Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33322d3332203d3e20323637353631.roa
File:                     323830343a343334633a3a2f33322d3332203d3e20323637353631.roa (raw, json)
Hash identifier:          RdaMtgr9bx+NqFNmjue0/ROULNf10tIBTEm5QZ1Iq/Y=
Subject key identifier:   E6:5C:08:56:8A:73:04:5F:FE:96:92:FA:B6:5B:EA:33:F4:39:71:E2
Certificate issuer:       /CN=95E83C1EC29F8251CA035F581B61B808604EC59D
Certificate serial:       01F6154CF9EAFD2CA3BC398C5CCADDF672A321A6
Authority key identifier: 95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33322d3332203d3e20323637353631.roa
Signing time:             Thu 04 Apr 2024 13:16:01 +0000
ROA not before:           Thu 04 Apr 2024 13:11:01 +0000
ROA not after:            Thu 03 Apr 2025 13:16:01 +0000
asID:                     267561
IP address blocks:        2804:434c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl
                          rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 08:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f6:15:4c:f9:ea:fd:2c:a3:bc:39:8c:5c:ca:dd:f6:72:a3:21:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E83C1EC29F8251CA035F581B61B808604EC59D
        Validity
            Not Before: Apr  4 13:11:01 2024 GMT
            Not After : Apr  3 13:16:01 2025 GMT
        Subject: CN=E65C08568A73045FFE9692FAB65BEA33F43971E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:27:db:10:ff:80:da:34:09:2a:05:c2:58:
                    f9:53:9a:4f:28:53:7e:cc:66:9f:e2:24:33:53:96:
                    ba:75:a4:34:4d:70:2e:a2:c6:50:c3:80:11:67:29:
                    e8:29:ad:6d:61:8d:47:b4:9d:4d:d5:29:85:93:45:
                    44:c8:42:6d:4b:cd:8b:45:82:f1:db:ae:a6:a7:40:
                    cf:af:d1:61:4a:23:19:c2:60:fe:e0:67:3b:b4:bf:
                    ee:72:f5:e6:a4:1c:54:10:a9:41:cc:16:ee:70:f8:
                    e9:80:c9:80:59:e6:e4:b1:bf:2d:b9:a8:cc:b7:8e:
                    e0:dd:70:70:43:21:5a:7c:9c:f0:6d:07:48:b7:95:
                    dc:da:f8:e9:78:a6:5d:4b:3e:12:da:5a:ff:c1:e1:
                    b1:00:d1:1c:22:a2:07:21:83:e8:ae:da:8b:7f:58:
                    1e:4a:6d:c5:70:f1:18:f5:86:83:d6:a5:89:c5:68:
                    b6:46:bc:06:b7:9c:35:dd:0c:ae:20:79:a4:1e:00:
                    11:bf:79:a4:5b:3b:64:e3:59:b8:e2:55:39:79:b3:
                    65:b9:e1:34:4a:3d:c9:f9:36:e1:cc:d1:e1:db:93:
                    b8:13:32:71:45:f8:c7:81:13:0b:0f:df:3f:e2:10:
                    b6:1f:bf:c8:ea:7c:9f:e9:79:0d:53:50:b4:2b:61:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5C:08:56:8A:73:04:5F:FE:96:92:FA:B6:5B:EA:33:F4:39:71:E2
            X509v3 Authority Key Identifier:
                keyid:95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/323830343a343334633a3a2f33322d3332203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:434c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:e2:7b:da:9a:a3:5f:23:9c:dc:e5:f7:27:c9:94:5f:85:
