Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/323830343a323239633a343030303a3a2f33342d3334203d3e20323634313131.roa
File:                     323830343a323239633a343030303a3a2f33342d3334203d3e20323634313131.roa (raw, json)
Hash identifier:          fsFEVc30iG0a2rXXh9qdRsGbT+nz3LgMWFDqCRGKqRI=
Subject key identifier:   A1:F9:F3:29:CF:F7:06:FE:09:0F:55:1A:58:63:8A:EA:E0:99:A0:C9
Certificate issuer:       /CN=732008C67B67B29496E25CA0E43402A0B56D183A
Certificate serial:       049095C2F6AC160B30FB0999DC2C5B841E61B33C
Authority key identifier: 73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/323830343a323239633a343030303a3a2f33342d3334203d3e20323634313131.roa
Signing time:             Tue 30 Apr 2024 14:31:01 +0000
ROA not before:           Tue 30 Apr 2024 14:26:01 +0000
ROA not after:            Tue 29 Apr 2025 14:31:01 +0000
asID:                     264111
IP address blocks:        2804:229c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl
                          rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:90:95:c2:f6:ac:16:0b:30:fb:09:99:dc:2c:5b:84:1e:61:b3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732008C67B67B29496E25CA0E43402A0B56D183A
        Validity
            Not Before: Apr 30 14:26:01 2024 GMT
            Not After : Apr 29 14:31:01 2025 GMT
        Subject: CN=A1F9F329CFF706FE090F551A58638AEAE099A0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:02:8b:f2:de:81:37:2c:40:54:c4:f4:8a:
                    42:8f:81:3f:19:49:e8:01:76:06:c8:2a:bd:5f:21:
                    b9:25:98:a2:92:23:3e:10:8d:e5:5d:a3:79:5a:a8:
                    50:8d:0d:a0:c8:d6:f3:e4:32:5a:0e:21:17:57:04:
                    93:e2:70:79:86:a7:b7:9f:5f:c2:68:39:48:9c:ea:
                    8b:8c:38:d7:35:eb:66:c4:98:63:7e:d2:7e:48:52:
                    33:9b:a4:3d:c6:96:07:66:47:fe:bd:c0:7d:68:fc:
                    d2:d1:f5:3f:d8:bb:52:88:80:e6:89:ce:dc:b3:88:
                    9a:94:e1:28:cb:91:a8:fc:6c:9c:52:3b:9d:f8:7f:
                    7f:b1:ee:a1:e9:8a:6a:2b:aa:c0:ea:9b:34:ff:10:
                    3e:d9:4d:84:75:d3:c9:f8:93:e1:23:cd:df:e7:fe:
                    d6:47:8d:f2:94:c7:0e:e4:a8:1a:57:af:2c:93:83:
                    3e:ee:9b:c0:0e:96:9b:f0:b9:03:06:92:38:15:33:
                    2f:dc:0b:e9:c0:e8:24:ec:d2:a3:92:99:f4:ad:4a:
                    6b:39:2a:9a:5c:10:69:a6:7e:72:86:4f:b5:27:41:
                    8c:72:84:b9:9a:31:f0:bc:94:75:e0:67:53:f6:0b:
                    54:bf:fc:80:fd:47:26:62:28:32:dc:e7:b2:d4:0a:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F9:F3:29:CF:F7:06:FE:09:0F:55:1A:58:63:8A:EA:E0:99:A0:C9
            X509v3 Authority Key Identifier:
