Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/323830343a386333303a3a2f33322d313238203d3e20323733373835.roa
File:                     323830343a386333303a3a2f33322d313238203d3e20323733373835.roa (raw, json)
Hash identifier:          56boVDTYTDskHJT/HFMv1ETHJPMhj+8q0woszym05fM=
Subject key identifier:   2B:19:79:A8:2C:70:19:C6:F8:B3:08:C3:A3:D7:C0:D6:05:88:48:30
Certificate issuer:       /CN=93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC
Certificate serial:       208FE34BBD7BF56E64E0B8C41E3882979B00EF05
Authority key identifier: 93:AC:07:F5:B1:95:1B:87:56:BD:4D:26:2D:82:C5:EC:D3:7F:D0:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/323830343a386333303a3a2f33322d313238203d3e20323733373835.roa
Signing time:             Wed 29 May 2024 01:35:31 +0000
ROA not before:           Wed 29 May 2024 01:30:31 +0000
ROA not after:            Wed 28 May 2025 01:35:31 +0000
asID:                     273785
IP address blocks:        2804:8c30::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.crl
                          rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8f:e3:4b:bd:7b:f5:6e:64:e0:b8:c4:1e:38:82:97:9b:00:ef:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC
        Validity
            Not Before: May 29 01:30:31 2024 GMT
            Not After : May 28 01:35:31 2025 GMT
        Subject: CN=2B1979A82C7019C6F8B308C3A3D7C0D605884830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:19:f3:17:6c:6a:b7:fb:9b:d1:0a:af:35:
                    ab:b0:fe:a8:2d:24:16:10:5f:23:20:10:80:2c:e5:
                    aa:39:df:33:d5:64:72:cf:d9:dd:e8:7e:51:3a:b4:
                    6a:6a:87:3f:e6:0b:dc:8d:54:c7:83:2c:ac:41:38:
                    81:c6:80:9b:a0:1b:a6:47:9e:86:92:d8:41:76:23:
                    fa:9f:d1:39:f3:22:e6:a1:11:70:d5:66:47:83:26:
                    40:0a:76:d6:ed:69:25:57:c7:26:2c:15:ee:2c:aa:
                    9c:de:b8:d8:30:07:80:ca:dc:6c:60:90:e3:2e:76:
                    47:dd:43:e8:96:45:eb:b4:41:a5:75:79:90:4e:97:
                    fe:62:c9:59:df:d7:00:cc:1a:4a:62:5e:02:26:f3:
                    91:9b:4d:31:96:95:93:73:a3:2c:6a:cd:ff:32:36:
                    1d:43:f7:48:8e:27:50:43:84:8b:f1:98:e9:16:f2:
                    ff:7e:be:af:41:15:d7:68:2a:ec:0d:3a:af:ef:eb:
                    8d:23:ce:7e:d1:73:e1:06:af:db:79:6c:14:f2:c0:
                    09:27:13:4c:e7:3a:35:93:c2:cd:b4:6c:75:9f:7a:
                    86:29:ff:15:31:4d:57:91:e9:69:1f:ab:ed:5b:4a:
                    fa:fd:0a:92:61:2d:fc:5d:88:6b:9d:f6:6f:9c:e7:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:19:79:A8:2C:70:19:C6:F8:B3:08:C3:A3:D7:C0:D6:05:88:48:30
            X509v3 Authority Key Identifier:
