Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa
File:                     323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa (raw, json)
Hash identifier:          C7jIouSpLo1Qn/5d1IlWvKnnB98qLECKE15u6j3JwMM=
Subject key identifier:   EE:2C:EC:BD:5A:AB:7B:C4:97:A4:D2:BE:D6:CF:5C:48:36:D2:2D:46
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       35C90B76009C1119770F369DF4FE2CF25BE49ED6
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa
Signing time:             Tue 10 Sep 2024 14:21:27 +0000
ROA not before:           Tue 10 Sep 2024 14:16:27 +0000
ROA not after:            Tue 09 Sep 2025 14:21:27 +0000
asID:                     262352
IP address blocks:        2804:820:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c9:0b:76:00:9c:11:19:77:0f:36:9d:f4:fe:2c:f2:5b:e4:9e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 10 14:16:27 2024 GMT
            Not After : Sep  9 14:21:27 2025 GMT
        Subject: CN=EE2CECBD5AAB7BC497A4D2BED6CF5C4836D22D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:65:61:ca:04:a0:ee:5a:fb:a9:ba:09:90:
                    32:b7:a0:ba:ee:60:18:74:e0:37:b5:0b:01:d1:0e:
                    a4:0a:d6:91:5c:2c:a9:26:3b:93:ef:ab:40:99:b5:
                    86:18:cc:b0:b0:40:ca:5d:e9:d5:33:11:2e:ea:42:
                    bb:b4:8e:1f:8c:27:44:5e:a0:6f:c4:a0:7c:a7:69:
                    7e:e9:7a:71:e3:d9:d5:d5:e7:a2:f3:f9:e6:a1:2d:
                    1a:ac:cb:2a:29:62:f3:1c:f9:9a:07:cd:3c:03:04:
                    90:af:75:09:0f:19:6d:36:5f:ea:44:a5:05:9c:2f:
                    56:0e:2d:a3:b5:4c:7a:5e:33:14:18:9a:98:e3:54:
                    0a:8e:ed:a6:bd:b4:0c:1f:ba:fa:94:14:f1:26:20:
                    5d:9c:f4:41:ac:41:25:bc:b0:46:b8:34:58:83:42:
                    b7:d7:7d:af:40:2b:3b:3d:5e:6a:6b:3a:c1:b8:c1:
                    ba:e1:36:95:ff:ef:47:7a:e2:22:26:5c:44:cf:e1:
                    7f:67:2d:bc:1b:93:b6:3f:01:2c:48:6d:c7:d3:40:
                    4b:da:a4:64:35:be:72:8d:d2:89:ff:f0:aa:d2:9b:
                    9e:08:66:f8:7a:21:37:8f:3c:8e:9b:91:1b:1d:d0:
                    26:2b:41:7e:d6:f9:ed:fd:7c:5c:b5:00:5f:3e:9d:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2C:EC:BD:5A:AB:7B:C4:97:A4:D2:BE:D6:CF:5C:48:36:D2:2D:46
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a633030303a3a2f33342d3334203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:00:d0:74:1d:64:d4:ef:c1:03:43:e6:86:02:cc:92:fa:e9:
         1a:e2:83:1d:ef:e0:17:8d:df:76:a2:33:80:68:40:fa:d0:31:
         52:ed:95:2b:68:0b:c7:67:28:9a:f1:43:28:cd:8a:cd:b7:c7:
         f5:ef:23:11:f7:e4:5b:85:a1:6d:07:25:9b:75:4c:14:2d:04:
         8d:2b:04:27:74:ce:31:92:04:78:a4:46:8a:de:63:07:a2:e4:
         7e:3d:bd:2f:0e:f4:2b:fe:34:c1:5c:1a:78:af:eb:58:3b:57:
         d6:f3:98:52:2d:06:29:79:1f:98:36:48:87:df:30:8d:95:ae:
         69:9c:8d:65:94:9e:b4:e0:3f:9b:07:40:e3:54:c1:26:60:45:
         57:db:44:09:a0:72:b2:41:2c:f1:a3:18:88:31:30:df:b7:23:
         f9:47:94:21:22:b4:74:60:06:46:4f:0c:54:30:0f:c4:ec:cd:
         9d:cf:92:06:3c:3e:66:30:ba:46:71:7f:26:48:73:44:e2:66:
         30:4d:1c:4d:bb:f3:2a:45:d1:bf:f1:b2:8b:95:75:0a:f5:94:
         d5:5f:9a:b3:8b:da:8e:13:00:b8:74:e5:bc:80:bf:15:04:6f:
         05:26:96:59:32:0e:aa:74:d2:06:19:e8:d9:c8:9e:62:2e:b1:
         44:88:b2:a5
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUNckLdgCcERl3Dzad9P4s8lvkntYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA5MTAxNDE2MjdaFw0yNTA5MDkxNDIxMjdaMDMxMTAvBgNV
BAMTKEVFMkNFQ0JENUFBQjdCQzQ5N0E0RDJCRUQ2Q0Y1QzQ4MzZEMjJENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4GVhygSg7lr7qboJkDK3oLru
YBh04De1CwHRDqQK1pFcLKkmO5Pvq0CZtYYYzLCwQMpd6dUzES7qQru0jh+MJ0Re
oG/EoHynaX7penHj2dXV56Lz+eahLRqsyyopYvMc+ZoHzTwDBJCvdQkPGW02X+pE
pQWcL1YOLaO1THpeMxQYmpjjVAqO7aa9tAwfuvqUFPEmIF2c9EGsQSW8sEa4NFiD
QrfXfa9AKzs9XmprOsG4wbrhNpX/70d64iImXETP4X9nLbwbk7Y/ASxIbcfTQEva
pGQ1vnKN0on/8KrSm54IZvh6ITePPI6bkRsd0CYrQX7W+e39fFy1AF8+nZXbAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU7izsvVqre8SXpNK+1s9cSDbSLUYwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzIz
ODMwMzQzYTM4MzIzMDNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAz
MjM2MzIzMzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAggwDANBgkqhkiG9w0BAQsFAAOCAQEA
VgDQdB1k1O/BA0PmhgLMkvrpGuKDHe/gF43fdqIzgGhA+tAxUu2VK2gLx2comvFD
KM2KzbfH9e8jEffkW4WhbQclm3VMFC0EjSsEJ3TOMZIEeKRGit5jB6Lkfj29Lw70
K/40wVwaeK/rWDtX1vOYUi0GKXkfmDZIh98wjZWuaZyNZZSetOA/mwdA41TBJmBF
V9tECaByskEs8aMYiDEw37cj+UeUISK0dGAGRk8MVDAPxOzNnc+SBjw+ZjC6RnF/
JkhzROJmME0cTbvzKkXRv/Gyi5V1CvWU1V+as4vajhMAuHTlvIC/FQRvBSaWWTIO
qnTSBhno2cieYi6xRIiypQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:04 2024 by rpki-client on console-fra.rpki-client.org