Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/323830343a323666633a3a2f33322d3438203d3e20323633383638.roa
File:                     323830343a323666633a3a2f33322d3438203d3e20323633383638.roa (raw, json)
Hash identifier:          DRMb8lrM3aK5XBYXXMPgoDWS+bHOXYhUEXztXXeVkRo=
Subject key identifier:   7B:90:E1:AC:E9:25:6E:13:4B:5F:D2:F1:53:A4:6A:25:CD:28:35:94
Certificate issuer:       /CN=FD5E4E3AECD6708F17553F15E6CFE9D262231785
Certificate serial:       49C51A39190845DAB26CBD30BB3EE1F53BBCE63C
Authority key identifier: FD:5E:4E:3A:EC:D6:70:8F:17:55:3F:15:E6:CF:E9:D2:62:23:17:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/323830343a323666633a3a2f33322d3438203d3e20323633383638.roa
Signing time:             Thu 04 Apr 2024 04:10:15 +0000
ROA not before:           Thu 04 Apr 2024 04:05:15 +0000
ROA not after:            Thu 03 Apr 2025 04:10:15 +0000
asID:                     263868
IP address blocks:        2804:26fc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.crl
                          rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:1a:39:19:08:45:da:b2:6c:bd:30:bb:3e:e1:f5:3b:bc:e6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5E4E3AECD6708F17553F15E6CFE9D262231785
        Validity
            Not Before: Apr  4 04:05:15 2024 GMT
            Not After : Apr  3 04:10:15 2025 GMT
        Subject: CN=7B90E1ACE9256E134B5FD2F153A46A25CD283594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:b6:da:36:08:ee:88:28:34:8e:85:1c:f3:
                    e5:98:1a:53:9a:d7:c0:c6:9e:85:11:c5:6b:bd:7f:
                    bf:34:d3:ac:e6:80:08:d2:d1:75:e3:d1:7d:8c:6f:
                    9f:84:c5:96:53:37:e2:b8:36:f8:b6:33:9a:2a:05:
                    90:66:30:b0:3b:90:af:7d:23:18:ce:71:43:b8:e3:
                    64:45:10:9a:86:43:5a:d4:e7:69:66:5e:a0:09:e8:
                    36:ce:9b:c5:68:47:b2:fd:fe:02:9f:b1:fa:20:f5:
                    0c:16:8f:cb:06:4f:eb:6c:16:e8:1a:0e:5d:0f:0c:
                    e1:9c:56:99:9c:c7:8d:39:df:9d:87:ba:5d:3e:1e:
                    e5:c1:5d:05:ad:ec:a0:f9:62:7c:ce:fc:d1:0c:13:
                    3d:c3:69:e1:34:e5:d3:97:20:8a:ee:b8:a7:8d:62:
                    b7:cc:a0:01:d3:ae:05:be:3f:81:3f:ac:5e:f8:d3:
                    58:0d:ab:91:f7:1c:49:bf:72:b6:ac:8b:c2:f6:cc:
                    e7:2f:15:cf:d0:ec:44:31:4f:ff:59:a3:81:0b:d9:
                    d3:15:ca:2a:10:8b:85:58:d3:1d:f1:6e:4e:1f:39:
                    8f:71:ef:00:08:33:f2:c2:a5:92:62:a6:84:16:70:
                    4f:d2:d5:77:74:06:d9:91:0c:18:85:69:b0:ae:92:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:E1:AC:E9:25:6E:13:4B:5F:D2:F1:53:A4:6A:25:CD:28:35:94
            X509v3 Authority Key Identifier:
