Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa
File:                     323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (raw, json)
Hash identifier:          QcLBn2FW6MS06pj928K1BAwy2EGURY5KlgXU3hN1hmI=
Subject key identifier:   FA:23:5D:FC:5E:90:94:F5:A9:B8:8A:EA:C6:28:F2:A0:FD:27:54:61
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       04F40187C41ABE7BF3804C438E97A402AFE5167E
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa
Signing time:             Sun 11 Aug 2024 18:10:50 +0000
ROA not before:           Sun 11 Aug 2024 18:05:50 +0000
ROA not after:            Sun 10 Aug 2025 18:10:50 +0000
asID:                     263085
IP address blocks:        2804:96c:8900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f4:01:87:c4:1a:be:7b:f3:80:4c:43:8e:97:a4:02:af:e5:16:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Aug 11 18:05:50 2024 GMT
            Not After : Aug 10 18:10:50 2025 GMT
        Subject: CN=FA235DFC5E9094F5A9B88AEAC628F2A0FD275461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:8e:36:e3:ca:35:b4:77:50:56:d0:12:1c:
                    0c:98:4e:a3:d1:da:43:b3:50:62:1e:35:b7:af:7a:
                    77:a8:54:36:57:3e:b7:a0:96:59:1d:78:ee:61:04:
                    d3:c3:41:8a:f8:53:35:b9:18:60:96:1d:dc:26:1a:
                    9e:f1:35:a9:5a:e6:31:1c:3f:3d:01:65:4a:03:f4:
                    fc:8d:73:da:6c:f2:ab:9a:3a:cc:09:b1:ce:fb:77:
                    04:66:c9:f4:3e:83:47:5f:25:d1:de:a5:32:68:1a:
                    8c:9b:01:00:fb:1e:61:47:3d:f3:bf:06:a2:08:f2:
                    13:fe:d4:48:ed:40:82:d1:9b:35:14:0a:27:ee:7c:
                    24:7b:86:7a:79:f2:83:81:2f:63:13:bc:98:8e:17:
                    5a:0d:0e:e5:cf:df:7f:76:86:34:ac:d3:47:dc:bb:
                    7d:a3:2a:ab:d2:d0:1e:74:5d:38:24:06:eb:55:45:
                    1c:20:b8:5e:9c:f7:b8:e5:b4:0f:dd:d3:5b:25:48:
                    4f:97:a8:45:b4:7c:a8:9f:47:95:a1:f3:2c:dc:ca:
                    63:93:de:e3:c6:f8:cd:8d:62:7c:ad:ac:e7:9e:08:
                    d9:b7:3b:4c:6e:65:0c:6c:09:81:f9:7c:3e:40:6d:
                    3e:8c:80:af:14:9f:74:c4:1f:63:41:d7:6c:d1:94:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:23:5D:FC:5E:90:94:F5:A9:B8:8A:EA:C6:28:F2:A0:FD:27:54:61
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96c:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:dc:81:f5:ee:45:8c:30:e4:26:77:88:4c:7d:e9:12:f9:
         24:65:d6:e2:aa:88:1b:70:1d:ee:7e:18:d1:9d:29:9b:b4:67:
         92:80:94:da:c1:4a:48:be:e9:48:4b:8f:3b:6f:8a:ed:c7:fe:
         34:a6:8a:68:cc:2a:8d:50:fb:bf:bc:89:a8:d2:65:4c:0c:39:
         80:d0:43:a6:36:63:39:b7:b6:70:d1:75:07:08:c8:15:98:a8:
         a0:81:c2:c0:c3:07:0c:fa:e8:20:7b:f1:e4:8b:23:25:32:c1:
         13:85:55:b0:38:c8:e1:0b:cc:df:5b:02:3c:92:1c:50:60:c7:
         89:07:d1:bd:c9:cb:c1:c4:fd:5d:bd:4d:28:99:9c:37:24:6b:
         a9:4c:f5:e7:c1:44:f2:b2:ee:89:4f:fd:bb:ea:4b:fa:d4:36:
         0c:b8:2e:92:12:ea:39:70:70:9f:73:38:ed:0d:8d:42:d3:c6:
         1e:1c:c3:68:77:37:e9:54:27:0f:a5:0a:17:31:e1:20:34:43:
         c8:af:2c:9f:ca:8b:e7:36:35:8f:c0:de:8d:96:0e:60:4c:c9:
         91:24:9f:f3:52:55:13:10:b2:3b:f1:f6:0a:25:d3:23:be:41:
         8f:ab:df:4a:da:d4:0a:73:5a:ea:67:c2:70:b8:c8:f9:0d:f8:
         65:1b:1e:03
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUBPQBh8QavnvzgExDjpekAq/lFn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3
QkQzQTgyMjAeFw0yNDA4MTExODA1NTBaFw0yNTA4MTAxODEwNTBaMDMxMTAvBgNV
BAMTKEZBMjM1REZDNUU5MDk0RjVBOUI4OEFFQUM2MjhGMkEwRkQyNzU0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9Y4248o1tHdQVtASHAyYTqPR
2kOzUGIeNbeveneoVDZXPregllkdeO5hBNPDQYr4UzW5GGCWHdwmGp7xNala5jEc
Pz0BZUoD9PyNc9ps8quaOswJsc77dwRmyfQ+g0dfJdHepTJoGoybAQD7HmFHPfO/
BqII8hP+1EjtQILRmzUUCifufCR7hnp58oOBL2MTvJiOF1oNDuXP3392hjSs00fc
u32jKqvS0B50XTgkButVRRwguF6c97jltA/d01slSE+XqEW0fKifR5Wh8yzcymOT
3uPG+M2NYnytrOeeCNm3O0xuZQxsCYH5fD5AbT6MgK8Un3TEH2NB12zRlHUdAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU+iNd/F6QlPWpuIrqxijyoP0nVGEwHwYDVR0j
BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ
LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy
MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
U3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZLzAvMzIz
ODMwMzQzYTM5MzY2MzNhMzgzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
MjM2MzMzMDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAlsiTANBgkqhkiG9w0BAQsFAAOCAQEA
PwncgfXuRYww5CZ3iEx96RL5JGXW4qqIG3Ad7n4Y0Z0pm7RnkoCU2sFKSL7pSEuP
O2+K7cf+NKaKaMwqjVD7v7yJqNJlTAw5gNBDpjZjObe2cNF1BwjIFZiooIHCwMMH
DProIHvx5IsjJTLBE4VVsDjI4QvM31sCPJIcUGDHiQfRvcnLwcT9Xb1NKJmcNyRr
qUz158FE8rLuiU/9u+pL+tQ2DLgukhLqOXBwn3M47Q2NQtPGHhzDaHc36VQnD6UK
FzHhIDRDyK8sn8qL5zY1j8DejZYOYEzJkSSf81JVExCyO/H2CiXTI75Bj6vfStrU
CnNa6mfCcLjI+Q34ZRseAw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:10 2024 by rpki-client on console-fra.rpki-client.org