Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a3a2f33322d3332203d3e20323632373439.roa
File:                     323830343a3138343a3a2f33322d3332203d3e20323632373439.roa (raw, json)
Hash identifier:          ciN2qFP2krbhyvRCt8RgkmlvoHlUZND7kgJj7VVzhns=
Subject key identifier:   65:1F:73:D7:7F:7C:B3:E5:9A:8F:80:55:B6:E2:21:94:45:7B:D7:F0
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       4EC44EFD4056371FBDD0D9FCDF7DD9A1C2B12E98
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a3a2f33322d3332203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:23 +0000
ROA not before:           Thu 04 Apr 2024 05:55:23 +0000
ROA not after:            Thu 03 Apr 2025 06:00:23 +0000
asID:                     262749
IP address blocks:        2804:184::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c4:4e:fd:40:56:37:1f:bd:d0:d9:fc:df:7d:d9:a1:c2:b1:2e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:23 2024 GMT
            Not After : Apr  3 06:00:23 2025 GMT
        Subject: CN=651F73D77F7CB3E59A8F8055B6E22194457BD7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:2e:dd:88:bb:c9:dd:93:f1:2c:f4:fd:53:
                    a3:52:ed:7f:44:eb:83:05:e8:ed:4e:40:a0:38:90:
                    af:8f:31:6b:46:ef:01:b6:cb:1b:66:06:48:f3:f5:
                    46:10:fd:45:c0:ca:f7:85:94:0f:fb:f8:2d:9d:25:
                    cd:77:3e:bb:6f:f5:a1:40:ad:72:77:cd:f4:c5:22:
                    47:60:54:fe:f8:ef:48:9a:9f:5c:bf:27:5c:03:e9:
                    c3:09:0b:fe:6e:7a:e2:56:c1:80:44:85:84:87:00:
                    89:3d:2e:2e:53:af:05:18:53:29:b6:36:37:5c:98:
                    cd:4a:71:06:69:27:d0:58:2f:b0:b2:c3:e0:f3:38:
                    1d:aa:6e:23:74:e9:d8:38:a3:01:bc:8c:ce:c1:e3:
                    8a:d9:d9:f2:4d:4c:bb:e7:31:39:96:e4:5e:76:a2:
                    1a:e6:cb:4b:d5:18:c4:fe:f1:25:5a:a6:3d:2b:06:
                    99:f0:01:6a:2e:71:47:94:17:c6:2e:13:ea:41:f2:
                    80:87:ee:fe:86:da:1d:4f:bb:9b:7e:71:5a:4b:d3:
                    87:2b:ba:dd:39:c0:ad:01:4b:c4:ab:b8:94:63:7e:
                    42:85:3d:11:a0:8f:74:17:7a:95:30:ea:dc:c5:8a:
                    aa:51:14:45:02:ac:9d:4b:a0:0e:42:8e:1b:c2:3e:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1F:73:D7:7F:7C:B3:E5:9A:8F:80:55:B6:E2:21:94:45:7B:D7:F0
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a3a2f33322d3332203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:184::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e7:a7:f5:00:40:72:a7:9d:57:55:e9:39:a1:0c:1f:3a:0b:
         68:ab:62:6b:75:4d:12:9b:31:e9:b4:6e:cf:ff:a7:5a:a1:2e:
         9e:4e:7b:62:30:e3:4e:f9:71:49:0b:2b:1e:03:cf:51:ca:13:
         6d:a1:c5:c5:36:8b:e1:57:c9:49:6f:85:bb:d1:6b:26:6a:ea:
         f7:ab:6a:c2:35:0e:2e:12:96:d8:6d:df:a4:87:ae:8f:d7:9b:
         66:4c:2c:b2:24:43:bc:17:b6:58:91:a6:55:ea:94:bb:9e:2d:
         9e:b5:0b:9d:b9:dd:c7:86:04:72:04:00:3a:48:09:43:40:6a:
         f4:fa:3e:28:e0:b4:7f:4d:3a:28:0f:69:14:f8:c3:a7:0a:d6:
         c3:c6:51:56:db:33:b8:66:8b:c5:ed:27:e4:f1:57:a5:95:5f:
         9e:fd:48:66:34:e3:9d:8b:ba:d7:27:42:b3:11:14:7d:95:a5:
         ea:2b:b0:56:c7:66:36:4c:ba:7d:57:79:18:e2:21:14:01:9c:
         d8:cb:d2:26:a9:11:2d:b0:5f:23:e8:7b:f0:9c:5c:7c:df:bd:
         7d:a3:c9:d0:5b:48:e4:d3:e5:62:72:14:a8:20:46:9b:d7:a0:
         5b:2b:98:d3:ca:a8:be:94:f2:ce:07:ac:9b:fb:5e:a6:aa:87:
         5d:b1:2a:62
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTsRO/UBWNx+90Nn8333ZocKxLpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3
NjczMTZBNDAeFw0yNDA0MDQwNTU1MjNaFw0yNTA0MDMwNjAwMjNaMDMxMTAvBgNV
BAMTKDY1MUY3M0Q3N0Y3Q0IzRTU5QThGODA1NUI2RTIyMTk0NDU3QkQ3RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiy7diLvJ3ZPxLPT9U6NS7X9E
64MF6O1OQKA4kK+PMWtG7wG2yxtmBkjz9UYQ/UXAyveFlA/7+C2dJc13Prtv9aFA
rXJ3zfTFIkdgVP7470ian1y/J1wD6cMJC/5ueuJWwYBEhYSHAIk9Li5TrwUYUym2
NjdcmM1KcQZpJ9BYL7Cyw+DzOB2qbiN06dg4owG8jM7B44rZ2fJNTLvnMTmW5F52
ohrmy0vVGMT+8SVapj0rBpnwAWoucUeUF8YuE+pB8oCH7v6G2h1Pu5t+cVpL04cr
ut05wK0BS8SruJRjfkKFPRGgj3QXepUw6tzFiqpRFEUCrJ1LoA5CjhvCPuxPAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUZR9z1398s+Waj4BVtuIhlEV71/AwHwYDVR0j
BBgwFoAUnawEDQBeM35g2OcEE9wTXHZzFqQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzIvOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3NjczMTZBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85REFDMDQwRDAwNUUzMzdFNjBE
OEU3MDQxM0RDMTM1Qzc2NzMxNkE0LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
dHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNpLzIvMzIz
ODMwMzQzYTMxMzgzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM3MzQz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgEAYQwDQYJKoZIhvcNAQELBQADggEBAIznp/UAQHKnnVdV
6TmhDB86C2irYmt1TRKbMem0bs//p1qhLp5Oe2Iw4075cUkLKx4Dz1HKE22hxcU2
i+FXyUlvhbvRayZq6verasI1Di4Sltht36SHro/Xm2ZMLLIkQ7wXtliRplXqlLue
LZ61C5253ceGBHIEADpICUNAavT6PijgtH9NOigPaRT4w6cK1sPGUVbbM7hmi8Xt
J+TxV6WVX579SGY0452LutcnQrMRFH2VpeorsFbHZjZMun1XeRjiIRQBnNjL0iap
ES2wXyPoe/CcXHzfvX2jydBbSOTT5WJyFKggRpvXoFsrmNPKqL6U8s4HrJv7Xqaq
h12xKmI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org