Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/323830343a6562343a3a2f33322d3438203d3e203631383930.roa
File:                     323830343a6562343a3a2f33322d3438203d3e203631383930.roa (raw, json)
Hash identifier:          ivSDBm4pGhPXMDbzkQf3T+hFVtJlp4HRcF4mwm+eXRc=
Subject key identifier:   7E:97:61:14:65:0C:EC:EF:CF:19:BA:F3:4A:E0:80:8A:39:AE:32:4A
Certificate issuer:       /CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
Certificate serial:       5276962895DEA52DEC63120A78F21DF97028A6CD
Authority key identifier: 5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/323830343a6562343a3a2f33322d3438203d3e203631383930.roa
Signing time:             Thu 04 Apr 2024 18:45:16 +0000
ROA not before:           Thu 04 Apr 2024 18:40:16 +0000
ROA not after:            Thu 03 Apr 2025 18:45:16 +0000
asID:                     61890
IP address blocks:        2804:eb4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl
                          rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:76:96:28:95:de:a5:2d:ec:63:12:0a:78:f2:1d:f9:70:28:a6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
        Validity
            Not Before: Apr  4 18:40:16 2024 GMT
            Not After : Apr  3 18:45:16 2025 GMT
        Subject: CN=7E976114650CECEFCF19BAF34AE0808A39AE324A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:53:42:ef:c5:4c:13:be:66:8e:8e:8a:64:
                    af:15:ad:c1:90:07:18:65:8d:b3:d5:29:cd:cc:b1:
                    a0:34:55:40:ff:35:ae:bd:18:01:21:65:2a:bc:3a:
                    1f:6d:a3:0f:4d:4a:ba:4c:b8:6d:cb:0d:a4:56:08:
                    8b:0f:b8:cb:f1:9c:44:36:88:51:90:17:b0:60:1a:
                    31:a8:f8:06:0d:4b:68:94:31:75:5a:7e:36:7a:fe:
                    50:5f:3c:1f:0b:45:ef:27:c6:22:8d:e4:91:b4:26:
                    e2:48:5f:5f:d6:15:3a:e3:09:31:4c:da:f1:34:8a:
                    af:d9:79:3c:04:36:d8:59:b1:c1:cd:b4:b7:40:6d:
                    95:8a:6b:6a:e6:2f:0a:73:e0:e8:0f:82:62:29:1f:
                    fe:0a:a2:a7:c4:04:4f:d4:a5:e7:f7:37:f3:d5:66:
                    5b:57:67:4b:c1:1b:24:e3:0f:55:1e:11:a4:24:bb:
                    7c:95:89:9d:fb:fb:0f:a6:c9:72:48:59:f4:09:59:
                    6e:ac:d0:a6:da:db:ea:dd:03:58:ad:bf:46:26:4e:
                    37:b5:9f:ae:68:4a:3d:52:1d:38:4e:3f:08:7b:15:
                    f0:46:5e:02:cb:70:65:53:89:9c:f9:3e:0d:fa:df:
                    51:f0:32:90:71:71:1b:17:5b:0b:69:a7:ab:86:85:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:61:14:65:0C:EC:EF:CF:19:BA:F3:4A:E0:80:8A:39:AE:32:4A
            X509v3 Authority Key Identifier:
                keyid:5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/323830343a6562343a3a2f33322d3438203d3e203631383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:6a:03:25:61:03:20:1c:b0:61:bf:f0:7f:8f:18:f3:29:
