Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
File:                     323830343a386365303a3a2f33322d3438203d3e20323733333230.roa (raw, json)
Hash identifier:          r/BRuiwGDb2l1+/WCN81mTz6dDcGYXbvaF8j78BvAEw=
Subject key identifier:   98:F8:B2:1F:1A:D9:D4:48:4A:C5:7B:F9:DA:AC:05:3A:62:20:93:64
Certificate issuer:       /CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
Certificate serial:       5CB6DA6730B1E2D5C1C066DE2DE3DBACD8385E61
Authority key identifier: AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
Signing time:             Mon 05 Aug 2024 20:11:53 +0000
ROA not before:           Mon 05 Aug 2024 20:06:53 +0000
ROA not after:            Mon 04 Aug 2025 20:11:53 +0000
asID:                     273320
IP address blocks:        2804:8ce0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl
                          rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b6:da:67:30:b1:e2:d5:c1:c0:66:de:2d:e3:db:ac:d8:38:5e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
        Validity
            Not Before: Aug  5 20:06:53 2024 GMT
            Not After : Aug  4 20:11:53 2025 GMT
        Subject: CN=98F8B21F1AD9D4484AC57BF9DAAC053A62209364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:86:a9:83:8e:7d:04:8f:87:88:d5:3e:ac:
                    2a:17:c5:cf:a7:23:ef:8b:14:c1:4b:c0:cc:b6:64:
                    6c:f9:6b:81:7a:16:f0:62:2a:8d:0f:03:f6:e2:4b:
                    41:a5:5e:31:f4:1a:d2:77:81:37:97:f6:9b:42:67:
                    da:16:e6:c3:29:5e:23:e5:f0:0d:e8:62:cb:34:81:
                    c8:80:c5:18:64:89:61:b4:58:13:c7:48:4e:08:0a:
                    5d:ca:e3:5d:f5:fb:fe:4e:83:48:af:b2:80:68:d7:
                    c1:75:fe:5b:02:d2:9f:21:8c:7c:2e:0a:b4:cc:d4:
                    86:bb:f9:9d:81:13:8a:72:27:e7:65:8c:b0:7c:0b:
                    02:1a:32:fc:a7:cf:55:6b:16:4c:72:25:df:cc:2c:
                    46:7d:d3:d7:ff:d9:ff:d9:24:6b:f4:91:a6:95:c1:
                    e7:9f:03:6d:e3:0b:a0:0a:1e:cb:9b:7e:58:52:82:
                    c3:04:47:83:76:c2:a1:25:25:9c:d3:68:ce:d6:6d:
                    61:6f:3d:20:12:19:52:3c:c6:23:59:3a:05:57:d5:
                    d8:9f:15:45:5d:a4:da:3c:d5:e6:8e:9b:2b:9a:32:
                    75:81:c0:23:be:1e:c2:e1:6a:92:80:f3:48:3b:7c:
                    fa:0a:20:0b:48:e9:4f:8b:e5:32:33:4c:e7:8b:bc:
                    6a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:B2:1F:1A:D9:D4:48:4A:C5:7B:F9:DA:AC:05:3A:62:20:93:64
            X509v3 Authority Key Identifier:
                keyid:AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:0a:fc:f2:1d:46:73:ff:76:64:21:fd:15:f9:5d:af:da:94:
         c3:71:3a:c4:06:6a:f9:21:81:46:b4:e7:40:e4:ca:51:90:51:
         29:8d:1e:7b:a1:87:2a:79:a0:d4:80:63:31:08:06:63:eb:11:
         29:d9:f6:74:52:0d:cb:e6:f7:12:31:bb:78:11:dc:c8:1e:7e:
         e7:c9:d5:e6:91:8a:4f:61:3b:ef:2a:57:66:eb:d9:10:fb:9a:
         8d:b8:a6:70:2b:5c:d8:86:6a:ae:19:0a:76:a3:61:e8:6c:50:
         b2:3f:67:9e:5e:a1:23:16:55:ce:d4:75:02:24:fd:77:f2:a1:
         81:33:d0:7d:6d:d5:87:2e:17:8b:12:b3:e9:b9:e5:bf:d1:72:
         04:20:0f:43:00:46:4e:c6:bf:98:08:b5:4c:6a:d0:ba:a4:8a:
         cf:d4:fc:7d:af:32:69:47:a5:f2:63:82:60:ae:aa:c3:d8:a7:
         bd:02:1a:de:61:5a:3c:fa:70:53:9c:1f:4a:e6:9e:fa:34:0a:
         ac:9c:b1:34:9d:aa:82:6d:2a:c4:54:fd:39:4c:a8:0d:79:96:
         3b:08:68:4b:c4:1f:a1:dd:1f:c9:6d:da:99:19:5d:e7:0f:80:
         34:50:e3:fe:f2:ee:0b:13:f8:6d:85:16:ce:75:b4:b9:77:1e:
         3d:c2:03:c3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXLbaZzCx4tXBwGbeLePbrNg4XmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQzOERDQkNCRTFBNkQxRTc5ODY4NThGQ0FGNEFENDA3
OTE0MkQyRDAeFw0yNDA4MDUyMDA2NTNaFw0yNTA4MDQyMDExNTNaMDMxMTAvBgNV
BAMTKDk4RjhCMjFGMUFEOUQ0NDg0QUM1N0JGOURBQUMwNTNBNjIyMDkzNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fIapg459BI+HiNU+rCoXxc+n
I++LFMFLwMy2ZGz5a4F6FvBiKo0PA/biS0GlXjH0GtJ3gTeX9ptCZ9oW5sMpXiPl
8A3oYss0gciAxRhkiWG0WBPHSE4ICl3K4131+/5Og0ivsoBo18F1/lsC0p8hjHwu
CrTM1Ia7+Z2BE4pyJ+dljLB8CwIaMvynz1VrFkxyJd/MLEZ909f/2f/ZJGv0kaaV
weefA23jC6AKHsubflhSgsMER4N2wqElJZzTaM7WbWFvPSASGVI8xiNZOgVX1dif
FUVdpNo81eaOmyuaMnWBwCO+HsLhapKA80g7fPoKIAtI6U+L5TIzTOeLvGrZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmPiyHxrZ1EhKxXv52qwFOmIgk2QwHwYDVR0j
BBgwFoAUrTjcvL4abR55hoWPyvStQHkULS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE1ZNWJ2ZjNrclQ5UTZ3NkxFYkxKdHI0OXpjS1Azam44ZlVONGQ1WjdS
UTEvMC9BRDM4RENCQ0JFMUE2RDFFNzk4Njg1OEZDQUY0QUQ0MDc5MTQyRDJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEMzhEQ0JDQkUxQTZEMUU3
OTg2ODU4RkNBRjRBRDQwNzkxNDJEMkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RNWTVidmYza3JUOVE2dzZMRWJMSnRyNDl6Y0tQM2puOGZVTjRkNVo3UlExLzAv
MzIzODMwMzQzYTM4NjM2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASM4DANBgkqhkiG9w0BAQsFAAOCAQEAcwr88h1G
c/92ZCH9Ffldr9qUw3E6xAZq+SGBRrTnQOTKUZBRKY0ee6GHKnmg1IBjMQgGY+sR
Kdn2dFINy+b3EjG7eBHcyB5+58nV5pGKT2E77ypXZuvZEPuajbimcCtc2IZqrhkK
dqNh6GxQsj9nnl6hIxZVztR1AiT9d/KhgTPQfW3Vhy4XixKz6bnlv9FyBCAPQwBG
Tsa/mAi1TGrQuqSKz9T8fa8yaUel8mOCYK6qw9invQIa3mFaPPpwU5wfSuae+jQK
rJyxNJ2qgm0qxFT9OUyoDXmWOwhoS8Qfod0fyW3amRld5w+ANFDj/vLuCxP4bYUW
znW0uXcePcIDww==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org