Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa
File:                     323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa (raw, json)
Hash identifier:          WKOcXwN/nLQRdrFxgPyfZQtR+BUa2zFucgJK5s4jl1I=
Subject key identifier:   93:C4:C4:D6:F3:36:A9:EF:54:27:05:F9:7A:10:A5:51:B0:EE:69:47
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       5E5B943CE10B7EE4E76D380E8A3A750D7C690FC2
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        2804:16d8:5000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5b:94:3c:e1:0b:7e:e4:e7:6d:38:0e:8a:3a:75:0d:7c:69:0f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=93C4C4D6F336A9EF542705F97A10A551B0EE6947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:97:dc:b7:dd:33:62:dc:11:41:e7:8c:62:
                    79:dd:16:cb:86:ee:a8:fa:18:db:9f:f8:83:f7:fd:
                    d0:45:fd:cf:fa:0c:38:2f:2f:29:d9:84:30:64:0b:
                    fe:7d:47:e0:a9:0d:e7:a6:25:fe:4e:91:ab:0c:44:
                    38:5f:fc:a8:e7:f5:5e:95:e9:b2:b0:9f:b1:7b:9d:
                    b1:98:4d:76:c7:18:5c:9f:26:80:ac:50:b2:da:fc:
                    b7:e1:cf:34:18:ca:17:0d:ac:ef:67:93:44:5d:cd:
                    8b:d1:51:27:7b:33:cc:7a:13:a6:2c:69:13:fb:03:
                    57:25:73:74:0e:69:42:fa:6d:6e:2c:0f:74:8a:e7:
                    ef:b3:11:9a:e1:bb:ba:25:8c:0f:9f:20:9d:73:ad:
                    2c:00:88:a7:52:71:34:68:4f:9a:2c:50:18:c7:11:
                    76:47:1e:d1:90:de:f3:f3:0e:2d:10:47:37:dd:1d:
                    5a:2b:e6:14:3e:ec:a3:ac:a4:d9:b4:8e:e2:f5:1c:
                    d6:2b:f6:30:e3:60:0c:00:1a:73:1f:09:b0:8b:47:
                    6e:b5:d5:30:83:bd:33:e4:65:80:7f:16:4e:3b:28:
                    75:3e:9b:39:e4:ce:08:9b:15:70:52:22:a4:8e:92:
                    e7:75:03:68:08:53:83:18:56:22:ac:f0:be:4a:31:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:C4:D6:F3:36:A9:EF:54:27:05:F9:7A:10:A5:51:B0:EE:69:47
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:5000::/37

    Signature Algorithm: sha256WithRSAEncryption
         1b:75:a4:09:6f:ed:e7:10:62:e5:40:0c:55:88:1b:85:c4:74:
         59:12:f1:30:4e:0d:c7:92:58:76:ec:e9:e6:4b:7a:90:12:c2:
         1a:ab:a1:19:56:27:e8:49:3d:7e:75:06:ce:bd:10:ef:94:89:
         99:c4:90:27:7d:e4:d7:a9:21:9c:c5:4b:d5:06:03:dd:1d:5b:
         4b:2a:bc:bc:d6:03:71:38:1b:ab:b5:91:17:a3:1e:25:57:28:
         85:95:e2:3b:8f:3e:5c:f3:4e:47:a8:6d:47:6f:b9:ed:4c:5f:
         6a:99:fa:94:06:12:d3:da:b2:9e:23:6f:37:ba:82:37:1d:c1:
         3a:94:e7:5e:e9:68:83:4b:da:25:7e:6c:7f:f3:29:f8:98:2f:
         71:38:31:8a:a8:8f:4b:f8:5e:cb:46:31:6a:c5:47:e9:9d:e4:
         8a:2c:f1:60:4b:56:7f:85:40:71:cc:b2:30:6e:22:c8:df:82:
         d4:97:de:dc:ff:10:ba:dd:ee:43:7c:03:3a:0f:65:da:f3:73:
         34:4b:bc:d4:5f:8d:80:db:6d:ce:a1:a6:0a:3d:46:33:d9:5b:
         69:61:b4:da:35:13:b1:ea:34:a6:47:b1:52:5f:46:9d:51:a8:
         9d:ab:a4:d8:89:03:7e:d2:b1:1d:5c:f8:e3:b4:e3:ba:05:8b:
         b2:15:b6:ac
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXluUPOELfuTnbTgOijp1DXxpD8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjZaFw0yNTA3MTQxMzQyMjZaMDMxMTAvBgNV
BAMTKDkzQzRDNEQ2RjMzNkE5RUY1NDI3MDVGOTdBMTBBNTUxQjBFRTY5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHJfct90zYtwRQeeMYnndFsuG
7qj6GNuf+IP3/dBF/c/6DDgvLynZhDBkC/59R+CpDeemJf5OkasMRDhf/Kjn9V6V
6bKwn7F7nbGYTXbHGFyfJoCsULLa/LfhzzQYyhcNrO9nk0RdzYvRUSd7M8x6E6Ys
aRP7A1clc3QOaUL6bW4sD3SK5++zEZrhu7oljA+fIJ1zrSwAiKdScTRoT5osUBjH
EXZHHtGQ3vPzDi0QRzfdHVor5hQ+7KOspNm0juL1HNYr9jDjYAwAGnMfCbCLR261
1TCDvTPkZYB/Fk47KHU+mznkzgibFXBSIqSOkud1A2gIU4MYViKs8L5KMYynAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUk8TE1vM2qe9UJwX5ehClUbDuaUcwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzNTMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFthQMA0GCSqGSIb3DQEBCwUA
A4IBAQAbdaQJb+3nEGLlQAxViBuFxHRZEvEwTg3Hklh27OnmS3qQEsIaq6EZVifo
ST1+dQbOvRDvlImZxJAnfeTXqSGcxUvVBgPdHVtLKry81gNxOBurtZEXox4lVyiF
leI7jz5c805HqG1Hb7ntTF9qmfqUBhLT2rKeI283uoI3HcE6lOde6WiDS9olfmx/
8yn4mC9xODGKqI9L+F7LRjFqxUfpneSKLPFgS1Z/hUBxzLIwbiLI34LUl97c/xC6
3e5DfAM6D2Xa83M0S7zUX42A223OoaYKPUYz2VtpYbTaNROx6jSmR7FSX0adUaid
q6TYiQN+0rEdXPjjtOO6BYuyFbas
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org