Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa
File:                     323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa (raw, json)
Hash identifier:          jTHkmZDYuTXkyHPjr7NxGdzIEOYPNpnadC8dv/NtZOI=
Subject key identifier:   47:A6:93:B0:94:05:DA:45:29:EB:44:C8:9E:92:FD:DD:2C:1D:2C:91
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       7B0D25AAD81E6F2DC01F4E65AC0F911CBBC2612F
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:45 +0000
ROA not before:           Thu 04 Apr 2024 09:26:45 +0000
ROA not after:            Thu 03 Apr 2025 09:31:45 +0000
asID:                     263482
IP address blocks:        2804:1288:f999::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0d:25:aa:d8:1e:6f:2d:c0:1f:4e:65:ac:0f:91:1c:bb:c2:61:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:45 2024 GMT
            Not After : Apr  3 09:31:45 2025 GMT
        Subject: CN=47A693B09405DA4529EB44C89E92FDDD2C1D2C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:c0:3e:9f:b2:00:47:15:fc:be:22:85:6d:
                    f2:92:26:c8:bb:9f:e7:1d:b9:7b:1c:5e:9d:10:9d:
                    65:0d:f5:ce:1e:65:70:7e:54:01:2f:ef:42:24:9b:
                    7a:a7:fa:de:e6:bb:31:f3:e6:e1:53:08:5c:42:c3:
                    a7:8e:f2:2a:23:b6:6f:72:b5:31:61:9a:45:e6:55:
                    b4:a6:91:a5:ac:e4:67:54:a0:9a:57:90:fb:cf:f5:
                    69:31:af:ee:35:34:83:f6:f0:50:c2:94:6f:2f:21:
                    92:3f:3f:ad:56:00:89:62:e8:26:5b:6a:74:58:19:
                    5e:9e:2d:c9:9c:85:b9:42:4d:c8:9a:38:9b:dd:a5:
                    37:e0:c9:7f:e9:fb:64:6d:94:3a:44:16:7e:41:b4:
                    1f:a7:18:4f:75:30:e1:64:36:a6:1e:ec:b2:3d:78:
                    e9:d4:60:fe:03:9e:43:33:e6:2d:67:70:18:22:4c:
                    37:1e:da:02:a0:78:72:b6:f0:21:62:91:bf:39:15:
                    db:ec:b1:93:fa:4d:0a:b5:c5:2b:4d:41:8a:2a:fc:
                    40:8e:98:fc:e8:ac:c2:fe:34:c4:7b:ee:59:b2:29:
                    ae:59:75:cf:23:b8:f0:59:fc:d5:74:6d:f5:e9:2d:
                    b0:54:76:8e:5e:0e:d1:5e:b9:41:15:36:a8:89:a2:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A6:93:B0:94:05:DA:45:29:EB:44:C8:9E:92:FD:DD:2C:1D:2C:91
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1288:f999::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:6f:69:65:ab:f1:23:26:25:a3:b5:81:fc:28:d1:78:c7:ce:
         b8:c9:78:aa:9e:e4:a7:68:a2:b8:7c:bc:77:f4:58:68:9b:19:
         e9:63:6d:46:7e:1b:15:ca:47:31:c2:07:63:ee:c4:f8:e7:5e:
         d6:38:0a:f4:9c:cd:b2:38:29:63:49:41:7c:e2:8b:ff:0c:88:
         bd:65:aa:7e:6e:b6:a2:90:0b:ac:ad:f4:d1:24:4c:1e:27:54:
         0d:44:c9:62:1b:10:f9:95:a8:66:32:c0:10:90:50:a7:4f:27:
         73:80:3c:4a:c3:28:e6:48:42:bb:6c:81:c5:51:88:3d:c7:6f:
         78:3c:77:71:ac:89:c4:83:c3:45:54:49:08:3c:c8:97:6e:e6:
         c8:d3:8c:27:fe:55:e7:2b:87:7e:fd:a7:2c:5b:2c:2f:5d:55:
         e9:f0:9c:11:84:ca:c7:5a:28:a5:e5:84:68:1b:dc:ff:35:20:
         cb:67:4e:56:71:2a:03:4a:b0:0c:43:11:6a:7b:79:ba:a1:bd:
         2d:16:25:1f:54:c0:3e:bc:73:de:0d:8f:0f:14:97:aa:4d:00:
         c0:e2:1b:2a:0b:d1:23:26:c5:40:3b:ff:00:13:67:29:57:82:
         c2:01:4d:82:cc:ab:04:60:b5:0d:ac:d2:d3:a8:df:b9:03:01:
         cf:93:ab:56
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUew0lqtgeby3AH05lrA+RHLvCYS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOTRBRkY0QzU0MDI3RDU2NDAyQkZDMjdCN0ExRUUy
OUZDQkE1MjAeFw0yNDA0MDQwOTI2NDVaFw0yNTA0MDMwOTMxNDVaMDMxMTAvBgNV
BAMTKDQ3QTY5M0IwOTQwNURBNDUyOUVCNDRDODlFOTJGREREMkMxRDJDOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZcA+n7IARxX8viKFbfKSJsi7
n+cduXscXp0QnWUN9c4eZXB+VAEv70Ikm3qn+t7muzHz5uFTCFxCw6eO8iojtm9y
tTFhmkXmVbSmkaWs5GdUoJpXkPvP9Wkxr+41NIP28FDClG8vIZI/P61WAIli6CZb
anRYGV6eLcmchblCTciaOJvdpTfgyX/p+2RtlDpEFn5BtB+nGE91MOFkNqYe7LI9
eOnUYP4DnkMz5i1ncBgiTDce2gKgeHK28CFikb85FdvssZP6TQq1xStNQYoq/ECO
mPzorML+NMR77lmyKa5Zdc8juPBZ/NV0bfXpLbBUdo5eDtFeuUEVNqiJohfzAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUR6aTsJQF2kUp60TInpL93SwdLJEwHwYDVR0j
BBgwFoAU+/lK/0xUAn1WQCv8J7eh7in8ulIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMS9GQkY5NEFGRjRDNTQwMjdENTY0MDJCRkMyN0I3QTFFRTI5RkNCQTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjk0QUZGNEM1NDAyN0Q1
NjQwMkJGQzI3QjdBMUVFMjlGQ0JBNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RITVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzEv
MzIzODMwMzQzYTMxMzIzODM4M2E2NjM5MzkzOTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMzM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEEoj5mTANBgkqhkiG9w0BAQsF
AAOCAQEArW9pZavxIyYlo7WB/CjReMfOuMl4qp7kp2iiuHy8d/RYaJsZ6WNtRn4b
FcpHMcIHY+7E+Ode1jgK9JzNsjgpY0lBfOKL/wyIvWWqfm62opALrK300SRMHidU
DUTJYhsQ+ZWoZjLAEJBQp08nc4A8SsMo5khCu2yBxVGIPcdveDx3cayJxIPDRVRJ
CDzIl27myNOMJ/5V5yuHfv2nLFssL11V6fCcEYTKx1oopeWEaBvc/zUgy2dOVnEq
A0qwDEMRant5uqG9LRYlH1TAPrxz3g2PDxSXqk0AwOIbKgvRIybFQDv/ABNnKVeC
wgFNgsyrBGC1DazS06jfuQMBz5OrVg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:59 2024 by rpki-client on console-fra.rpki-client.org