         b4:d9:73:32:e3:ae:13:fb:28:96:f8:d2:fb:b5:d2:fe:29:02:
         70:b0:33:52:33:34:13:09:91:30:fd:bf:73:bc:cf:eb:5e:ae:
         e4:96:84:8a:51:cc:0c:67:ec:1e:93:8c:2d:02:6d:a7:b0:7e:
         74:cf:59:43:1c:b3:52:01:86:e7:2c:0c:50:9c:78:3d:a0:4b:
         78:15:9c:7d:73:1d:0b:08:85:90:9f:32:ba:94:04:38:b6:d4:
         26:6f:8a:f4:2a:ec:3f:60:c9:82:cf:7f:96:9b:0c:3b:c5:14:
         32:ca:1b:15:d4:54:fc:f2:f5:cc:a0:9e:fd:ce:f2:14:e3:23:
         fa:0d:d5:21:74:61:df:2c:3c:3a:99:14:a0:99:4d:0f:9f:3f:
         b7:a4:c1:f0:7c:c3:f9:29:06:c8:70:37:87:dc:f4:22:ed:3c:
         d0:31:0a:66:76:a7:cd:95:14:0a:ae:57:44:61:75:da:6f:05:
         30:63:0e:a4:2d:f2:f4:c8:34:b5:b5:4b:94:c2:d4:4a:62:be:
         81:f5:5c:85:2b:0b:41:fb:13:be:7e:a8:4f:d6:65:84:14:3e:
         b6:72:2d:03:d3:59:b4:d4:34:79:e3:14:48:ce:76:d6:be:94:
         b2:43:a9:0d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAfYVTPnq/SyjvDmMXMrd9nKjIaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFODNDMUVDMjlGODI1MUNBMDM1RjU4MUI2MUI4MDg2
MDRFQzU5RDAeFw0yNDA0MDQxMzExMDFaFw0yNTA0MDMxMzE2MDFaMDMxMTAvBgNV
BAMTKEU2NUMwODU2OEE3MzA0NUZGRTk2OTJGQUI2NUJFQTMzRjQzOTcxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JyfbEP+A2jQJKgXCWPlTmk8o
U37MZp/iJDNTlrp1pDRNcC6ixlDDgBFnKegprW1hjUe0nU3VKYWTRUTIQm1LzYtF
gvHbrqanQM+v0WFKIxnCYP7gZzu0v+5y9eakHFQQqUHMFu5w+OmAyYBZ5uSxvy25
qMy3juDdcHBDIVp8nPBtB0i3ldza+Ol4pl1LPhLaWv/B4bEA0Rwiogchg+iu2ot/
WB5KbcVw8Rj1hoPWpYnFaLZGvAa3nDXdDK4geaQeABG/eaRbO2TjWbjiVTl5s2W5
4TRKPcn5NuHM0eHbk7gTMnFF+MeBEwsP3z/iELYfv8jqfJ/peQ1TULQrYSCLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU5lwIVopzBF/+lpL6tlvqM/Q5ceIwHwYDVR0j
BBgwFoAUleg8HsKfglHKA19YG2G4CGBOxZ0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ndVI3OXVpcUQ2bW11eTdTYVpLSFVQR1hHZFZmQVlWMkxFYmY2NEthUzJ5
LzEvOTVFODNDMUVDMjlGODI1MUNBMDM1RjU4MUI2MUI4MDg2MDRFQzU5RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85NUU4M0MxRUMyOUY4MjUxQ0Ew
MzVGNTgxQjYxQjgwODYwNEVDNTlELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n
dVI3OXVpcUQ2bW11eTdTYVpLSFVQR1hHZFZmQVlWMkxFYmY2NEthUzJ5LzEvMzIz
ODMwMzQzYTM0MzMzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3MzUz
NjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARDTDANBgkqhkiG9w0BAQsFAAOCAQEAVarie9qao18j
nNzl9yfJlF+FtNlzMuOuE/solvjS+7XS/ikCcLAzUjM0EwmRMP2/c7zP616u5JaE
ilHMDGfsHpOMLQJtp7B+dM9ZQxyzUgGG5ywMUJx4PaBLeBWcfXMdCwiFkJ8yupQE
OLbUJm+K9CrsP2DJgs9/lpsMO8UUMsobFdRU/PL1zKCe/c7yFOMj+g3VIXRh3yw8
OpkUoJlND58/t6TB8HzD+SkGyHA3h9z0Iu080DEKZnanzZUUCq5XRGF12m8FMGMO
pC3y9Mg0tbVLlMLUSmK+gfVchSsLQfsTvn6oT9ZlhBQ+tnItA9NZtNQ0eeMUSM52
1r6UskOpDQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:59 2024 by rpki-client on console-fra.rpki-client.org