Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a3437303a3a2f33322d3332203d3e203533313038.roa
File:                     323830343a3437303a3a2f33322d3332203d3e203533313038.roa (raw, json)
Hash identifier:          BAMUUyyETIqevsbw6uGb5SjRdaDNp9vHCknm7GK5/XQ=
Subject key identifier:   A0:18:A9:8C:BE:6A:6B:7D:91:99:02:13:60:E6:F2:B4:BC:3C:3D:E4
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5C40DA71FF6F703F66D784E0AAF5815F0C26A2DB
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a3437303a3a2f33322d3332203d3e203533313038.roa
Signing time:             Thu 06 Jun 2024 19:53:04 +0000
ROA not before:           Thu 06 Jun 2024 19:48:04 +0000
ROA not after:            Thu 05 Jun 2025 19:53:04 +0000
asID:                     53108
IP address blocks:        2804:470::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:40:da:71:ff:6f:70:3f:66:d7:84:e0:aa:f5:81:5f:0c:26:a2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:04 2024 GMT
            Not After : Jun  5 19:53:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:bf:2e:cb:89:fd:9f:ef:29:bd:1a:f7:b2:
                    21:9d:ec:42:0c:85:2e:b2:15:6f:72:75:3c:51:c4:
                    b9:2d:f2:2b:de:6d:49:f0:7d:03:2e:0a:7b:2f:87:
                    28:21:4b:a3:8a:38:db:1a:4a:6e:5f:ec:cb:bd:6a:
                    b0:f3:03:ab:0d:7f:4f:78:da:6b:57:e7:c7:23:c3:
                    cc:f1:56:0d:91:2a:1a:fb:f4:dd:13:23:59:58:e0:
                    1e:4b:d3:c0:e2:c4:ff:8c:c7:39:60:97:91:5a:ee:
                    8f:a9:cf:a9:f4:a7:c4:f9:36:8a:d1:70:4d:1a:69:
                    bf:be:fa:d3:c6:84:d6:dc:58:c3:c0:8a:da:8f:25:
                    dc:5e:70:fc:57:de:c2:4d:e3:55:65:2b:22:ff:6b:
                    02:8d:7a:67:75:89:53:c5:85:09:5c:76:ae:78:e7:
                    2b:0f:da:62:87:88:73:6d:52:8e:2d:30:1e:0e:41:
                    79:8a:6a:39:22:26:ce:39:db:89:8a:62:e1:cf:86:
                    81:b6:bb:63:04:dd:3a:41:1d:4d:2e:f0:3c:22:37:
                    25:b5:54:a5:fa:db:6b:7d:15:d0:75:82:b5:ef:71:
                    9b:67:e1:15:0d:fd:7b:12:d1:bc:da:e7:5f:e3:58:
                    1a:d5:33:36:92:67:34:b1:1e:18:ed:bd:95:0f:5c:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:A9:8C:BE:6A:6B:7D:91:99:02:13:60:E6:F2:B4:BC:3C:3D:E4
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a3437303a3a2f33322d3332203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:470::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:28:79:30:3c:61:3f:49:35:b9:81:c3:c3:ef:de:e1:84:26:
         70:71:8b:7d:5c:a5:a5:2e:0d:53:7e:f2:4c:01:86:81:17:5c:
         39:ca:dd:84:9e:1d:2d:ee:61:82:a8:c4:80:a2:71:c3:3c:7f:
         74:6c:f7:f7:8f:ad:f0:ac:b0:dc:18:f9:b4:09:20:38:4e:7f:
         36:99:26:82:0b:9c:77:08:a3:19:03:0d:a6:54:ae:34:50:d0:
         fe:43:47:fb:10:34:da:00:37:9c:bb:16:1f:b2:9a:7e:12:50:
         15:a4:dd:43:d7:9f:dc:53:96:44:24:d5:b5:76:b0:0c:bd:b0:
         97:2d:eb:92:57:a4:fd:a2:18:a1:64:fb:69:75:43:16:8b:f9:
         80:6a:74:dd:07:bd:56:e0:8b:d2:e1:f9:70:93:20:32:a8:39:
         ae:6e:35:db:9e:50:30:aa:c1:8e:5b:9f:53:11:af:10:7e:dc:
         0f:8f:f9:bd:1a:75:a9:d1:be:51:81:6e:01:39:db:fb:23:4f:
         39:3a:83:f1:ed:70:17:42:ce:53:47:ed:9e:a7:c2:40:aa:cd:
         55:25:88:1b:4c:f4:06:01:15:98:9f:fd:b0:8d:13:77:27:e9:
         16:7e:c3:36:26:25:79:db:82:fc:9e:74:e7:47:02:df:68:23:
         79:5d:cd:5c
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUXEDacf9vcD9m14TgqvWBXwwmotswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDA2MDYxOTQ4MDRaFw0yNTA2MDUxOTUzMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjExRUJGMkVDQjg5RkQ5RkVG
MjlCRDFBRjdCMjIxOURFQzQyMEM4NTJFQjIxNTZGNzI3NTNDNTFDNEI5MkRGMjJC
REU2RDQ5RjA3RDAzMkUwQTdCMkY4NzI4MjE0QkEzOEEzOERCMUE0QTZFNUZFQ0NC
QkQ2QUIwRjMwM0FCMEQ3RjRGNzhEQTZCNTdFN0M3MjNDM0NDRjE1NjBEOTEyQTFB
RkJGNEREMTMyMzU5NThFMDFFNEJEM0MwRTJDNEZGOENDNzM5NjA5NzkxNUFFRThG
QTlDRkE5RjRBN0M0RjkzNjhBRDE3MDREMUE2OUJGQkVGQUQzQzY4NEQ2REM1OEMz
QzA4QURBOEYyNURDNUU3MEZDNTdERUMyNERFMzU1NjUyQjIyRkY2QjAyOEQ3QTY3
NzU4OTUzQzU4NTA5NUM3NkFFNzhFNzJCMEZEQTYyODc4ODczNkQ1MjhFMkQzMDFF
MEU0MTc5OEE2QTM5MjIyNkNFMzlEQjg5OEE2MkUxQ0Y4NjgxQjZCQjYzMDRERDNB
NDExRDREMkVGMDNDMjIzNzI1QjU1NEE1RkFEQjZCN0QxNUQwNzU4MkI1RUY3MTlC
NjdFMTE1MERGRDdCMTJEMUJDREFFNzVGRTM1ODFBRDUzMzM2OTI2NzM0QjExRTE4
RURCRDk1MEY1Qzc3MUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsR6/LsuJ/Z/vKb0a97IhnexCDIUushVvcnU8UcS5LfIr3m1J8H0D
Lgp7L4coIUujijjbGkpuX+zLvWqw8wOrDX9PeNprV+fHI8PM8VYNkSoa+/TdEyNZ
WOAeS9PA4sT/jMc5YJeRWu6Pqc+p9KfE+TaK0XBNGmm/vvrTxoTW3FjDwIrajyXc
XnD8V97CTeNVZSsi/2sCjXpndYlTxYUJXHaueOcrD9pih4hzbVKOLTAeDkF5imo5
IibOOduJimLhz4aBtrtjBN06QR1NLvA8IjcltVSl+ttrfRXQdYK173GbZ+EVDf17
EtG82udf41ga1TM2kmc0sR4Y7b2VD1x3GwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FKAYqYy+amt9kZkCE2Dm8rS8PD3kMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMyMzgzMDM0M2EzNDM3MzAzYTNh
MmYzMzMyMmQzMzMyMjAzZDNlMjAzNTMzMzEzMDM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQEcDAN
BgkqhkiG9w0BAQsFAAOCAQEAhyh5MDxhP0k1uYHDw+/e4YQmcHGLfVylpS4NU37y
TAGGgRdcOcrdhJ4dLe5hgqjEgKJxwzx/dGz394+t8Kyw3Bj5tAkgOE5/Npkmgguc
dwijGQMNplSuNFDQ/kNH+xA02gA3nLsWH7KafhJQFaTdQ9ef3FOWRCTVtXawDL2w
ly3rklek/aIYoWT7aXVDFov5gGp03Qe9VuCL0uH5cJMgMqg5rm41255QMKrBjluf
UxGvEH7cD4/5vRp1qdG+UYFuATnb+yNPOTqD8e1wF0LOU0ftnqfCQKrNVSWIG0z0
BgEVmJ/9sI0TdyfpFn7DNiYleduC/J5050cC32gjeV3NXA==
-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:57 2024 by rpki-client on console-fra.rpki-client.org