Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa
File:                     323830343a353832343a3a2f33322d3438203d3e20323638313039.roa (raw, json)
Hash identifier:          Rq2yjT00vzHSiRLBEt18hwEe962FDskTfdAnz8+8FaQ=
Subject key identifier:   C7:D1:C1:62:84:26:26:20:D2:33:D4:2D:AC:F5:2D:94:FE:EE:2E:8D
Certificate issuer:       /CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
Certificate serial:       6899C20B0F6B5A33B0D50C95FEFCC6E12EE3E2BB
Authority key identifier: 1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa
Signing time:             Thu 04 Apr 2024 03:01:20 +0000
ROA not before:           Thu 04 Apr 2024 02:56:20 +0000
ROA not after:            Thu 03 Apr 2025 03:01:20 +0000
asID:                     268109
IP address blocks:        2804:5824::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.crl
                          rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:99:c2:0b:0f:6b:5a:33:b0:d5:0c:95:fe:fc:c6:e1:2e:e3:e2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
        Validity
            Not Before: Apr  4 02:56:20 2024 GMT
            Not After : Apr  3 03:01:20 2025 GMT
        Subject: CN=C7D1C16284262620D233D42DACF52D94FEEE2E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:13:13:ac:13:7a:ca:8c:6e:78:81:a9:98:
                    e6:ea:b5:2c:d5:88:79:f1:1b:da:9e:76:4e:66:47:
                    0b:48:1c:77:20:b0:9a:ce:c2:21:77:b2:13:55:86:
                    a0:ad:b1:64:72:d6:c3:46:3f:3c:5b:08:98:5b:d0:
                    5e:7b:e9:46:0f:b2:8b:fb:40:4a:af:26:f7:fd:8c:
                    18:42:12:09:51:06:d2:17:5b:6a:e8:d5:cf:9f:8e:
                    a4:33:0e:b4:34:70:4e:c7:ff:ab:81:7b:79:2d:d2:
                    2f:11:ed:c0:ae:0e:c8:6c:c6:7e:ed:39:23:6d:43:
                    28:a8:9d:76:88:24:54:b6:00:b4:ad:23:4d:22:f7:
                    36:03:48:76:5e:bc:f9:4d:00:63:7c:0b:3a:1c:e2:
                    c3:40:42:17:fc:66:39:87:f6:4a:9b:b9:34:e6:44:
                    fc:ff:a6:97:08:03:1c:e6:14:92:f4:e2:35:c5:e8:
                    a1:75:a7:8b:9d:24:2b:6e:a5:a0:e3:83:5f:5d:62:
                    cb:f2:8b:54:82:e1:4c:cf:61:6d:b5:64:02:f5:02:
                    88:c9:5e:7a:24:59:5f:b8:22:26:11:25:85:7f:1f:
                    c2:35:16:8b:61:d4:22:35:41:eb:cc:26:5c:eb:e4:
                    7d:f7:71:ed:01:be:f1:0b:d9:ba:f2:b6:66:8b:32:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D1:C1:62:84:26:26:20:D2:33:D4:2D:AC:F5:2D:94:FE:EE:2E:8D
            X509v3 Authority Key Identifier:
                keyid:1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/323830343a353832343a3a2f33322d3438203d3e20323638313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5824::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:f6:71:a9:e2:dd:59:ac:5b:b0:df:4f:bf:74:a9:af:75:7a:
