Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/323830343a333338303a343030303a3a2f33352d3335203d3e20323635343030.roa
File:                     323830343a333338303a343030303a3a2f33352d3335203d3e20323635343030.roa (raw, json)
Hash identifier:          kiMrzBPHbzWM7ddoOFXGp8wSrzJtlvQqc+i6/nB64Qc=
Subject key identifier:   BA:A5:8A:0C:01:C3:4E:DA:F8:5E:3D:2D:F5:30:EA:72:7C:E1:F5:85
Certificate issuer:       /CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
Certificate serial:       75B4F62810C5B93385261ADED0C3060F31E2FD89
Authority key identifier: 51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/323830343a333338303a343030303a3a2f33352d3335203d3e20323635343030.roa
Signing time:             Fri 26 Apr 2024 16:49:22 +0000
ROA not before:           Fri 26 Apr 2024 16:44:22 +0000
ROA not after:            Fri 25 Apr 2025 16:49:22 +0000
asID:                     265400
IP address blocks:        2804:3380:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.crl
                          rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b4:f6:28:10:c5:b9:33:85:26:1a:de:d0:c3:06:0f:31:e2:fd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
        Validity
            Not Before: Apr 26 16:44:22 2024 GMT
            Not After : Apr 25 16:49:22 2025 GMT
        Subject: CN=BAA58A0C01C34EDAF85E3D2DF530EA727CE1F585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:e9:76:c7:29:1e:e3:74:40:42:79:a2:e6:
                    51:b6:5b:a7:bf:e8:30:80:b6:1b:44:fa:94:f1:7a:
                    04:66:c8:48:1e:e2:aa:81:af:2e:ab:42:b4:c1:bd:
                    a0:3b:8f:7a:65:32:b9:da:a7:c6:c2:55:ba:c6:fd:
                    b2:6f:06:4a:bf:c5:97:2a:6f:68:5e:60:e7:4c:0d:
                    4d:37:f9:c4:ab:58:09:2a:f6:e8:4f:b2:76:0d:c2:
                    f5:14:b1:d2:96:5c:24:7b:c1:23:74:74:da:d6:08:
                    49:b8:2b:74:6e:86:7e:74:99:cc:9b:65:a3:a5:c2:
                    01:3b:42:b7:3a:51:6b:ed:a5:5c:4b:90:d2:68:13:
                    85:35:72:bd:e7:8e:31:ca:d5:8c:a8:dc:25:11:98:
                    23:b4:15:69:b1:c6:a4:cd:6d:c7:15:de:eb:43:03:
                    e7:30:db:35:ec:7b:cd:dc:11:58:b8:8b:62:fd:00:
                    7b:fb:4e:ca:8f:9a:9d:c0:9b:e1:2c:57:b2:85:82:
                    50:c8:53:7b:f6:29:a7:42:14:fe:4b:6a:13:b7:87:
                    a0:b2:04:b6:5d:22:62:76:8c:ae:50:b5:49:7b:93:
                    a5:1e:4b:bc:a6:d1:e4:22:34:fc:3c:3b:c1:48:b8:
                    bc:9c:fb:94:8c:56:9f:ac:b9:03:f8:fe:9c:20:05:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A5:8A:0C:01:C3:4E:DA:F8:5E:3D:2D:F5:30:EA:72:7C:E1:F5:85
            X509v3 Authority Key Identifier:
                keyid:51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/323830343a333338303a343030303a3a2f33352d3335203d3e20323635343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3380:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         03:61:b0:cb:d1:12:7e:2d:2e:91:c3:c3:d4:d6:ee:01:f5:a4:
         fa:7d:ed:ef:41:f5:bf:29:f9:ba:70:d3:5f:d1:5a:b8:10:b9:
         28:56:cf:c9:38:9c:24:51:1e:c1:85:c8:d6:67:88:56:b2:76:
         c9:7c:07:de:bf:24:46:1b:f0:21:02:98:7f:f4:02:58:7b:f3:
         78:f0:6d:d3:90:46:1a:9d:10:fa:3e:4e:f3:97:8c:49:42:b0:
         80:79:af:2c:3c:fa:da:2f:c8:01:c9:9c:78:c1:b2:3c:bc:65:
         45:67:fa:f6:fc:27:8d:2c:f8:4a:5b:ed:ea:dc:e1:60:4c:6c:
         6c:b9:01:71:c8:3f:b2:22:df:80:b4:28:40:7d:0e:76:15:67:
         b2:97:5c:52:8a:7a:a0:33:42:08:6b:e3:32:3e:e6:0b:bb:df:
         bc:ee:15:45:d0:cd:3d:10:f7:9c:35:ed:6d:4f:d8:9b:66:85:
         26:f5:8e:5f:99:c7:4d:cb:2f:a5:d9:4c:24:42:de:2d:cb:74:
         6c:69:27:cf:06:9f:d7:ee:bc:fc:9c:90:fd:d3:78:e0:6d:5f:
         83:40:a3:7f:5f:dd:e1:29:7e:a8:7b:5c:25:9e:6b:8c:0a:55:
         74:69:42:cc:9a:de:fc:7f:c3:0d:78:09:f8:00:53:d9:85:aa:
         1e:1d:86:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdbT2KBDFuTOFJhre0MMGDzHi/YkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE4MEIzMjZENDk3M0ExRkEwRkFDRUVBMkVCREZFQkZE
QkI2NjhBMTAeFw0yNDA0MjYxNjQ0MjJaFw0yNTA0MjUxNjQ5MjJaMDMxMTAvBgNV
BAMTKEJBQTU4QTBDMDFDMzRFREFGODVFM0QyREY1MzBFQTcyN0NFMUY1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+ul2xyke43RAQnmi5lG2W6e/
6DCAthtE+pTxegRmyEge4qqBry6rQrTBvaA7j3plMrnap8bCVbrG/bJvBkq/xZcq
b2heYOdMDU03+cSrWAkq9uhPsnYNwvUUsdKWXCR7wSN0dNrWCEm4K3Ruhn50mcyb
ZaOlwgE7Qrc6UWvtpVxLkNJoE4U1cr3njjHK1Yyo3CURmCO0FWmxxqTNbccV3utD
A+cw2zXse83cEVi4i2L9AHv7TsqPmp3Am+EsV7KFglDIU3v2KadCFP5LahO3h6Cy
BLZdImJ2jK5QtUl7k6UeS7ym0eQiNPw8O8FIuLyc+5SMVp+suQP4/pwgBY63AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUuqWKDAHDTtr4Xj0t9TDqcnzh9YUwHwYDVR0j
BBgwFoAUUYCzJtSXOh+g+s7qLr3+v9u2aKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0gydkpMbUFvRHJCc2tVVXhWN3FqNUVvS0VOaDc3S1NSNEthTGI1Mjd0
U28vMC81MTgwQjMyNkQ0OTczQTFGQTBGQUNFRUEyRUJERkVCRkRCQjY2OEExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxODBCMzI2RDQ5NzNBMUZB
MEZBQ0VFQTJFQkRGRUJGREJCNjY4QTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIMnZKTG1Bb0RyQnNrVVV4VjdxajVFb0tFTmg3N0tTUjRLYUxiNTI3dFNvLzAv
MzIzODMwMzQzYTMzMzMzODMwM2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNTM0MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEM4BAMA0GCSqGSIb3DQEBCwUA
A4IBAQADYbDL0RJ+LS6Rw8PU1u4B9aT6fe3vQfW/Kfm6cNNf0Vq4ELkoVs/JOJwk
UR7BhcjWZ4hWsnbJfAfevyRGG/AhAph/9AJYe/N48G3TkEYanRD6Pk7zl4xJQrCA
ea8sPPraL8gByZx4wbI8vGVFZ/r2/CeNLPhKW+3q3OFgTGxsuQFxyD+yIt+AtChA
fQ52FWeyl1xSinqgM0IIa+MyPuYLu9+87hVF0M09EPecNe1tT9ibZoUm9Y5fmcdN
yy+l2UwkQt4ty3RsaSfPBp/X7rz8nJD903jgbV+DQKN/X93hKX6oe1wlnmuMClV0
aULMmt78f8MNeAn4AFPZhaoeHYby
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:20 2024 by rpki-client on console-ams.rpki-client.org