                keyid:FD:5E:4E:3A:EC:D6:70:8F:17:55:3F:15:E6:CF:E9:D2:62:23:17:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/323830343a323666633a3a2f33322d3438203d3e20323633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:21:4e:92:f8:de:25:e3:6a:25:2d:0a:d0:f2:ed:f3:26:a4:
         05:3d:ae:c5:d0:81:a9:54:aa:56:03:b5:fb:98:c5:17:cb:61:
         bf:20:b8:f6:38:51:ff:14:8a:6f:82:3d:d2:58:fa:b9:df:d5:
         9a:09:4b:ce:02:03:05:b6:b0:1a:9f:93:84:4c:b0:b4:3f:68:
         0f:0b:9d:82:0d:7a:90:e9:da:b1:01:20:12:a0:dc:20:7a:0d:
         b0:51:60:9f:c7:16:a5:03:b1:67:bf:f0:5c:69:5d:68:63:3e:
         ca:0e:54:8d:63:2a:04:8b:57:25:d2:78:2d:d8:1f:7f:c4:e4:
         6d:50:84:c1:30:7b:c6:1f:7c:e1:84:81:49:f4:28:78:45:0d:
         f0:74:47:25:2f:f7:4f:64:ee:4f:c9:e2:0a:f7:d7:6d:77:5a:
         08:38:48:c6:70:3b:8a:29:f2:a4:28:b4:7f:63:94:12:84:1e:
         bd:9f:b9:65:b2:24:0e:7a:f2:5e:d7:b7:5c:c3:1d:3e:58:51:
         c3:7d:bc:31:d7:34:6a:48:c0:ac:7f:ad:49:19:ce:d6:46:e4:
         46:88:fc:27:aa:de:c5:75:fa:7d:58:d2:a3:97:cb:09:e2:9b:
         2d:16:a8:36:7c:e8:7a:49:c7:e3:fe:a6:a2:9c:ff:e6:1b:aa:
         22:20:66:83
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUScUaORkIRdqybL0wuz7h9Tu85jwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1RTRFM0FFQ0Q2NzA4RjE3NTUzRjE1RTZDRkU5RDI2
MjIzMTc4NTAeFw0yNDA0MDQwNDA1MTVaFw0yNTA0MDMwNDEwMTVaMDMxMTAvBgNV
BAMTKDdCOTBFMUFDRTkyNTZFMTM0QjVGRDJGMTUzQTQ2QTI1Q0QyODM1OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5orbaNgjuiCg0joUc8+WYGlOa
18DGnoURxWu9f78006zmgAjS0XXj0X2Mb5+ExZZTN+K4Nvi2M5oqBZBmMLA7kK99
IxjOcUO442RFEJqGQ1rU52lmXqAJ6DbOm8VoR7L9/gKfsfog9QwWj8sGT+tsFuga
Dl0PDOGcVpmcx405352Hul0+HuXBXQWt7KD5YnzO/NEMEz3DaeE05dOXIIruuKeN
YrfMoAHTrgW+P4E/rF7401gNq5H3HEm/crasi8L2zOcvFc/Q7EQxT/9Zo4EL2dMV
yioQi4VY0x3xbk4fOY9x7wAIM/LCpZJipoQWcE/S1Xd0BtmRDBiFabCukrexAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUe5DhrOklbhNLX9LxU6RqJc0oNZQwHwYDVR0j
BBgwFoAU/V5OOuzWcI8XVT8V5s/p0mIjF4UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZmVXlpZkNnQWkzdndxclV5NkhIaFlCNFNzRGpnQ05jeThQQWZ5aGhi
YVIvMS9GRDVFNEUzQUVDRDY3MDhGMTc1NTNGMTVFNkNGRTlEMjYyMjMxNzg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENUU0RTNBRUNENjcwOEYx
NzU1M0YxNUU2Q0ZFOUQyNjIyMzE3ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGZlV5aWZDZ0FpM3Z3cXJVeTZISGhZQjRTc0RqZ0NOY3k4UEFmeWhoYmFSLzEv
MzIzODMwMzQzYTMyMzY2NjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQm/DANBgkqhkiG9w0BAQsFAAOCAQEAiSFOkvje
JeNqJS0K0PLt8yakBT2uxdCBqVSqVgO1+5jFF8thvyC49jhR/xSKb4I90lj6ud/V
mglLzgIDBbawGp+ThEywtD9oDwudgg16kOnasQEgEqDcIHoNsFFgn8cWpQOxZ7/w
XGldaGM+yg5UjWMqBItXJdJ4Ldgff8TkbVCEwTB7xh984YSBSfQoeEUN8HRHJS/3
T2TuT8niCvfXbXdaCDhIxnA7iinypCi0f2OUEoQevZ+5ZbIkDnryXte3XMMdPlhR
w328Mdc0akjArH+tSRnO1kbkRoj8J6rexXX6fVjSo5fLCeKbLRaoNnzoeknH4/6m
opz/5huqIiBmgw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org