Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa
File:                     323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa (raw, json)
Hash identifier:          7eh+EtdjADArr4JGATOwlAxIlk7xoUaengOVnqH6qyw=
Subject key identifier:   FB:E3:5E:F2:82:E8:51:46:1E:DA:91:32:9F:7D:51:62:C5:FF:B9:51
Certificate issuer:       /CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
Certificate serial:       4ABD30B02527D1B5F51E9AB513DD603CD6660718
Authority key identifier: A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa
Signing time:             Wed 03 Apr 2024 21:35:08 +0000
ROA not before:           Wed 03 Apr 2024 21:30:08 +0000
ROA not after:            Wed 02 Apr 2025 21:35:08 +0000
asID:                     267548
IP address blocks:        2804:4318:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.crl
                          rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bd:30:b0:25:27:d1:b5:f5:1e:9a:b5:13:dd:60:3c:d6:66:07:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
        Validity
            Not Before: Apr  3 21:30:08 2024 GMT
            Not After : Apr  2 21:35:08 2025 GMT
        Subject: CN=FBE35EF282E851461EDA91329F7D5162C5FFB951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:da:c2:6d:ba:1c:0c:77:64:7a:88:0f:23:
                    b3:5d:03:b8:cb:0c:24:fd:d0:05:ad:3c:aa:b7:33:
                    44:be:74:65:f3:e1:5e:bd:8c:cd:d0:f1:32:7c:90:
                    d3:2f:7a:38:c9:9d:32:ed:68:55:ec:da:d2:7e:fe:
                    2c:8b:e9:20:a0:62:16:43:f7:f5:41:c4:1d:b7:26:
                    ba:29:c1:b1:70:08:60:f0:69:b7:5f:60:a9:8e:68:
                    55:7d:ad:57:fc:ad:5f:2f:07:0a:23:8f:5c:80:37:
                    2b:1a:38:17:aa:82:ab:94:56:98:72:80:35:23:9a:
                    6e:68:1f:d0:96:f5:ed:2b:56:0a:a3:99:66:b0:f7:
                    82:43:a4:db:e9:3e:0e:b8:09:72:7a:ac:12:74:64:
                    e8:63:c4:60:b6:73:39:e4:77:36:68:32:ee:ac:55:
                    64:b5:1b:72:52:c6:e3:42:16:1f:2a:e7:11:7e:04:
                    a1:f0:94:6a:87:b7:c7:20:81:60:a4:f8:b3:38:47:
                    42:d0:76:98:67:fb:74:54:f3:4a:a0:f3:ca:84:df:
                    7a:33:97:4f:e8:b0:fe:b7:35:db:46:ee:77:a7:6e:
                    1f:28:e3:3e:f8:a1:b0:f6:77:ff:63:1a:5e:05:4e:
                    b8:c0:2d:b9:04:0a:fa:22:84:d4:6d:d5:8f:8c:03:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:5E:F2:82:E8:51:46:1E:DA:91:32:9F:7D:51:62:C5:FF:B9:51
            X509v3 Authority Key Identifier:
                keyid:A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3230303a3a2f34302d3430203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4318:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:24:dd:88:97:a0:94:22:3a:91:71:6b:31:98:b0:2a:25:
         a2:41:6d:78:9b:0f:28:e3:4f:9e:03:6f:71:6a:73:26:17:84:
         bf:86:40:ba:42:8b:0a:48:50:4c:aa:46:46:94:aa:38:17:60:
         d0:3d:ab:bb:8c:77:7e:b0:94:46:0c:a0:ba:b4:98:8d:4d:34:
         66:65:61:95:01:e2:48:35:36:95:60:5d:0e:25:6c:99:c4:b4:
         6b:f0:79:15:55:1a:4a:74:b2:ce:fa:c2:12:74:37:71:d5:4c:
         28:81:4c:9d:6a:19:1e:92:d8:88:e2:06:89:55:95:6f:0f:f6:
         e7:36:de:2b:c7:39:87:a9:0f:b3:3c:36:ba:04:cd:be:f0:21:
         a2:a4:1f:02:f7:dd:5f:6b:ff:d8:22:af:2a:b5:60:02:71:b8:
         9f:3a:01:17:e6:ed:ab:02:08:fb:e8:56:38:c1:9d:5d:88:74:
         14:36:63:a3:54:68:49:6e:fe:e5:5d:01:c4:ba:06:61:85:a3:
         82:fe:c7:cb:37:ef:f8:f1:9d:88:ae:ef:eb:e3:00:d7:7d:46:
         56:14:4c:4c:52:47:dc:a0:5e:2e:06:6e:25:35:cd:38:55:09:
         4e:7f:db:3b:ec:ba:a8:f5:d1:94:50:1f:a7:54:e1:e3:ce:71:
         78:c1:4c:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSr0wsCUn0bX1Hpq1E91gPNZmBxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBNDUxMDA5NTRCMjNFMjJGMzY3QjNEMjhCMkM0Rjg5
NkJFQjE3QTAeFw0yNDA0MDMyMTMwMDhaFw0yNTA0MDIyMTM1MDhaMDMxMTAvBgNV
BAMTKEZCRTM1RUYyODJFODUxNDYxRURBOTEzMjlGN0Q1MTYyQzVGRkI5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKe9rCbbocDHdkeogPI7NdA7jL
DCT90AWtPKq3M0S+dGXz4V69jM3Q8TJ8kNMvejjJnTLtaFXs2tJ+/iyL6SCgYhZD
9/VBxB23JropwbFwCGDwabdfYKmOaFV9rVf8rV8vBwojj1yANysaOBeqgquUVphy
gDUjmm5oH9CW9e0rVgqjmWaw94JDpNvpPg64CXJ6rBJ0ZOhjxGC2cznkdzZoMu6s
VWS1G3JSxuNCFh8q5xF+BKHwlGqHt8cggWCk+LM4R0LQdphn+3RU80qg88qE33oz
l0/osP63NdtG7nenbh8o4z74obD2d/9jGl4FTrjALbkECvoihNRt1Y+MA389AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU++Ne8oLoUUYe2pEyn31RYsX/uVEwHwYDVR0j
BBgwFoAUpaRRAJVLI+IvNns9KLLE+Ja+sXowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5qOVlISmdQUXA0YWRIN2laNjh6Wkt6RnEzWkhhbVR2VnU2eEZCYnFQ
dkUvMS9BNUE0NTEwMDk1NEIyM0UyMkYzNjdCM0QyOEIyQzRGODk2QkVCMTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTQ1MTAwOTU0QjIzRTIy
RjM2N0IzRDI4QjJDNEY4OTZCRUIxN0EuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOajlZSEpnUFFwNGFkSDdpWjY4elpLekZxM1pIYW1UdlZ1NnhGQmJxUHZFLzEv
MzIzODMwMzQzYTM0MzMzMTM4M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzczNTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBEMYAjANBgkqhkiG9w0BAQsFAAOC
AQEAsK0k3YiXoJQiOpFxazGYsColokFteJsPKONPngNvcWpzJheEv4ZAukKLCkhQ
TKpGRpSqOBdg0D2ru4x3frCURgygurSYjU00ZmVhlQHiSDU2lWBdDiVsmcS0a/B5
FVUaSnSyzvrCEnQ3cdVMKIFMnWoZHpLYiOIGiVWVbw/25zbeK8c5h6kPszw2ugTN
vvAhoqQfAvfdX2v/2CKvKrVgAnG4nzoBF+btqwII++hWOMGdXYh0FDZjo1RoSW7+
5V0BxLoGYYWjgv7Hyzfv+PGdiK7v6+MA131GVhRMTFJH3KBeLgZuJTXNOFUJTn/b
O+y6qPXRlFAfp1Th485xeMFMSw==
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:25 2024 by rpki-client on console-ams.rpki-client.org