Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31363a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a31363a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          0YcTPPS3qsyoHf+X1eLYkyalEYsWRyHGDnSl0/m9rO4=
Subject key identifier:   73:08:A1:90:31:9D:02:38:F0:12:34:FD:4A:69:85:F4:AD:14:13:64
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       654D560DBCDAD7BDEBABA61A9A7C8965A2355791
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31363a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Tue 11 Jun 2024 18:07:51 +0000
ROA not before:           Tue 11 Jun 2024 18:02:51 +0000
ROA not after:            Tue 10 Jun 2025 18:07:51 +0000
asID:                     263541
IP address blocks:        2804:1398:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:56:0d:bc:da:d7:bd:eb:ab:a6:1a:9a:7c:89:65:a2:35:57:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Jun 11 18:02:51 2024 GMT
            Not After : Jun 10 18:07:51 2025 GMT
        Subject: CN=7308A190319D0238F01234FD4A6985F4AD141364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:62:5a:86:e6:c9:cc:b8:86:0a:95:04:72:d0:
                    e8:66:0e:9c:0c:ce:8e:8d:98:82:bf:28:84:09:4a:
                    39:db:f3:8f:cf:f9:7b:41:f9:9d:c6:af:df:0b:3f:
                    e6:b4:e8:d0:5c:5d:dd:ee:ba:e1:ff:1d:27:e7:c8:
                    ff:a9:20:e8:a9:60:71:f3:be:4b:a0:df:db:82:10:
                    4a:f5:34:f9:3c:d8:26:52:29:11:e8:95:63:99:da:
                    07:dc:42:97:54:f6:90:5b:a6:8b:e0:4c:82:f1:57:
                    be:40:99:c5:0c:50:db:03:d4:4a:ff:66:be:ea:13:
                    3c:f6:bb:5b:e0:0c:70:7c:9b:f0:69:21:16:4c:fc:
                    5c:e7:08:2b:77:5e:81:93:22:22:4f:be:97:f8:83:
                    0f:05:0f:6f:09:c0:4c:9e:a2:66:57:7f:e8:d9:1f:
                    be:fe:58:3b:db:e4:11:46:61:88:1a:54:c3:45:91:
                    70:63:a1:97:f6:96:f2:07:d2:a6:d7:c8:0c:f9:7d:
                    ac:77:82:a2:34:87:3e:2c:fb:38:d7:92:fd:0c:b3:
                    fc:7d:f5:82:29:a8:ee:9e:c5:d6:7a:83:47:8b:93:
                    7a:1b:20:51:85:85:2d:19:dc:05:3c:21:24:c1:63:
                    ec:de:81:a8:ca:81:87:ee:a6:bf:d4:5d:e8:03:7e:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:A1:90:31:9D:02:38:F0:12:34:FD:4A:69:85:F4:AD:14:13:64
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31363a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:96:64:77:17:2a:10:27:d0:66:79:b2:16:8f:a3:53:09:
         8c:50:ab:3c:5e:d4:71:f1:50:e3:a9:9c:b6:eb:e3:3b:2e:cd:
         91:e6:b7:a0:6a:f2:45:b6:0a:9a:e8:7e:30:5a:bc:ee:5d:09:
         d1:64:da:82:01:7b:43:62:02:37:13:ce:6c:7c:3f:9e:d6:78:
         71:99:4f:74:c7:d1:80:e5:8f:14:04:0e:70:4d:ea:7d:f5:1d:
         eb:2e:08:f7:51:01:e6:58:d8:47:8e:bf:32:4a:c2:c0:56:f8:
         fc:85:6e:0c:e8:53:0d:df:9f:b7:03:13:6b:fd:1f:d5:25:6d:
         a1:68:9f:22:28:92:e6:b7:d4:af:0e:71:32:d7:8c:9c:08:1f:
         17:bd:6b:3d:c8:9d:48:fe:46:aa:39:88:38:b3:d2:af:db:5f:
         a1:7e:3c:68:f4:f0:40:f5:65:cc:5f:7b:4f:86:99:8e:ac:5f:
         92:34:45:27:4a:13:a0:19:0c:06:0e:fe:19:48:5a:f1:5f:09:
         85:54:ea:24:a3:91:e6:29:c1:f0:95:b5:bc:a0:ed:44:06:8b:
         46:81:56:04:43:77:40:8f:65:b4:26:9c:b6:5d:14:ab:bd:05:
         a9:ed:dc:fd:2c:f9:a3:d8:b9:9b:37:98:23:23:0e:9d:38:94:
         f0:e0:1b:27
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUZU1WDbza173rq6YamnyJZaI1V5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI2RUJDMUI3MTgyQzY0OTgyOTQ4REQ3QjhDQjE2NkYy
MEM0NjQ5RTAeFw0yNDA2MTExODAyNTFaFw0yNTA2MTAxODA3NTFaMDMxMTAvBgNV
BAMTKDczMDhBMTkwMzE5RDAyMzhGMDEyMzRGRDRBNjk4NUY0QUQxNDEzNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2YlqG5snMuIYKlQRy0OhmDpwM
zo6NmIK/KIQJSjnb84/P+XtB+Z3Gr98LP+a06NBcXd3uuuH/HSfnyP+pIOipYHHz
vkug39uCEEr1NPk82CZSKRHolWOZ2gfcQpdU9pBbpovgTILxV75AmcUMUNsD1Er/
Zr7qEzz2u1vgDHB8m/BpIRZM/FznCCt3XoGTIiJPvpf4gw8FD28JwEyeomZXf+jZ
H77+WDvb5BFGYYgaVMNFkXBjoZf2lvIH0qbXyAz5fax3gqI0hz4s+zjXkv0Ms/x9
9YIpqO6exdZ6g0eLk3obIFGFhS0Z3AU8ISTBY+zegajKgYfupr/UXegDfqftAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUcwihkDGdAjjwEjT9SmmF9K0UE2QwHwYDVR0j
BBgwFoAUq268G3GCxkmClI3XuMsWbyDEZJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC9BQjZFQkMxQjcxODJDNjQ5ODI5NDhERDdCOENCMTY2RjIwQzQ2NDlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCNkVCQzFCNzE4MkM2NDk4
Mjk0OEREN0I4Q0IxNjZGMjBDNDY0OUUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzIzODMwMzQzYTMxMzMzOTM4M2EzMTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjMzMzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQTmAAWMA0GCSqGSIb3DQEBCwUAA4IB
AQB8C5ZkdxcqECfQZnmyFo+jUwmMUKs8XtRx8VDjqZy26+M7Ls2R5regavJFtgqa
6H4wWrzuXQnRZNqCAXtDYgI3E85sfD+e1nhxmU90x9GA5Y8UBA5wTep99R3rLgj3
UQHmWNhHjr8ySsLAVvj8hW4M6FMN35+3AxNr/R/VJW2haJ8iKJLmt9SvDnEy14yc
CB8XvWs9yJ1I/kaqOYg4s9Kv21+hfjxo9PBA9WXMX3tPhpmOrF+SNEUnShOgGQwG
Dv4ZSFrxXwmFVOoko5HmKcHwlbW8oO1EBotGgVYEQ3dAj2W0Jpy2XRSrvQWp7dz9
LPmj2LmbN5gjIw6dOJTw4Bsn
-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org