Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33342d3334203d3e20323635313138.roa
File:                     323830343a326163383a3a2f33342d3334203d3e20323635313138.roa (raw, json)
Hash identifier:          YQ2xhLknjfSw66D93LLjwcYD3nMikZcujnM3GW0X3d0=
Subject key identifier:   2B:2F:79:9B:A7:19:EA:DF:40:13:60:04:27:34:C7:D1:3E:41:9E:EF
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       0F3AE5443F65E743B534E081D7AE5D11B4D4878C
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33342d3334203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:09 +0000
ROA not before:           Thu 04 Apr 2024 07:10:09 +0000
ROA not after:            Thu 03 Apr 2025 07:15:09 +0000
asID:                     265118
IP address blocks:        2804:2ac8::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3a:e5:44:3f:65:e7:43:b5:34:e0:81:d7:ae:5d:11:b4:d4:87:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:09 2024 GMT
            Not After : Apr  3 07:15:09 2025 GMT
        Subject: CN=2B2F799BA719EADF401360042734C7D13E419EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:36:58:5d:84:c6:55:bb:f6:cb:72:0e:ae:
                    1e:29:09:79:f0:83:06:a0:82:87:de:47:b4:d3:2a:
                    14:5d:39:6b:76:37:6f:dc:8f:ea:6f:22:51:a9:c8:
                    4b:6b:2f:df:f1:74:9f:d2:eb:4f:5e:bf:2f:80:e7:
                    cd:1f:19:e3:1e:33:30:20:bf:aa:79:37:50:eb:5b:
                    93:8f:84:91:7b:e7:ca:6f:e2:01:41:e7:3d:bc:07:
                    2f:62:6f:bc:27:cd:88:e3:cc:7e:29:2c:66:81:7c:
                    d2:c6:17:0a:c1:7c:b3:de:35:94:a7:4d:86:e0:e6:
                    e1:cd:80:a6:df:b0:71:d0:18:61:45:d1:81:fa:dd:
                    87:4a:b9:e0:ad:37:85:67:ed:84:ee:de:ba:29:da:
                    a5:1c:d1:0e:8f:12:64:71:f3:68:e7:2f:79:14:a8:
                    82:17:62:0f:ce:49:59:04:07:18:3a:4b:06:9d:88:
                    d5:51:49:1f:67:eb:82:9b:58:53:12:04:a2:23:25:
                    13:be:96:4e:ec:7f:76:52:89:e4:12:c8:e9:70:e6:
                    db:a8:ae:74:aa:3f:5a:35:89:22:ec:2d:22:4d:8a:
                    2e:f2:c5:e7:5c:4f:c2:18:57:0d:19:b4:aa:bc:93:
                    83:15:06:2b:61:3b:46:dd:7f:8d:01:df:91:02:b7:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2F:79:9B:A7:19:EA:DF:40:13:60:04:27:34:C7:D1:3E:41:9E:EF
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33342d3334203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:42:1a:7e:9b:73:e9:af:d6:7b:94:99:e5:0a:4e:4f:ec:
         0e:e3:d2:a9:ca:1d:06:86:c7:0e:64:c6:31:e9:9e:fe:e5:34:
         c0:6e:b9:f7:27:0a:6a:d2:8c:a6:dd:c6:da:be:4d:b6:83:6c:
         c7:eb:d0:42:eb:23:b4:2e:31:8a:3c:75:06:49:86:b3:6a:60:
         3f:e4:ec:8d:2b:73:0a:5a:59:c3:69:ff:bf:fa:3f:30:22:67:
         d1:98:8d:2d:c7:ac:3d:6b:bf:00:5a:76:49:df:33:e4:ff:c4:
         b7:38:ee:bb:08:c1:c8:a3:8e:04:42:f2:2e:08:49:59:9e:1b:
         40:d3:db:c0:63:21:56:95:78:ec:ab:a5:27:3f:04:df:21:b5:
         08:99:13:c3:b0:3b:43:5f:d5:28:2a:45:c7:e9:8b:a0:4e:72:
         4d:73:99:5c:c8:d3:0a:08:20:e9:bf:b5:0f:3e:b6:fb:f0:20:
         85:12:df:7c:cd:2c:47:06:c6:4b:83:0f:43:f5:92:ec:d8:14:
         33:75:c1:27:7a:2a:e2:43:52:9a:f9:a5:46:58:1b:3b:f1:bc:
         50:2c:a3:b9:70:ab:68:82:a8:40:b3:a0:58:cd:0f:22:03:bd:
         a6:76:aa:66:9b:ec:4c:a1:29:32:3b:b9:90:fd:10:02:3c:5c:
         10:8f:8c:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDzrlRD9l50O1NOCB165dEbTUh4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDNUYyQTVGODYyNEM5NjM2OTc2NDI2NEIyMUI4QzI5
QkI1MjM5NDAeFw0yNDA0MDQwNzEwMDlaFw0yNTA0MDMwNzE1MDlaMDMxMTAvBgNV
BAMTKDJCMkY3OTlCQTcxOUVBREY0MDEzNjAwNDI3MzRDN0QxM0U0MTlFRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTDZYXYTGVbv2y3IOrh4pCXnw
gwaggofeR7TTKhRdOWt2N2/cj+pvIlGpyEtrL9/xdJ/S609evy+A580fGeMeMzAg
v6p5N1DrW5OPhJF758pv4gFB5z28By9ib7wnzYjjzH4pLGaBfNLGFwrBfLPeNZSn
TYbg5uHNgKbfsHHQGGFF0YH63YdKueCtN4Vn7YTu3rop2qUc0Q6PEmRx82jnL3kU
qIIXYg/OSVkEBxg6SwadiNVRSR9n64KbWFMSBKIjJRO+lk7sf3ZSieQSyOlw5tuo
rnSqP1o1iSLsLSJNii7yxedcT8IYVw0ZtKq8k4MVBithO0bdf40B35ECt3hPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKy95m6cZ6t9AE2AEJzTH0T5Bnu8wHwYDVR0j
BBgwFoAUX8XypfhiTJY2l2QmSyG4wpu1I5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZqdXphb0xFb284aG1vY3o1dEozSkN3dFQ2Qmc5MnIzZ2FoRWFxbjg5
SmMvMS81RkM1RjJBNUY4NjI0Qzk2MzY5NzY0MjY0QjIxQjhDMjlCQjUyMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQzVGMkE1Rjg2MjRDOTYz
Njk3NjQyNjRCMjFCOEMyOUJCNTIzOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2anV6YW9MRW9vOGhtb2N6NXRKM0pDd3RUNkJnOTJyM2dhaEVhcW44OUpjLzEv
MzIzODMwMzQzYTMyNjE2MzM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM1
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQqyAAwDQYJKoZIhvcNAQELBQADggEBAGhbQhp+
m3Ppr9Z7lJnlCk5P7A7j0qnKHQaGxw5kxjHpnv7lNMBuufcnCmrSjKbdxtq+TbaD
bMfr0ELrI7QuMYo8dQZJhrNqYD/k7I0rcwpaWcNp/7/6PzAiZ9GYjS3HrD1rvwBa
dknfM+T/xLc47rsIwcijjgRC8i4ISVmeG0DT28BjIVaVeOyrpSc/BN8htQiZE8Ow
O0Nf1SgqRcfpi6BOck1zmVzI0woIIOm/tQ8+tvvwIIUS33zNLEcGxkuDD0P1kuzY
FDN1wSd6KuJDUpr5pUZYGzvxvFAso7lwq2iCqECzoFjNDyIDvaZ2qmab7EyhKTI7
uZD9EAI8XBCPjN4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org