Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          0hgGPK6CHiXrjk9RhYZHa5i07fjtL6cBviH3abghRdY=
Subject key identifier:   4A:A2:6F:BE:3C:B4:53:19:C7:36:FE:F3:05:F1:11:F2:2C:EA:C9:F8
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       02711DDD6DBDD9F1A9D4F2D1BEDCCDEFCBD5DC40
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:15 +0000
ROA not before:           Thu 04 Apr 2024 09:13:15 +0000
ROA not after:            Thu 03 Apr 2025 09:18:15 +0000
asID:                     52613
IP address blocks:        2804:d3c:0:2::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:71:1d:dd:6d:bd:d9:f1:a9:d4:f2:d1:be:dc:cd:ef:cb:d5:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:15 2024 GMT
            Not After : Apr  3 09:18:15 2025 GMT
        Subject: CN=4AA26FBE3CB45319C736FEF305F111F22CEAC9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:d7:29:d1:47:ee:2b:b5:8a:e6:34:b4:bb:
                    1e:ae:d5:03:4b:68:46:9a:61:d5:5f:6b:8e:d6:84:
                    fd:80:4e:8f:6c:9f:d9:b4:6a:a3:3b:7e:5e:cc:52:
                    94:52:1e:60:6b:df:9e:a1:97:e5:af:11:61:7e:bb:
                    a3:e7:de:bb:b4:70:a9:f5:33:06:74:c0:7a:c2:82:
                    c2:9d:ad:ed:21:88:2d:90:6e:7d:d3:f3:b2:11:be:
                    e1:cd:a1:07:ee:96:70:44:d1:4f:72:eb:ee:64:d5:
                    ef:ac:d4:d8:ef:c8:ba:0a:3e:53:f5:3b:9b:73:5f:
                    44:65:06:3e:cd:c0:64:bc:5c:41:be:32:76:89:c2:
                    eb:6e:f2:6d:47:d6:73:ea:c1:a0:86:f0:fa:1e:ac:
                    c1:67:8b:4e:6f:e6:57:c7:52:8b:47:ed:57:89:77:
                    94:e4:2b:dc:90:17:ab:ba:61:53:76:30:67:48:4c:
                    d6:8e:7f:7f:bc:07:11:73:c7:06:a3:42:9a:41:a2:
                    85:b0:5b:cd:3f:f0:12:63:61:06:85:d9:7e:f8:0c:
                    f9:61:f6:6b:bc:df:1d:cb:fa:fd:9f:2e:52:ea:d2:
                    2b:ce:da:2f:f9:3a:f5:08:76:18:d2:3b:f1:ae:e5:
                    bf:61:d5:d2:74:46:b7:7a:87:ea:ab:f7:9f:a0:85:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A2:6F:BE:3C:B4:53:19:C7:36:FE:F3:05:F1:11:F2:2C:EA:C9:F8
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:0:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:06:17:a3:1b:d0:57:8f:d6:e4:69:e5:e6:ac:28:e2:2c:
         4e:65:49:10:06:7b:6a:e2:5f:1e:0a:a4:aa:1c:9b:49:ce:24:
         7e:dd:01:ef:25:e5:76:ac:55:4f:91:dd:bb:2c:2c:50:ca:74:
         74:ae:d4:61:91:e3:2f:17:fd:98:09:94:ec:b6:aa:c4:93:e2:
         93:6c:06:fa:c4:a4:4f:1a:85:9d:cd:3f:15:63:46:6a:6f:ce:
         20:23:9e:80:0c:da:9b:13:34:29:6d:17:a0:4a:98:48:ff:de:
         c4:90:fc:72:d1:d8:a9:8f:21:47:0a:e5:5c:1a:e9:03:e8:89:
         53:e0:0a:00:c1:48:b7:6f:7f:b4:ee:ac:cf:0b:f5:8a:5d:53:
         e9:54:62:8e:28:7b:9c:2a:8c:ed:0b:73:a1:5f:29:59:5c:ba:
         d3:58:cd:69:50:62:cc:15:32:93:a8:88:5c:ed:5e:30:2a:6b:
         f3:05:32:ba:81:74:df:61:1a:79:be:f5:e9:33:c9:eb:69:29:
         f6:2d:97:34:cd:2c:3a:c3:9a:df:02:81:4e:73:23:fc:29:90:
         d4:39:45:50:b1:46:3a:05:36:9e:9b:7c:fa:81:2a:e8:b8:94:
         c8:fc:4f:2a:8e:28:50:f1:5f:57:2d:9c:d8:44:ae:9c:bd:11:
         34:b0:84:de
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUAnEd3W292fGp1PLRvtzN78vV3EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQzVBMzVCOTQ3MDdENEVCNzEwNkY2QkE5RTlDRjg3
NkJBRTQ1NjAeFw0yNDA0MDQwOTEzMTVaFw0yNTA0MDMwOTE4MTVaMDMxMTAvBgNV
BAMTKDRBQTI2RkJFM0NCNDUzMTlDNzM2RkVGMzA1RjExMUYyMkNFQUM5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4idcp0UfuK7WK5jS0ux6u1QNL
aEaaYdVfa47WhP2ATo9sn9m0aqM7fl7MUpRSHmBr356hl+WvEWF+u6Pn3ru0cKn1
MwZ0wHrCgsKdre0hiC2Qbn3T87IRvuHNoQfulnBE0U9y6+5k1e+s1NjvyLoKPlP1
O5tzX0RlBj7NwGS8XEG+MnaJwutu8m1H1nPqwaCG8PoerMFni05v5lfHUotH7VeJ
d5TkK9yQF6u6YVN2MGdITNaOf3+8BxFzxwajQppBooWwW80/8BJjYQaF2X74DPlh
9mu83x3L+v2fLlLq0ivO2i/5OvUIdhjSO/Gu5b9h1dJ0Rrd6h+qr95+ghXUNAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUSqJvvjy0UxnHNv7zBfER8izqyfgwHwYDVR0j
BBgwFoAUkNxaNblHB9TrcQb2up6c+Ha65FYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMS85MERDNUEzNUI5NDcwN0Q0RUI3MTA2RjZCQTlFOUNGODc2QkFFNDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwREM1QTM1Qjk0NzA3RDRF
QjcxMDZGNkJBOUU5Q0Y4NzZCQUU0NTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzEv
MzIzODMwMzQzYTY0MzM2MzNhMzAzYTMyM2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIw
MzUzMjM2MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEF
BQcBBwEB/wQVMBMwEQQCAAIwCwMJACgEDTwAAAACMA0GCSqGSIb3DQEBCwUAA4IB
AQBvvAYXoxvQV4/W5Gnl5qwo4ixOZUkQBntq4l8eCqSqHJtJziR+3QHvJeV2rFVP
kd27LCxQynR0rtRhkeMvF/2YCZTstqrEk+KTbAb6xKRPGoWdzT8VY0Zqb84gI56A
DNqbEzQpbRegSphI/97EkPxy0dipjyFHCuVcGukD6IlT4AoAwUi3b3+07qzPC/WK
XVPpVGKOKHucKoztC3OhXylZXLrTWM1pUGLMFTKTqIhc7V4wKmvzBTK6gXTfYRp5
vvXpM8nraSn2LZc0zSw6w5rfAoFOcyP8KZDUOUVQsUY6BTaem3z6gSrouJTI/E8q
jihQ8V9XLZzYRK6cvRE0sITe
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:36 2024 by rpki-client on console-fra.rpki-client.org