                keyid:73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/323830343a323239633a343030303a3a2f33342d3334203d3e20323634313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:229c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:52:54:16:4b:42:2e:53:16:d1:59:29:bc:d7:55:95:6a:b0:
         e2:07:af:39:7c:0a:05:41:ec:c7:26:80:a1:10:74:1b:1d:b2:
         12:e1:0c:86:38:ce:ac:62:9b:08:39:15:80:8c:7a:90:bf:bb:
         3c:19:8f:cc:54:ee:eb:cc:17:d8:f4:79:26:8b:a7:b7:27:52:
         b5:b1:50:33:97:d4:5b:36:38:4b:be:3d:2b:06:9f:5b:e3:03:
         f0:b6:7a:1f:8a:19:16:0f:b0:5a:d8:a6:ae:02:1c:54:d7:8d:
         4a:e0:fc:5a:58:4c:79:ec:b1:0f:67:c7:4e:e9:eb:63:1e:19:
         c2:67:80:3e:63:95:fc:61:42:81:b2:88:f9:63:98:ac:d5:37:
         26:58:6c:8e:eb:68:a3:5a:b9:cb:d4:f6:ff:dc:0a:06:60:75:
         a2:8b:6b:f6:5c:35:d7:93:dc:85:28:bb:1b:6a:90:6f:5e:f7:
         5d:04:71:e7:05:af:b6:37:51:8c:63:21:17:f6:a2:89:e2:ac:
         56:ad:70:4b:7c:c1:1f:c4:e7:db:d5:14:ce:16:70:f1:2b:28:
         8e:a5:f2:79:11:46:ec:0a:bc:c3:66:ef:b7:81:22:9b:46:9c:
         eb:7d:4e:a4:b4:df:bd:42:c9:ed:a5:91:82:3b:09:f2:45:88:
         ed:8a:2d:e4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBJCVwvasFgsw+wmZ3CxbhB5hszwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyMDA4QzY3QjY3QjI5NDk2RTI1Q0EwRTQzNDAyQTBC
NTZEMTgzQTAeFw0yNDA0MzAxNDI2MDFaFw0yNTA0MjkxNDMxMDFaMDMxMTAvBgNV
BAMTKEExRjlGMzI5Q0ZGNzA2RkUwOTBGNTUxQTU4NjM4QUVBRTA5OUEwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeAKL8t6BNyxAVMT0ikKPgT8Z
SegBdgbIKr1fIbklmKKSIz4QjeVdo3laqFCNDaDI1vPkMloOIRdXBJPicHmGp7ef
X8JoOUic6ouMONc162bEmGN+0n5IUjObpD3GlgdmR/69wH1o/NLR9T/Yu1KIgOaJ
ztyziJqU4SjLkaj8bJxSO534f3+x7qHpimorqsDqmzT/ED7ZTYR108n4k+Ejzd/n
/tZHjfKUxw7kqBpXryyTgz7um8AOlpvwuQMGkjgVMy/cC+nA6CTs0qOSmfStSms5
KppcEGmmfnKGT7UnQYxyhLmaMfC8lHXgZ1P2C1S//ID9RyZiKDLc57LUCm2PAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUofnzKc/3Bv4JD1UaWGOK6uCZoMkwHwYDVR0j
BBgwFoAUcyAIxntnspSW4lyg5DQCoLVtGDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDI0MThFRXRXNFpycGlIeVFUWVhqWFdXQTQ5NGk4TG8yd01nbzFQdmVG
c1ovMC83MzIwMDhDNjdCNjdCMjk0OTZFMjVDQTBFNDM0MDJBMEI1NkQxODNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMjAwOEM2N0I2N0IyOTQ5
NkUyNUNBMEU0MzQwMkEwQjU2RDE4M0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gyNDE4RUV0VzRacnBpSHlRVFlYalhXV0E0OTRpOExvMndNZ28xUHZlRnNaLzAv
MzIzODMwMzQzYTMyMzIzOTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEIpxAMA0GCSqGSIb3DQEBCwUA
A4IBAQBDUlQWS0IuUxbRWSm811WVarDiB685fAoFQezHJoChEHQbHbIS4QyGOM6s
YpsIORWAjHqQv7s8GY/MVO7rzBfY9Hkmi6e3J1K1sVAzl9RbNjhLvj0rBp9b4wPw
tnofihkWD7Ba2KauAhxU141K4PxaWEx57LEPZ8dO6etjHhnCZ4A+Y5X8YUKBsoj5
Y5is1TcmWGyO62ijWrnL1Pb/3AoGYHWii2v2XDXXk9yFKLsbapBvXvddBHHnBa+2
N1GMYyEX9qKJ4qxWrXBLfMEfxOfb1RTOFnDxKyiOpfJ5EUbsCrzDZu+3gSKbRpzr
fU6ktN+9QsntpZGCOwnyRYjtii3k
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org