6b:71:20:49:d5:
         cb:a4:13:05:25:27:65:d2:e8:01:d2:3b:0c:65:48:c7:00:6f:
         e3:b3:11:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT2kNy5VMBkMcYJd0WsrZttE7wPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDRUY0MDNDN0ExQTI1MTkxN0VCNkQ5QjBBNzEyMzhC
Nzg0QTI3RDAeFw0yNDA0MDQwNDE0MzlaFw0yNTA0MDMwNDE5MzlaMDMxMTAvBgNV
BAMTKEEyRURFNjIxQjRFRDc3QjgzQTZCQjQxQzMxMUEzM0M2QzM1RUMyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6peDD7A11oi+drY5dnLPdRIvM
+wmqTjAV6LsezFRkKMkb/ciHda2TyBbUyi6Q6urzm/HY+uUHPAuPJbkOmm5ZOhqx
WYzdb/QlzjgVIplHaaeetcSqRWavZbTf8WSoyeC2PJVBSCUigR0p8vv+ii5AMizq
j7J2kQQMHovh0VdjNr78VLHiNvz1mOF81id3SUTul3XgfpycHiEBG/07i2i/7N4l
TAklgOemWyMcPZjOa20cmmflpoFjXgfvFESi/p2nvtx1dw7fC6hZIeBSIBzVAZXK
z5I2nemzTarPCIK/uOxc9VqbA0CsF6Nm34IfrhXhoGddARdUXpaXsHtCZ+RtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUou3mIbTtd7g6a7QcMRozxsNewj8wHwYDVR0j
BBgwFoAUnM70A8eholGRfrbZsKcSOLeEon0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRGbUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJS
YlUvMS85Q0NFRjQwM0M3QTFBMjUxOTE3RUI2RDlCMEE3MTIzOEI3ODRBMjdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQ0VGNDAzQzdBMUEyNTE5
MTdFQjZEOUIwQTcxMjM4Qjc4NEEyN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0Rm1FOGZ6U1RLdEF1OEdiWHU0ZTdEMWNxdVdHcnluSjdaWGtiYmpiUmJVLzEv
MzIzODMwMzQzYTMyNjM2MjYzM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjM1
MzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYFKAQsvAAwDQYJKoZIhvcNAQELBQADggEBAAfg38IH
yojCoWpD0or6LPGxwnpIDfh2gP4UnvOurMiY45ycV+llFR3IBjovJf7x7oC9IN4v
1p2kExag1rel2OFVoI2ZSuOzRXKphVR+zx7a++ZBcwJr1GA2lFdfO1YyrK99IWZP
pqyOkCY+Oy+AksQsoCw8LUdwqpqBa/IDrghLfnxfmjsKYHg7NsOcH5iNrVmjSr2R
b4mlp69WX9kBva+UwTYtUR63q+17SgnjpZz3mIKczCT/21EfXPNkLFciUorX7UTN
CzJUjs7CnozHhB0i6YBIiPK+MM40oRqPBmNZNRriOBlrcSBJ1cukEwUlJ2XS6AHS
OwxlSMcAb+OzEaE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org