         83:31:b2:f4:94:fc:c8:0c:c8:39:db:7a:3f:06:be:39:c6:60:
         63:df:06:78:47:15:c3:d3:0e:00:70:b7:75:72:d9:69:ee:b7:
         d7:c5:55:fb:44:63:d4:b7:14:ea:2d:0c:3a:8b:b4:dd:5d:73:
         b6:8b:46:f9:85:70:31:71:e6:d1:50:38:61:f3:66:95:48:04:
         25:db:ca:82:32:e8:df:fc:5b:32:85:98:38:ab:a4:07:65:c2:
         2e:59:20:48:24:b1:93:54:e3:b8:3b:c9:84:d6:77:21:9f:c2:
         07:c6:6f:8c:df:88:cc:ca:0f:a5:7b:d8:b1:cf:a5:84:4d:fa:
         e7:b5:13:8e:23:5b:8e:cc:78:c6:5b:90:8c:e8:b2:5d:60:fa:
         d6:31:33:ca:31:76:37:01:79:a6:f1:40:c1:49:b3:f6:0f:f0:
         cf:09:cf:3e:f0:34:89:75:7d:af:a6:c6:3c:8e:44:0c:28:12:
         c0:ae:9c:3f:8a:05:cb:f9:54:e4:1c:1f:e2:f3:87:2b:2a:0e:
         d1:8b:aa:9f:e2:90:13:9a:fb:5c:3a:d5:12:6f:48:19:79:d3:
         79:9b:f2:a6:25:29:a0:ca:52:d9:9e:7a:75:c4:46:5b:a2:07:
         a4:0c:29:1e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUnaWKJXepS3sYxIKePId+XAops0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBN0NCODUwQTJCMENCQzM0ODU3NDY5NUYyRjVDRjQ5
OTU4NjkwNDAeFw0yNDA0MDQxODQwMTZaFw0yNTA0MDMxODQ1MTZaMDMxMTAvBgNV
BAMTKDdFOTc2MTE0NjUwQ0VDRUZDRjE5QkFGMzRBRTA4MDhBMzlBRTMyNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhVNC78VME75mjo6KZK8VrcGQ
BxhljbPVKc3MsaA0VUD/Na69GAEhZSq8Oh9tow9NSrpMuG3LDaRWCIsPuMvxnEQ2
iFGQF7BgGjGo+AYNS2iUMXVafjZ6/lBfPB8LRe8nxiKN5JG0JuJIX1/WFTrjCTFM
2vE0iq/ZeTwENthZscHNtLdAbZWKa2rmLwpz4OgPgmIpH/4KoqfEBE/Upef3N/PV
ZltXZ0vBGyTjD1UeEaQku3yViZ37+w+myXJIWfQJWW6s0Kba2+rdA1itv0YmTje1
n65oSj1SHThOPwh7FfBGXgLLcGVTiZz5Pg3631HwMpBxcRsXWwtpp6uGhfanAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUfpdhFGUM7O/PGbrzSuCAijmuMkowHwYDVR0j
BBgwFoAUX6fLhQorDLw0hXRpXy9c9JlYaQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG5iZkhhMWVWTGtzZGZtN1lDenNtcDFRbWNBZFVtN1hSU3U0aWh1V2Rh
cVYvMS81RkE3Q0I4NTBBMkIwQ0JDMzQ4NTc0Njk1RjJGNUNGNDk5NTg2OTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTdDQjg1MEEyQjBDQkMz
NDg1NzQ2OTVGMkY1Q0Y0OTk1ODY5MDQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0huYmZIYTFlVkxrc2RmbTdZQ3pzbXAxUW1jQWRVbTdYUlN1NGlodVdkYXFWLzEv
MzIzODMwMzQzYTY1NjIzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM2MzEzODM5
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA60MA0GCSqGSIb3DQEBCwUAA4IBAQCP6GoDJWEDIByw
Yb/wf48Y8ymDMbL0lPzIDMg523o/Br45xmBj3wZ4RxXD0w4AcLd1ctlp7rfXxVX7
RGPUtxTqLQw6i7TdXXO2i0b5hXAxcebRUDhh82aVSAQl28qCMujf/FsyhZg4q6QH
ZcIuWSBIJLGTVOO4O8mE1nchn8IHxm+M34jMyg+le9ixz6WETfrntROOI1uOzHjG
W5CM6LJdYPrWMTPKMXY3AXmm8UDBSbP2D/DPCc8+8DSJdX2vpsY8jkQMKBLArpw/
igXL+VTkHB/i84crKg7Ri6qf4pATmvtcOtUSb0gZedN5m/KmJSmgylLZnnp1xEZb
ogekDCke
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org