Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/323830343a346433383a3a2f33322d3438203d3e20323637343139.roa
File:                     323830343a346433383a3a2f33322d3438203d3e20323637343139.roa (raw, json)
Hash identifier:          Zpv4RkxFHr8ywq17V4gvy4kzLOfTt6Q8+ALHGaUS+0E=
Subject key identifier:   63:E1:AD:56:5D:16:C4:01:25:97:4A:AD:EA:51:8D:03:E7:41:0D:B8
Certificate issuer:       /CN=FF84FC3D85F0914743832D0A76268570ECB7043C
Certificate serial:       04A4DBE8F16CFE4F003BB0200A9D3815AC0C1E94
Authority key identifier: FF:84:FC:3D:85:F0:91:47:43:83:2D:0A:76:26:85:70:EC:B7:04:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/323830343a346433383a3a2f33322d3438203d3e20323637343139.roa
Signing time:             Thu 04 Apr 2024 00:00:11 +0000
ROA not before:           Wed 03 Apr 2024 23:55:11 +0000
ROA not after:            Thu 03 Apr 2025 00:00:11 +0000
asID:                     267419
IP address blocks:        2804:4d38::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.crl
                          rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a4:db:e8:f1:6c:fe:4f:00:3b:b0:20:0a:9d:38:15:ac:0c:1e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF84FC3D85F0914743832D0A76268570ECB7043C
        Validity
            Not Before: Apr  3 23:55:11 2024 GMT
            Not After : Apr  3 00:00:11 2025 GMT
        Subject: CN=63E1AD565D16C40125974AADEA518D03E7410DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:6c:5d:0a:a3:1b:12:53:da:a2:9b:9d:28:
                    ff:ab:0d:b9:4d:bd:77:26:fd:6b:ac:97:35:26:9a:
                    ee:33:ec:5b:82:47:03:da:4d:d9:82:b4:16:d4:a1:
                    41:8f:36:f0:c0:c3:74:f3:ad:01:25:20:89:15:d9:
                    0c:3f:d6:06:14:64:e5:83:2b:90:72:ba:e4:db:cb:
                    04:fa:87:4d:e3:d4:9a:70:6b:f6:59:99:37:15:21:
                    a6:38:12:09:22:be:c3:b4:02:c3:77:2e:9d:77:13:
                    55:5b:dd:ab:09:90:0e:2f:03:3b:28:be:88:c3:5b:
                    4c:ba:53:dd:80:3c:55:32:ac:ab:11:36:bc:e4:71:
                    3e:9d:ae:ce:17:42:37:9e:1b:00:c5:f9:bc:95:c6:
                    53:58:ce:bb:04:fc:9e:bb:63:6f:57:67:d3:89:ed:
                    1e:6d:44:44:af:60:3f:71:30:41:c3:44:54:73:b7:
                    97:a9:0b:b3:25:55:ff:18:88:4b:1d:8c:3a:31:ef:
                    23:c4:64:0f:58:36:2f:8b:33:bb:de:a1:ed:b4:5b:
                    7c:98:cc:f7:f1:c1:0f:84:17:8f:2e:ac:df:eb:fb:
                    da:ae:d7:2f:5f:02:d8:83:a0:13:8c:bf:f0:f2:01:
                    17:5e:fd:9a:3a:31:4d:e7:c2:32:0d:20:4d:83:b8:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E1:AD:56:5D:16:C4:01:25:97:4A:AD:EA:51:8D:03:E7:41:0D:B8
            X509v3 Authority Key Identifier:
                keyid:FF:84:FC:3D:85:F0:91:47:43:83:2D:0A:76:26:85:70:EC:B7:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/323830343a346433383a3a2f33322d3438203d3e20323637343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d38::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:6f:16:89:b7:a5:e3:d4:ba:e0:94:a9:62:12:0d:60:ac:5d:
         c0:05:d5:c2:21:56:ef:c4:b8:5b:7f:23:c0:11:72:e7:a9:28:
         b0:01:1a:e9:e5:3b:c6:22:0a:5d:94:f5:61:08:36:64:5c:26:
         75:ea:0b:b9:89:09:62:5b:ab:96:7c:b4:43:1f:64:e7:65:1a:
         16:f5:27:29:78:4d:42:c8:09:a9:59:06:35:af:e8:9b:bf:88:
         5c:01:8a:ba:0d:09:39:14:51:26:2e:b3:8a:06:11:d4:b9:6d:
         c4:83:6c:c1:65:5c:de:b0:13:f4:b9:ae:0b:fd:50:59:59:06:
         8a:9f:6f:83:b1:a1:fc:4a:d9:96:2b:46:7e:26:26:fa:8d:7d:
         dc:5d:13:d7:13:df:47:6b:df:32:7c:f1:39:29:04:21:19:48:
         0d:6e:f5:6a:bc:69:fe:0f:ea:20:a1:cc:b8:79:5c:9e:f9:b3:
         d9:c8:66:50:5f:c3:3b:7e:c5:f0:1f:50:f2:4c:01:a8:57:70:
         16:47:1d:fd:ef:e7:52:16:d4:b6:6a:d6:77:f6:96:8c:5f:08:
         64:1e:de:ed:80:9a:1d:ac:06:8e:f4:4b:49:0b:e8:8a:54:1d:
         3f:6a:a8:ab:23:7e:81:f2:79:42:02:a4:c6:6e:2c:e4:9f:db:
         1f:e5:0b:50
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBKTb6PFs/k8AO7AgCp04FawMHpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4NEZDM0Q4NUYwOTE0NzQzODMyRDBBNzYyNjg1NzBF
Q0I3MDQzQzAeFw0yNDA0MDMyMzU1MTFaFw0yNTA0MDMwMDAwMTFaMDMxMTAvBgNV
BAMTKDYzRTFBRDU2NUQxNkM0MDEyNTk3NEFBREVBNTE4RDAzRTc0MTBEQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYmxdCqMbElPaopudKP+rDblN
vXcm/WuslzUmmu4z7FuCRwPaTdmCtBbUoUGPNvDAw3TzrQElIIkV2Qw/1gYUZOWD
K5ByuuTbywT6h03j1Jpwa/ZZmTcVIaY4EgkivsO0AsN3Lp13E1Vb3asJkA4vAzso
vojDW0y6U92APFUyrKsRNrzkcT6drs4XQjeeGwDF+byVxlNYzrsE/J67Y29XZ9OJ
7R5tRESvYD9xMEHDRFRzt5epC7MlVf8YiEsdjDox7yPEZA9YNi+LM7veoe20W3yY
zPfxwQ+EF48urN/r+9qu1y9fAtiDoBOMv/DyARde/Zo6MU3nwjINIE2DuNVpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUY+GtVl0WxAEll0qt6lGNA+dBDbgwHwYDVR0j
BBgwFoAU/4T8PYXwkUdDgy0KdiaFcOy3BDwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QeXBFWUJjM2c1VnVNSFExb253cmtVYWNnbzhNRnZGRjl4ZXpuWnhiM1Bz
LzEvRkY4NEZDM0Q4NUYwOTE0NzQzODMyRDBBNzYyNjg1NzBFQ0I3MDQzQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRjg0RkMzRDg1RjA5MTQ3NDM4
MzJEMEE3NjI2ODU3MEVDQjcwNDNDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
eXBFWUJjM2c1VnVNSFExb253cmtVYWNnbzhNRnZGRjl4ZXpuWnhiM1BzLzEvMzIz
ODMwMzQzYTM0NjQzMzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3MzQz
MTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARNODANBgkqhkiG9w0BAQsFAAOCAQEAL28Wibel49S6
4JSpYhINYKxdwAXVwiFW78S4W38jwBFy56kosAEa6eU7xiIKXZT1YQg2ZFwmdeoL
uYkJYlurlny0Qx9k52UaFvUnKXhNQsgJqVkGNa/om7+IXAGKug0JORRRJi6zigYR
1LltxINswWVc3rAT9LmuC/1QWVkGip9vg7Gh/ErZlitGfiYm+o193F0T1xPfR2vf
MnzxOSkEIRlIDW71arxp/g/qIKHMuHlcnvmz2chmUF/DO37F8B9Q8kwBqFdwFkcd
/e/nUhbUtmrWd/aWjF8IZB7e7YCaHawGjvRLSQvoilQdP2qoqyN+gfJ5QgKkxm4s
5J/bH+ULUA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:48 2024 by rpki-client on console-ams.rpki-client.org