Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
File:                     323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa (raw, json)
Hash identifier:          +iFl0YnLIC52e3+rg/bJCIX7rJB2a4qU7fLI3aorGu4=
Subject key identifier:   E4:A5:40:8B:00:DB:F5:5A:40:C0:30:F5:86:8A:AA:41:1B:59:FB:45
Certificate issuer:       /CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
Certificate serial:       23F731B199A3965BE2ED9A28A0FDDA016C88B81C
Authority key identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
Signing time:             Sat 06 Apr 2024 15:27:30 +0000
ROA not before:           Sat 06 Apr 2024 15:22:30 +0000
ROA not after:            Sat 05 Apr 2025 15:27:30 +0000
asID:                     271246
IP address blocks:        2801:80:3e20::/44 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl
                          rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f7:31:b1:99:a3:96:5b:e2:ed:9a:28:a0:fd:da:01:6c:88:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
        Validity
            Not Before: Apr  6 15:22:30 2024 GMT
            Not After : Apr  5 15:27:30 2025 GMT
        Subject: CN=E4A5408B00DBF55A40C030F5868AAA411B59FB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:99:10:2e:76:3a:0f:07:61:7b:e8:3d:66:
                    63:78:b9:e0:2a:5a:7f:29:8c:12:5b:d7:79:46:29:
                    29:fd:3a:85:2c:90:10:f4:72:e3:08:ae:79:bc:77:
                    84:9f:7b:22:34:8b:61:39:ec:9b:50:c5:34:82:08:
                    b4:0e:91:38:b0:8c:b3:95:34:68:6e:5b:be:92:5d:
                    b7:6d:85:4e:85:12:a0:6c:38:7b:25:d7:ac:5f:d9:
                    03:69:b8:32:cd:7d:7e:fa:f0:8a:2a:f3:ae:7f:41:
                    57:ea:33:70:23:1c:a6:71:ad:f1:d3:56:16:3d:0b:
                    d5:d2:d8:b5:e7:cd:7d:73:5d:c8:fd:0f:7f:65:b5:
                    91:af:56:d6:ab:d2:66:5e:78:cd:3b:dc:f1:15:9e:
                    74:92:96:f5:de:3f:f3:4e:47:a6:70:d9:f6:90:c9:
                    a0:cd:4d:9f:4b:1c:5b:09:d8:47:9b:06:55:03:ba:
                    37:d1:88:f7:b5:41:b0:ea:c4:d6:ba:e8:d2:a5:d1:
                    88:9c:6d:44:35:b1:d5:dd:24:a7:33:ec:2a:cd:32:
                    89:42:21:07:bc:22:e1:ed:af:0e:0b:71:ae:24:1d:
                    af:5e:18:28:3f:e0:7b:0e:cd:a1:09:b7:34:2d:02:
                    b9:6b:50:fa:57:2d:78:33:61:88:4d:94:e7:2a:58:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:40:8B:00:DB:F5:5A:40:C0:30:F5:86:8A:AA:41:1B:59:FB:45
            X509v3 Authority Key Identifier:
                keyid:D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:ec:fa:d5:6e:9c:78:6f:73:9c:ef:06:09:e0:a3:94:64:55:
         da:4c:d6:b8:cd:e2:ca:1e:d4:df:6f:a0:0e:8e:ea:2c:3f:93:
         d1:25:11:e5:16:fc:28:52:7f:83:a4:13:34:93:37:4d:00:c3:
         89:93:47:71:c0:c4:9e:97:4b:99:23:83:bb:05:0b:96:87:14:
         71:08:46:16:4e:d6:55:6f:0e:5d:b1:e8:f2:2d:24:ab:e0:8f:
         5f:ab:74:65:b0:a8:6c:ea:86:86:47:68:db:47:6c:bc:1b:04:
         0b:88:7b:41:b2:bd:01:75:aa:71:30:9e:33:93:83:3f:24:7c:
         17:81:13:c5:ff:12:d6:0b:dd:25:da:30:7c:d0:73:ef:c0:06:
         ad:55:33:fa:34:11:04:4f:de:63:a4:23:d7:57:4c:50:f6:f2:
         d8:c3:c6:ec:28:5c:35:c1:4d:fd:25:99:20:82:42:2c:01:d8:
         f3:d2:cd:51:3b:48:45:cb:43:92:66:53:7a:7b:00:dc:e1:47:
         42:46:40:a0:28:fb:3b:24:93:f0:7c:0e:0a:b1:6f:ec:93:3f:
         55:d2:4f:25:e5:77:e0:12:2d:1d:07:7f:b4:27:e1:dc:b6:a4:
         f2:a9:23:d4:b6:47:e7:b7:d1:9b:24:d0:93:ca:cc:d0:4f:d6:
         e6:30:dc:51
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUI/cxsZmjllvi7ZoooP3aAWyIuBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZEOTczOUI1MjgwRDgyODI5QUZBRDUzMUUzOUQ1RkE4
NkUwNEFEMDAeFw0yNDA0MDYxNTIyMzBaFw0yNTA0MDUxNTI3MzBaMDMxMTAvBgNV
BAMTKEU0QTU0MDhCMDBEQkY1NUE0MEMwMzBGNTg2OEFBQTQxMUI1OUZCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19JkQLnY6Dwdhe+g9ZmN4ueAq
Wn8pjBJb13lGKSn9OoUskBD0cuMIrnm8d4SfeyI0i2E57JtQxTSCCLQOkTiwjLOV
NGhuW76SXbdthU6FEqBsOHsl16xf2QNpuDLNfX768Ioq865/QVfqM3AjHKZxrfHT
VhY9C9XS2LXnzX1zXcj9D39ltZGvVtar0mZeeM073PEVnnSSlvXeP/NOR6Zw2faQ
yaDNTZ9LHFsJ2EebBlUDujfRiPe1QbDqxNa66NKl0YicbUQ1sdXdJKcz7CrNMolC
IQe8IuHtrw4Lca4kHa9eGCg/4HsOzaEJtzQtArlrUPpXLXgzYYhNlOcqWB7dAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU5KVAiwDb9VpAwDD1hoqqQRtZ+0UwHwYDVR0j
BBgwFoAU1tlzm1KA2Cgpr61THjnV+obgStAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVDaFVYRDI0WllvM3g1ZWg4R1M1Z3hINVhMcUVHRG9EQkVqcUEza1U5
cG4vMC9ENkQ5NzM5QjUyODBEODI4MjlBRkFENTMxRTM5RDVGQTg2RTA0QUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RDk3MzlCNTI4MEQ4Mjgy
OUFGQUQ1MzFFMzlENUZBODZFMDRBRDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1Q2hVWEQyNFpZbzN4NWVoOEdTNWd4SDVYTHFFR0RvREJFanFBM2tVOXBuLzAv
MzIzODMwMzEzYTM4MzAzYTMzNjUzMjMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNl
MjAzMjM3MzEzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQCAPiAwDQYJKoZIhvcNAQELBQAD
ggEBALXs+tVunHhvc5zvBgngo5RkVdpM1rjN4soe1N9voA6O6iw/k9ElEeUW/ChS
f4OkEzSTN00Aw4mTR3HAxJ6XS5kjg7sFC5aHFHEIRhZO1lVvDl2x6PItJKvgj1+r
dGWwqGzqhoZHaNtHbLwbBAuIe0GyvQF1qnEwnjOTgz8kfBeBE8X/EtYL3SXaMHzQ
c+/ABq1VM/o0EQRP3mOkI9dXTFD28tjDxuwoXDXBTf0lmSCCQiwB2PPSzVE7SEXL
Q5JmU3p7ANzhR0JGQKAo+zskk/B8Dgqxb+yTP1XSTyXld+ASLR0Hf7Qn4dy2pPKp
I9S2R+e30Zsk0JPKzNBP1uYw3FE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org