Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa
File:                     323830343a313936633a3a2f33322d3438203d3e203631373934.roa (raw, json)
Hash identifier:          9W/jURL0zINbkpv2R87vRTgbPr+2Pm6UHytUqiVu3ME=
Subject key identifier:   57:1C:0B:04:8D:E0:73:58:7F:D0:7F:74:F5:F6:F8:47:C8:EF:81:B3
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       5EE9C3A9C31F8CB4BE8831F754DA0447EF4B2533
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa
Signing time:             Wed 29 May 2024 18:24:12 +0000
ROA not before:           Wed 29 May 2024 18:19:12 +0000
ROA not after:            Wed 28 May 2025 18:24:12 +0000
asID:                     61794
IP address blocks:        2804:196c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e9:c3:a9:c3:1f:8c:b4:be:88:31:f7:54:da:04:47:ef:4b:25:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: May 29 18:19:12 2024 GMT
            Not After : May 28 18:24:12 2025 GMT
        Subject: CN=571C0B048DE073587FD07F74F5F6F847C8EF81B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:55:7a:2d:7d:17:13:73:2a:5c:d4:7a:45:
                    16:88:2d:3d:d8:f7:cd:d0:0d:84:ed:d7:1c:22:00:
                    50:d3:dd:3e:6e:92:42:ec:75:d5:0b:75:46:f0:25:
                    09:3b:9b:9f:6f:88:01:36:d6:fe:37:5d:03:6a:ed:
                    f6:2a:01:66:5c:9f:12:62:44:10:ee:a1:2e:39:3d:
                    93:1d:df:fa:a9:df:73:b4:91:f8:58:58:71:c4:34:
                    91:e4:22:5a:53:37:f1:13:47:6d:c5:db:c6:78:b2:
                    67:a8:25:4b:02:67:28:d5:96:d9:47:f9:b3:ac:fd:
                    8f:8a:ae:c3:08:aa:01:6b:b3:0e:fe:d3:47:18:4c:
                    29:6b:3f:34:ce:e6:65:8c:6b:a5:8e:df:53:ef:0f:
                    ff:dc:58:ef:1b:17:66:3c:0c:31:96:da:6d:8e:17:
                    e5:ed:d6:3c:be:0f:bb:54:5f:a3:11:ba:25:6d:a1:
                    aa:d6:e0:26:bb:fb:50:6c:12:ae:2f:59:db:8c:57:
                    ab:7d:57:94:61:28:6b:47:f1:72:69:d8:01:7d:62:
                    65:d9:93:4a:e0:1c:74:98:3f:3e:61:73:e0:2c:60:
                    44:b8:a5:eb:63:d4:9f:36:0e:de:a2:0e:64:4b:be:
                    66:d6:60:cb:3f:d0:b8:77:9d:c0:85:08:17:40:6c:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1C:0B:04:8D:E0:73:58:7F:D0:7F:74:F5:F6:F8:47:C8:EF:81:B3
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:196c::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:b9:96:b3:b1:02:08:bd:a0:ab:ac:04:9c:c3:8e:22:8b:
         b1:04:48:96:88:0e:4d:2c:24:37:11:ff:47:5f:14:ec:03:d7:
         55:2d:65:00:3b:25:be:b8:a6:82:f0:27:08:dc:1e:cb:67:ae:
         c5:70:22:5a:35:94:56:82:17:0c:8c:7b:05:f0:15:61:84:5b:
         10:c3:4b:0f:78:4f:3c:31:a4:1d:47:fd:5d:2c:a3:fe:a6:98:
         b0:d3:7a:ab:d9:93:71:32:bf:fb:8d:c4:65:d5:cc:a4:5e:89:
         95:9d:27:32:e5:49:88:7b:e9:b4:21:04:f5:ed:2f:21:da:58:
         28:1e:e3:d2:52:1b:61:a7:df:3d:c1:c2:85:d8:f9:43:9b:e8:
         de:75:ea:5d:bd:1d:0a:16:d5:52:bd:8c:7e:43:6b:eb:a0:b8:
         6e:a4:ef:cc:73:9f:ab:54:86:b4:87:03:27:3e:bb:9f:62:20:
         2c:95:53:aa:75:01:e9:fc:99:c1:48:dd:6a:6e:e4:7b:89:84:
         cb:93:2d:b2:38:27:64:74:94:e7:bd:38:9f:75:2d:2f:c0:52:
         5f:ff:25:94:77:ad:7a:84:25:b0:01:45:1d:17:b9:5d:27:c9:
         34:9d:67:b3:6b:f6:bd:97:d9:7f:62:d2:89:5e:a0:0c:8f:18:
         6a:5d:82:8e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXunDqcMfjLS+iDH3VNoER+9LJTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5
MDkzODQ1ODAeFw0yNDA1MjkxODE5MTJaFw0yNTA1MjgxODI0MTJaMDMxMTAvBgNV
BAMTKDU3MUMwQjA0OERFMDczNTg3RkQwN0Y3NEY1RjZGODQ3QzhFRjgxQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/VV6LX0XE3MqXNR6RRaILT3Y
983QDYTt1xwiAFDT3T5ukkLsddULdUbwJQk7m59viAE21v43XQNq7fYqAWZcnxJi
RBDuoS45PZMd3/qp33O0kfhYWHHENJHkIlpTN/ETR23F28Z4smeoJUsCZyjVltlH
+bOs/Y+KrsMIqgFrsw7+00cYTClrPzTO5mWMa6WO31PvD//cWO8bF2Y8DDGW2m2O
F+Xt1jy+D7tUX6MRuiVtoarW4Ca7+1BsEq4vWduMV6t9V5RhKGtH8XJp2AF9YmXZ
k0rgHHSYPz5hc+AsYES4petj1J82Dt6iDmRLvmbWYMs/0Lh3ncCFCBdAbJ4JAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUVxwLBI3gc1h/0H909fb4R8jvgbMwHwYDVR0j
BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0
SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB
ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv
MzIzODMwMzQzYTMxMzkzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM3
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGWwwDQYJKoZIhvcNAQELBQADggEBAEf8uZazsQII
vaCrrAScw44ii7EESJaIDk0sJDcR/0dfFOwD11UtZQA7Jb64poLwJwjcHstnrsVw
Ilo1lFaCFwyMewXwFWGEWxDDSw94TzwxpB1H/V0so/6mmLDTeqvZk3Eyv/uNxGXV
zKReiZWdJzLlSYh76bQhBPXtLyHaWCge49JSG2Gn3z3BwoXY+UOb6N516l29HQoW
1VK9jH5Da+uguG6k78xzn6tUhrSHAyc+u59iICyVU6p1Aen8mcFI3Wpu5HuJhMuT
LbI4J2R0lOe9OJ91LS/AUl//JZR3rXqEJbABRR0XuV0nyTSdZ7Nr9r2X2X9i0ole
oAyPGGpdgo4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org