Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
File:                     323830343a3538303a3a2f33332d3333203d3e20323632353138.roa (raw, json)
Hash identifier:          ZC7phRQYm6d0MPtoQoIzPtzm03P1lLej3JEO8bYRBlg=
Subject key identifier:   22:F3:E5:4E:50:A4:F1:A6:B4:B3:EF:DA:36:01:AE:47:52:21:D1:C1
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       030CC3B02EC05A3DB18858AAF80CD0177F3DF26B
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
Signing time:             Thu 04 Apr 2024 04:33:14 +0000
ROA not before:           Thu 04 Apr 2024 04:28:14 +0000
ROA not after:            Thu 03 Apr 2025 04:33:14 +0000
asID:                     262518
IP address blocks:        2804:580::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0c:c3:b0:2e:c0:5a:3d:b1:88:58:aa:f8:0c:d0:17:7f:3d:f2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Apr  4 04:28:14 2024 GMT
            Not After : Apr  3 04:33:14 2025 GMT
        Subject: CN=22F3E54E50A4F1A6B4B3EFDA3601AE475221D1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:4a:cc:76:30:5b:77:11:43:49:3c:11:8c:
                    b2:da:97:ab:54:31:1e:3d:03:a1:1e:65:bd:85:35:
                    6c:43:98:2e:24:ca:90:00:a0:3c:cb:c5:8c:e1:14:
                    ce:dc:26:e2:c9:2b:7c:73:25:fd:8b:48:f0:29:5d:
                    c7:a9:40:d8:72:31:b8:10:ed:d8:19:c2:b6:e2:dc:
                    9a:c6:82:2d:36:25:1e:f6:e9:8f:31:0f:57:f6:7b:
                    9e:cd:bb:8b:8c:15:a4:43:96:8f:d5:c5:e1:8e:a2:
                    8c:09:6e:95:86:79:3a:2e:10:89:18:83:ca:ae:cc:
                    e1:99:85:a2:66:9d:6d:63:6f:8f:1e:cf:18:c2:d8:
                    5f:5e:0c:ae:c2:67:64:ac:00:eb:e3:08:31:75:95:
                    88:bd:a2:aa:76:49:88:40:cd:25:2d:b9:69:ba:bd:
                    f8:51:17:9c:00:08:9f:0a:cb:44:58:0b:af:86:89:
                    28:bc:cf:30:4d:ae:ed:72:0a:89:e4:ef:12:53:98:
                    de:67:73:80:71:03:80:2d:32:26:ed:e6:09:89:59:
                    f6:94:c5:7a:c7:4c:05:86:e3:19:fb:61:12:7a:cd:
                    ff:e3:c7:38:a3:20:00:71:b4:70:e2:a3:05:d9:e1:
                    0e:0f:0a:46:44:29:b5:10:ee:52:d4:e1:4f:fc:03:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:E5:4E:50:A4:F1:A6:B4:B3:EF:DA:36:01:AE:47:52:21:D1:C1
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:580::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:be:b3:9e:6e:9b:17:9d:e0:06:90:93:65:71:e8:4e:16:
         6e:ce:6d:eb:0c:55:95:2b:79:57:71:c0:7c:c2:74:85:c0:00:
         8e:01:f3:57:74:eb:dd:a6:5b:ab:f3:81:00:08:cb:80:a9:0d:
         0e:f2:a1:bd:b4:fb:a0:a1:ca:af:7f:c8:29:6b:b2:1d:d1:db:
         65:9e:f0:d2:49:90:dd:8d:5f:1a:a2:db:a3:43:57:c1:36:17:
         46:b7:41:9d:4c:d5:a2:e3:55:c5:33:4a:31:7f:7a:9c:4b:42:
         52:f6:91:a0:41:e1:4a:32:bb:1c:dd:0d:e2:5a:80:99:6f:30:
         45:62:08:cf:ed:91:4f:83:b3:3e:6b:5d:08:73:37:a4:e7:77:
         9a:43:6e:a7:76:7d:9e:62:3e:3d:3c:0d:4f:d9:1c:48:eb:3d:
         97:b6:7f:eb:75:2d:62:4b:bd:4a:f0:f3:53:a0:67:88:d5:ac:
         2d:dd:29:19:40:08:46:0c:dc:45:3c:a2:2c:6d:42:80:c8:f6:
         40:3e:08:99:71:8f:7c:6c:86:66:78:82:4e:74:58:d4:41:7d:
         d1:7e:9a:12:da:7a:a5:69:0d:33:6d:0e:ba:0e:af:a8:fb:5f:
         df:58:dc:50:fd:3c:9d:22:91:f1:b6:4c:e5:1b:07:0e:64:94:
         16:56:41:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAwzDsC7AWj2xiFiq+AzQF3898mswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFODBFNTBFMDNERjAxQzE1NEJEMkE0RDFEMkYzQkQ2
N0Y3MUYzNjAeFw0yNDA0MDQwNDI4MTRaFw0yNTA0MDMwNDMzMTRaMDMxMTAvBgNV
BAMTKDIyRjNFNTRFNTBBNEYxQTZCNEIzRUZEQTM2MDFBRTQ3NTIyMUQxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UErMdjBbdxFDSTwRjLLal6tU
MR49A6EeZb2FNWxDmC4kypAAoDzLxYzhFM7cJuLJK3xzJf2LSPApXcepQNhyMbgQ
7dgZwrbi3JrGgi02JR726Y8xD1f2e57Nu4uMFaRDlo/VxeGOoowJbpWGeTouEIkY
g8quzOGZhaJmnW1jb48ezxjC2F9eDK7CZ2SsAOvjCDF1lYi9oqp2SYhAzSUtuWm6
vfhRF5wACJ8Ky0RYC6+GiSi8zzBNru1yConk7xJTmN5nc4BxA4AtMibt5gmJWfaU
xXrHTAWG4xn7YRJ6zf/jxzijIABxtHDiowXZ4Q4PCkZEKbUQ7lLU4U/8A5mXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIvPlTlCk8aa0s+/aNgGuR1Ih0cEwHwYDVR0j
BBgwFoAU3ugOUOA98BwVS9Kk0dLzvWf3HzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz
U3IvMS9ERUU4MEU1MEUwM0RGMDFDMTU0QkQyQTREMUQyRjNCRDY3RjcxRjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRTgwRTUwRTAzREYwMUMx
NTRCRDJBNEQxRDJGM0JENjdGNzFGMzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzEv
MzIzODMwMzQzYTM1MzgzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjM1
MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEBYAAMA0GCSqGSIb3DQEBCwUAA4IBAQBG5L6znm6b
F53gBpCTZXHoThZuzm3rDFWVK3lXccB8wnSFwACOAfNXdOvdplur84EACMuAqQ0O
8qG9tPugocqvf8gpa7Id0dtlnvDSSZDdjV8aotujQ1fBNhdGt0GdTNWi41XFM0ox
f3qcS0JS9pGgQeFKMrsc3Q3iWoCZbzBFYgjP7ZFPg7M+a10Iczek53eaQ26ndn2e
Yj49PA1P2RxI6z2Xtn/rdS1iS71K8PNToGeI1awt3SkZQAhGDNxFPKIsbUKAyPZA
PgiZcY98bIZmeIJOdFjUQX3RfpoS2nqlaQ0zbQ66Dq+o+1/fWNxQ/TydIpHxtkzl
GwcOZJQWVkEG
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org