Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/323830343a356332383a3a2f33322d3438203d3e20323638383932.roa
File:                     323830343a356332383a3a2f33322d3438203d3e20323638383932.roa (raw, json)
Hash identifier:          aCLdX8npKd5AwSexuBHKVbO7bhyy9EjWbiR5FGT8IUU=
Subject key identifier:   7E:16:6C:FD:EF:9F:59:C6:8E:15:16:BA:B1:3B:C1:54:9F:0C:65:DC
Certificate issuer:       /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial:       12652A306A4259B13370BEC369E02FB808C13683
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/323830343a356332383a3a2f33322d3438203d3e20323638383932.roa
Signing time:             Thu 04 Apr 2024 21:47:01 +0000
ROA not before:           Thu 04 Apr 2024 21:42:01 +0000
ROA not after:            Thu 03 Apr 2025 21:47:01 +0000
asID:                     268892
IP address blocks:        2804:5c28::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
                          rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:65:2a:30:6a:42:59:b1:33:70:be:c3:69:e0:2f:b8:08:c1:36:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
        Validity
            Not Before: Apr  4 21:42:01 2024 GMT
            Not After : Apr  3 21:47:01 2025 GMT
        Subject: CN=7E166CFDEF9F59C68E1516BAB13BC1549F0C65DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:a2:4e:4c:f5:fc:08:a1:d8:91:34:d9:1a:
                    eb:62:d6:ef:0e:d1:ad:b6:2d:c5:5c:0f:59:a1:c2:
                    05:78:bf:39:2c:b6:0c:63:48:dc:d9:5f:78:d3:f3:
                    3a:33:ab:bf:d4:7c:ab:fe:29:78:8a:e1:38:f7:cc:
                    6f:dc:d9:c6:4b:f8:d6:8d:8e:9a:c1:24:4c:04:8e:
                    12:e3:9c:77:c1:7f:a1:c9:b8:8b:1a:b9:83:aa:6d:
                    f3:39:3e:f2:ee:be:e6:a7:04:98:c6:69:ac:76:5d:
                    57:b8:77:e6:53:4b:76:ed:94:9a:99:7b:72:1c:ad:
                    87:ff:91:85:c4:0e:d0:a2:4e:5f:ac:56:53:3c:b8:
                    57:24:3f:1a:88:bd:33:3b:19:4b:e2:1e:48:e2:c3:
                    8d:0d:ce:25:68:9b:bd:93:23:42:c4:06:dd:39:ed:
                    ae:cf:7c:8d:65:41:aa:a7:8f:1d:19:c4:14:47:b3:
                    52:73:60:e6:52:09:83:c5:17:04:3e:18:64:cc:9e:
                    d6:f2:08:21:17:6b:47:e5:d2:de:ba:c2:d9:8d:53:
                    fa:b2:7f:e5:a8:2b:a5:ba:cd:04:ee:81:ae:be:13:
                    7e:82:90:9b:5f:05:94:73:df:4d:b0:3c:fa:22:de:
                    2c:2e:5b:52:75:5d:da:b7:39:a1:8f:c2:0c:af:88:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:6C:FD:EF:9F:59:C6:8E:15:16:BA:B1:3B:C1:54:9F:0C:65:DC
            X509v3 Authority Key Identifier:
                keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/323830343a356332383a3a2f33322d3438203d3e20323638383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c28::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:3b:f4:96:69:48:6b:00:76:4f:1a:91:15:26:8f:2f:28:
         df:c5:86:83:bb:7a:32:89:58:95:8d:cc:6e:47:86:80:cf:23:
         ec:7d:97:58:31:3d:c8:4b:b5:83:6f:c0:b1:8b:aa:fe:bb:b6:
         f1:3d:e5:ef:51:14:6b:17:8f:a3:1f:a3:bd:80:b6:dc:f2:78:
         5c:4c:31:77:f3:63:19:a4:40:bd:9f:de:f8:e0:c8:c9:59:b9:
         a0:58:ea:41:ef:9e:d0:77:ee:1a:19:5c:33:18:3e:05:4f:f5:
         e9:8a:53:eb:72:2a:41:63:c3:70:2e:70:07:59:16:95:02:96:
         b8:1b:79:3b:ed:ef:8b:79:3e:b9:3f:2d:7d:cc:63:37:ac:9c:
         5f:46:54:bb:ae:51:53:95:70:9b:e7:ce:46:4f:29:d3:ed:d2:
         63:cd:9a:f5:91:4f:9a:d0:34:b6:61:80:be:c1:50:f9:6d:70:
         fd:19:77:f1:36:c9:f7:5d:14:3a:b8:72:55:0a:76:e2:bb:22:
         b7:75:ac:62:76:44:ce:d9:d0:c9:1f:3f:49:1f:e4:e5:48:df:
         f7:68:46:52:2d:09:a5:61:f3:69:c9:05:21:03:09:8c:ab:a2:
         a4:64:7e:53:4d:83:4d:cb:a6:2f:d2:93:c8:dd:32:a1:8c:2e:
         0e:bf:ac:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEmUqMGpCWbEzcL7DaeAvuAjBNoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGQTM4NzZDQjBGMzQzQUM5QkI5NzU3RUVCMDRCMjU1
RDRFNTRCMTAeFw0yNDA0MDQyMTQyMDFaFw0yNTA0MDMyMTQ3MDFaMDMxMTAvBgNV
BAMTKDdFMTY2Q0ZERUY5RjU5QzY4RTE1MTZCQUIxM0JDMTU0OUYwQzY1REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGKJOTPX8CKHYkTTZGuti1u8O
0a22LcVcD1mhwgV4vzkstgxjSNzZX3jT8zozq7/UfKv+KXiK4Tj3zG/c2cZL+NaN
jprBJEwEjhLjnHfBf6HJuIsauYOqbfM5PvLuvuanBJjGaax2XVe4d+ZTS3btlJqZ
e3IcrYf/kYXEDtCiTl+sVlM8uFckPxqIvTM7GUviHkjiw40NziVom72TI0LEBt05
7a7PfI1lQaqnjx0ZxBRHs1JzYOZSCYPFFwQ+GGTMntbyCCEXa0fl0t66wtmNU/qy
f+WoK6W6zQTuga6+E36CkJtfBZRz302wPPoi3iwuW1J1Xdq3OaGPwgyviOTjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfhZs/e+fWcaOFRa6sTvBVJ8MZdwwHwYDVR0j
BBgwFoAU0fo4dssPNDrJu5dX7rBLJV1OVLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHdjVXJTaGk4ekFLcVN2NG5SUG1CNWRnWVdoenZpTGlIbW02WEx2ZzQ2
d0YvMS9EMUZBMzg3NkNCMEYzNDNBQzlCQjk3NTdFRUIwNEIyNTVENEU1NEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkEzODc2Q0IwRjM0M0FD
OUJCOTc1N0VFQjA0QjI1NUQ0RTU0QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3Y1VyU2hpOHpBS3FTdjRuUlBtQjVkZ1lXaHp2aUxpSG1tNlhMdmc0NndGLzEv
MzIzODMwMzQzYTM1NjMzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARcKDANBgkqhkiG9w0BAQsFAAOCAQEAW6g79JZp
SGsAdk8akRUmjy8o38WGg7t6MolYlY3MbkeGgM8j7H2XWDE9yEu1g2/AsYuq/ru2
8T3l71EUaxePox+jvYC23PJ4XEwxd/NjGaRAvZ/e+ODIyVm5oFjqQe+e0HfuGhlc
Mxg+BU/16YpT63IqQWPDcC5wB1kWlQKWuBt5O+3vi3k+uT8tfcxjN6ycX0ZUu65R
U5Vwm+fORk8p0+3SY82a9ZFPmtA0tmGAvsFQ+W1w/Rl38TbJ910UOrhyVQp24rsi
t3WsYnZEztnQyR8/SR/k5Ujf92hGUi0JpWHzackFIQMJjKuipGR+U02DTcumL9KT
yN0yoYwuDr+sHA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:40 2024 by rpki-client on console-fra.rpki-client.org