         2f:3c:26:3a:a5:1d:a6:64:a5:a3:88:76:fb:62:d1:e0:ed:ce:
         ea:41:80:52:39:bd:94:84:8e:95:2a:22:5b:b2:1e:f1:c0:ea:
         22:fa:7b:9d:3f:4d:cb:51:92:ad:51:ae:a1:86:49:2a:c3:ab:
         5e:5d:5e:a9:34:cf:6a:27:a6:ca:c2:3e:4d:91:5f:37:d8:86:
         8f:a1:62:9b:b8:9a:dc:37:38:4d:e8:ff:cc:27:b2:19:39:cf:
         2e:60:4a:1b:07:04:95:f2:fa:ea:88:51:fe:1c:51:46:5d:45:
         e7:04:ef:b8:da:73:31:43:4d:02:1e:07:d3:6d:0e:90:ce:d1:
         c4:cd:70:f1:86:18:7d:71:52:5c:76:83:88:bb:49:50:18:27:
         48:96:d5:39:e5:6f:c5:dc:59:56:13:95:e5:d1:02:f8:39:ae:
         fe:81:61:97:a0:a1:41:bc:37:ec:bf:fa:4a:7a:bc:d3:1c:56:
         b0:40:d5:da:69:b5:87:38:5c:45:01:8e:0d:e3:45:be:40:54:
         bd:7d:0b:ca:a4:b6:5a:93:4d:a9:89:a7:93:50:0a:2d:a5:e1:
         4a:4b:51:3c:1e:48:fa:59:90:29:f1:6f:46:12:b3:4f:49:47:
         28:ac:6b:57
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaJnCCw9rWjOw1QyV/vzG4S7j4rswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyODQ5NTA5NTQ5ODk4RDJGQzg1RjQxQTJEMUZFN0Iz
QzVGOEQ4RjAeFw0yNDA0MDQwMjU2MjBaFw0yNTA0MDMwMzAxMjBaMDMxMTAvBgNV
BAMTKEM3RDFDMTYyODQyNjI2MjBEMjMzRDQyREFDRjUyRDk0RkVFRTJFOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpBMTrBN6yoxueIGpmObqtSzV
iHnxG9qedk5mRwtIHHcgsJrOwiF3shNVhqCtsWRy1sNGPzxbCJhb0F576UYPsov7
QEqvJvf9jBhCEglRBtIXW2ro1c+fjqQzDrQ0cE7H/6uBe3kt0i8R7cCuDshsxn7t
OSNtQyionXaIJFS2ALStI00i9zYDSHZevPlNAGN8Czoc4sNAQhf8ZjmH9kqbuTTm
RPz/ppcIAxzmFJL04jXF6KF1p4udJCtupaDjg19dYsvyi1SC4UzPYW21ZAL1AojJ
XnokWV+4IiYRJYV/H8I1Foth1CI1QevMJlzr5H33ce0BvvEL2brytmaLMvp/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUx9HBYoQmJiDSM9QtrPUtlP7uLo0wHwYDVR0j
BBgwFoAUGyhJUJVJiY0vyF9BotH+ezxfjY8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QTUFTVnJjOEF5bXlzNDczd3FFQXh1Z1NQRVpIa1JBdjVybUxOQzZab0FT
LzIvMUIyODQ5NTA5NTQ5ODk4RDJGQzg1RjQxQTJEMUZFN0IzQzVGOEQ4Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQjI4NDk1MDk1NDk4OThEMkZD
ODVGNDFBMkQxRkU3QjNDNUY4RDhGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
TUFTVnJjOEF5bXlzNDczd3FFQXh1Z1NQRVpIa1JBdjVybUxOQzZab0FTLzIvMzIz
ODMwMzQzYTM1MzgzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4MzEz
MDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARYJDANBgkqhkiG9w0BAQsFAAOCAQEAf/ZxqeLdWaxb
sN9Pv3Spr3V6LzwmOqUdpmSlo4h2+2LR4O3O6kGAUjm9lISOlSoiW7Ie8cDqIvp7
nT9Ny1GSrVGuoYZJKsOrXl1eqTTPaiemysI+TZFfN9iGj6Fim7ia3Dc4Tej/zCey
GTnPLmBKGwcElfL66ohR/hxRRl1F5wTvuNpzMUNNAh4H020OkM7RxM1w8YYYfXFS
XHaDiLtJUBgnSJbVOeVvxdxZVhOV5dEC+Dmu/oFhl6ChQbw37L/6Snq80xxWsEDV
2mm1hzhcRQGODeNFvkBUvX0LyqS2WpNNqYmnk1AKLaXhSktRPB5I+lmQKfFvRhKz
T0lHKKxrVw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:13 2024 by rpki-client on console-ams.rpki-client.org