Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa
File:                     323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa (raw, json)
Hash identifier:          6Oy+FGdL+qrTKEu/inqBZ22+IOGS6wGPCu0jjQS6COo=
Subject key identifier:   AA:D9:4E:2B:1A:25:03:ED:78:67:59:44:F9:AB:E6:DC:E7:F5:AA:D9
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       6353A04D80F4152F3ED42646E876521ED4594249
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:09 +0000
ROA not before:           Thu 04 Apr 2024 07:10:09 +0000
ROA not after:            Thu 03 Apr 2025 07:15:09 +0000
asID:                     265118
IP address blocks:        2804:2ac8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:53:a0:4d:80:f4:15:2f:3e:d4:26:46:e8:76:52:1e:d4:59:42:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:09 2024 GMT
            Not After : Apr  3 07:15:09 2025 GMT
        Subject: CN=AAD94E2B1A2503ED78675944F9ABE6DCE7F5AAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:8b:4e:9b:09:b6:26:d7:c7:df:f6:f1:34:
                    44:4b:5b:c1:ab:41:ba:ee:11:2f:f7:56:a1:ef:eb:
                    a4:e5:18:43:cf:f9:f6:97:0c:a5:b6:ae:10:94:2f:
                    a3:0d:43:3a:ea:37:db:5d:58:b4:87:5b:fc:c6:1e:
                    33:2e:25:ff:53:93:7f:fc:ce:1e:fb:b6:85:a6:f7:
                    18:6b:00:e3:db:e6:71:ea:f6:23:57:5b:73:c0:d2:
                    b0:75:b2:99:58:14:ac:9f:16:2c:e8:c2:9a:7d:af:
                    9a:f0:ce:64:7e:42:d8:ae:ec:78:3f:77:27:de:94:
                    d4:2f:22:02:7d:d6:31:e1:b1:ad:d9:0e:bf:d3:49:
                    eb:19:06:5d:71:49:fc:00:d8:76:3d:70:06:3c:6c:
                    8b:7a:41:ec:b9:b0:28:aa:6a:b1:02:1c:17:7d:80:
                    67:a2:e4:24:8c:95:8b:a7:9c:cb:77:e1:7e:0f:b4:
                    44:70:4a:36:85:c3:3f:b7:96:1d:95:a5:88:09:77:
                    c8:1d:69:d5:e0:ff:6e:da:b2:11:d7:92:78:10:a3:
                    ed:a1:d0:51:54:0d:04:f4:2f:74:ae:1b:dc:38:54:
                    b9:66:4b:13:e9:3d:ee:b3:47:86:e1:ff:56:82:4b:
                    bb:8d:95:c7:b4:d5:22:a4:79:75:04:2d:e6:41:87:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D9:4E:2B:1A:25:03:ED:78:67:59:44:F9:AB:E6:DC:E7:F5:AA:D9
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:91:2e:34:ed:d0:e3:88:cd:57:98:59:b6:da:50:65:0b:3f:
         38:99:d8:d5:89:80:5a:80:d1:de:02:af:bd:77:81:cf:36:4d:
         a9:50:de:3a:06:51:9d:22:87:cc:33:69:e1:82:e0:0f:c1:63:
         51:a7:c8:bd:d1:da:11:0d:77:3f:ee:1c:ca:b8:30:51:c8:60:
         4b:02:e5:1b:e4:bc:d3:08:0d:5d:e5:45:39:0a:e1:32:25:c1:
         e7:90:83:cd:99:10:19:59:b7:fa:e4:42:ee:3c:a3:c9:62:6f:
         de:cf:84:c4:c4:6c:8d:a1:1b:dd:77:bb:d9:71:82:55:e4:42:
         8c:e1:1f:22:2b:2d:27:21:4f:63:73:e7:66:8b:5d:0c:95:92:
         28:51:e6:da:7f:f8:4e:ea:7c:ff:23:05:bd:e9:81:22:26:2a:
         83:7d:79:22:05:c7:3c:72:f2:0f:51:df:23:1e:72:d9:aa:6e:
         bd:74:5d:d3:9c:70:db:c0:dd:11:d9:c7:42:c9:80:f2:e4:d3:
         f5:4b:bd:9e:0b:ac:69:a3:9e:65:a0:9a:aa:b3:5a:c0:ed:8c:
         f2:91:b9:7f:03:6a:86:53:d5:43:d2:30:df:ce:7a:db:ab:42:
         65:86:6b:53:81:27:e6:3f:b4:69:22:66:62:d1:dd:96:12:08:
         2a:d0:ca:6d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUY1OgTYD0FS8+1CZG6HZSHtRZQkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDNUYyQTVGODYyNEM5NjM2OTc2NDI2NEIyMUI4QzI5
QkI1MjM5NDAeFw0yNDA0MDQwNzEwMDlaFw0yNTA0MDMwNzE1MDlaMDMxMTAvBgNV
BAMTKEFBRDk0RTJCMUEyNTAzRUQ3ODY3NTk0NEY5QUJFNkRDRTdGNUFBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzotOmwm2JtfH3/bxNERLW8Gr
QbruES/3VqHv66TlGEPP+faXDKW2rhCUL6MNQzrqN9tdWLSHW/zGHjMuJf9Tk3/8
zh77toWm9xhrAOPb5nHq9iNXW3PA0rB1splYFKyfFizowpp9r5rwzmR+Qtiu7Hg/
dyfelNQvIgJ91jHhsa3ZDr/TSesZBl1xSfwA2HY9cAY8bIt6Qey5sCiqarECHBd9
gGei5CSMlYunnMt34X4PtERwSjaFwz+3lh2VpYgJd8gdadXg/27ashHXkngQo+2h
0FFUDQT0L3SuG9w4VLlmSxPpPe6zR4bh/1aCS7uNlce01SKkeXUELeZBhzWvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqtlOKxolA+14Z1lE+avm3Of1qtkwHwYDVR0j
BBgwFoAUX8XypfhiTJY2l2QmSyG4wpu1I5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZqdXphb0xFb284aG1vY3o1dEozSkN3dFQ2Qmc5MnIzZ2FoRWFxbjg5
SmMvMS81RkM1RjJBNUY4NjI0Qzk2MzY5NzY0MjY0QjIxQjhDMjlCQjUyMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQzVGMkE1Rjg2MjRDOTYz
Njk3NjQyNjRCMjFCOEMyOUJCNTIzOTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2anV6YW9MRW9vOGhtb2N6NXRKM0pDd3RUNkJnOTJyM2dhaEVhcW44OUpjLzEv
MzIzODMwMzQzYTMyNjE2MzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTMxMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKsiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCJkS407dDjiM1XmFm22lBlCz84mdjViYBagNHeAq+9d4HPNk2pUN46BlGd
IofMM2nhguAPwWNRp8i90doRDXc/7hzKuDBRyGBLAuUb5LzTCA1d5UU5CuEyJcHn
kIPNmRAZWbf65ELuPKPJYm/ez4TExGyNoRvdd7vZcYJV5EKM4R8iKy0nIU9jc+dm
i10MlZIoUebaf/hO6nz/IwW96YEiJiqDfXkiBcc8cvIPUd8jHnLZqm69dF3TnHDb
wN0R2cdCyYDy5NP1S72eC6xpo55loJqqs1rA7Yzykbl/A2qGU9VD0jDfznrbq0Jl
hmtTgSfmP7RpImZi0d2WEggq0Mpt
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org