                keyid:93:AC:07:F5:B1:95:1B:87:56:BD:4D:26:2D:82:C5:EC:D3:7F:D0:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AC07F5B1951B8756BD4D262D82C5ECD37FD0EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hjo6vbpGxuZcffmuXNDRgnkMZSMF25Xt2YHj6QYGxCF4/0/323830343a386333303a3a2f33322d313238203d3e20323733373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:58:37:ed:60:b4:05:89:37:5a:18:a4:14:71:d6:8d:83:ca:
         4b:a1:ed:eb:e5:b6:d7:b0:62:74:c1:fb:31:2e:34:06:b7:34:
         e4:27:1f:04:50:19:06:85:31:ac:6b:67:db:88:92:93:a3:57:
         32:dc:a4:75:b5:39:b8:9e:4a:86:75:19:4a:ce:47:2f:18:ad:
         d5:74:b0:ca:51:51:9f:ae:5c:ce:27:16:93:8b:b3:85:7e:5e:
         ad:c6:57:01:8f:e0:76:76:ee:60:43:53:d2:d1:f7:7f:1e:95:
         a0:73:4f:d5:9d:13:e8:3f:bc:a8:ef:55:da:1d:77:61:f5:84:
         01:9c:21:7d:84:fd:fe:c2:3a:4d:d4:60:21:f2:4e:52:0f:50:
         3e:53:48:cf:e5:e8:c0:4d:a6:77:25:a7:74:11:27:4f:0e:23:
         47:4a:cf:2d:30:a2:48:9d:00:e5:10:95:66:e1:43:29:a5:62:
         73:2e:7f:db:0d:72:98:dc:80:6e:0f:73:57:66:ea:d2:49:63:
         ac:6a:2d:e2:a6:4d:27:0c:b6:fd:5e:43:2f:39:4a:bc:a1:ec:
         ee:2e:b1:1b:2b:aa:a2:96:dd:52:c7:9f:ac:19:d1:0e:66:1e:
         55:9d:91:4e:00:90:6d:1e:4d:5c:70:7a:61:76:4b:1a:56:60:
         d1:82:29:20
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUII/jS7179W5k4LjEHjiCl5sA7wUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNBQzA3RjVCMTk1MUI4NzU2QkQ0RDI2MkQ4MkM1RUNE
MzdGRDBFQzAeFw0yNDA1MjkwMTMwMzFaFw0yNTA1MjgwMTM1MzFaMDMxMTAvBgNV
BAMTKDJCMTk3OUE4MkM3MDE5QzZGOEIzMDhDM0EzRDdDMEQ2MDU4ODQ4MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvhnzF2xqt/ub0QqvNauw/qgt
JBYQXyMgEIAs5ao53zPVZHLP2d3oflE6tGpqhz/mC9yNVMeDLKxBOIHGgJugG6ZH
noaS2EF2I/qf0TnzIuahEXDVZkeDJkAKdtbtaSVXxyYsFe4sqpzeuNgwB4DK3Gxg
kOMudkfdQ+iWReu0QaV1eZBOl/5iyVnf1wDMGkpiXgIm85GbTTGWlZNzoyxqzf8y
Nh1D90iOJ1BDhIvxmOkW8v9+vq9BFddoKuwNOq/v640jzn7Rc+EGr9t5bBTywAkn
E0znOjWTws20bHWfeoYp/xUxTVeR6Wkfq+1bSvr9CpJhLfxdiGud9m+c506FAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUKxl5qCxwGcb4swjDo9fA1gWISDAwHwYDVR0j
BBgwFoAUk6wH9bGVG4dWvU0mLYLF7NN/0OwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGpvNnZicEd4dVpjZmZtdVhORFJnbmtNWlNNRjI1WHQyWUhqNlFZR3hD
RjQvMC85M0FDMDdGNUIxOTUxQjg3NTZCRDREMjYyRDgyQzVFQ0QzN0ZEMEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQUMwN0Y1QjE5NTFCODc1
NkJENEQyNjJEODJDNUVDRDM3RkQwRUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqbzZ2YnBHeHVaY2ZmbXVYTkRSZ25rTVpTTUYyNVh0MllIajZRWUd4Q0Y0LzAv
MzIzODMwMzQzYTM4NjMzMzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIwwMA0GCSqGSIb3DQEBCwUAA4IBAQBIWDft
YLQFiTdaGKQUcdaNg8pLoe3r5bbXsGJ0wfsxLjQGtzTkJx8EUBkGhTGsa2fbiJKT
o1cy3KR1tTm4nkqGdRlKzkcvGK3VdLDKUVGfrlzOJxaTi7OFfl6txlcBj+B2du5g
Q1PS0fd/HpWgc0/VnRPoP7yo71XaHXdh9YQBnCF9hP3+wjpN1GAh8k5SD1A+U0jP
5ejATaZ3Jad0ESdPDiNHSs8tMKJInQDlEJVm4UMppWJzLn/bDXKY3IBuD3NXZurS
SWOsai3ipk0nDLb9XkMvOUq8oezuLrEbK6qilt1Sx5+sGdEOZh5VnZFOAJBtHk1c
cHphdksaVmDRgikg
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:55 2024 by rpki-client on console-fra.rpki-client.org