Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33322d3332203d3e20323730323531.roa
File:                     323830343a363932343a3a2f33322d3332203d3e20323730323531.roa (raw, json)
Hash identifier:          WQz3LpqfchjUSK1a5J+S4KtYXj1kmW0XUUZkF3r7OwI=
Subject key identifier:   E9:12:35:42:1A:F0:C9:9C:E1:0B:3B:D4:FA:03:A7:80:3F:45:7C:65
Certificate issuer:       /CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
Certificate serial:       77FB39DA4AB9BC458DB9A537F16C5127C6E317C5
Authority key identifier: 07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33322d3332203d3e20323730323531.roa
Signing time:             Mon 16 Sep 2024 22:31:07 +0000
ROA not before:           Mon 16 Sep 2024 22:26:07 +0000
ROA not after:            Mon 15 Sep 2025 22:31:07 +0000
asID:                     270251
IP address blocks:        2804:6924::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl
                          rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:39:da:4a:b9:bc:45:8d:b9:a5:37:f1:6c:51:27:c6:e3:17:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
        Validity
            Not Before: Sep 16 22:26:07 2024 GMT
            Not After : Sep 15 22:31:07 2025 GMT
        Subject: CN=E91235421AF0C99CE10B3BD4FA03A7803F457C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:95:bb:6f:12:da:06:ae:20:4c:26:c1:04:
                    5c:68:27:aa:d0:d7:6d:57:71:3c:33:1e:78:0c:69:
                    a1:48:c6:38:db:2d:d2:4b:5f:37:70:7c:1a:8b:88:
                    7f:0e:a1:63:bc:a0:8d:16:47:d2:a5:b7:cc:08:e0:
                    67:ba:af:e5:d2:4b:c8:d4:e4:80:69:55:6a:36:72:
                    20:59:76:91:7d:a2:12:a5:3f:24:f5:c5:e0:59:d7:
                    7b:8e:1c:f0:c5:b1:64:a2:28:2a:e6:65:c6:6a:f1:
                    47:ae:f5:5e:e6:f6:13:84:6c:92:2b:f2:5d:06:2c:
                    1a:ec:03:21:00:b6:3e:55:bd:f9:d0:15:d2:4e:26:
                    d8:f1:40:e5:55:e9:d4:da:14:2d:9b:da:b0:63:51:
                    e5:14:e5:8d:b6:3f:60:3c:4e:3c:53:bc:68:7d:46:
                    48:bf:a1:53:11:1b:dd:9f:32:96:79:73:77:fe:f3:
                    e5:ca:24:2a:18:7f:28:5f:e3:6d:f8:c2:43:02:82:
                    71:19:59:46:e9:e6:30:06:73:c0:81:c3:bb:5d:3b:
                    b8:61:bb:91:1a:af:8d:4e:ff:32:21:58:ff:17:37:
                    fe:15:79:51:4d:56:34:05:bf:fb:9c:7b:3a:7f:69:
                    46:dc:1b:09:32:01:38:2f:a3:8f:55:37:9d:a5:0e:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:35:42:1A:F0:C9:9C:E1:0B:3B:D4:FA:03:A7:80:3F:45:7C:65
            X509v3 Authority Key Identifier:
                keyid:07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/323830343a363932343a3a2f33322d3332203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6924::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:df:4e:c1:e7:a9:ff:a6:87:b6:2a:29:32:b5:a5:f5:f8:
         a4:b9:aa:8d:5e:ed:3b:47:28:e2:66:57:39:8a:70:13:48:60:
         9d:a2:32:f0:54:96:06:b4:c5:94:b0:a6:c0:47:7e:2e:0d:4d:
         f0:5f:36:46:96:ab:f6:01:dc:64:35:d6:4d:25:f6:ee:13:51:
         8b:d0:6d:d2:5c:8d:38:30:4d:52:9b:81:31:ab:1e:09:90:d4:
         29:a4:5e:6a:92:71:38:cf:1f:f0:ee:02:23:63:3b:77:4d:57:
         e4:89:b2:17:33:ec:13:c7:54:21:84:14:e7:39:6b:64:a7:24:
         94:2e:8e:df:83:26:c6:b4:9f:40:ae:33:9a:70:b8:ed:92:26:
         06:00:dd:b0:18:e9:db:0d:00:a4:5a:ba:97:e9:32:ea:6a:99:
         8d:c8:b0:c0:e8:d1:e5:d5:3a:fc:4a:23:15:15:33:6d:66:0e:
         6b:23:8c:80:b4:09:fb:ee:79:e8:17:3b:f1:23:bc:02:5c:b6:
         19:d5:17:27:f9:74:3c:f5:91:0d:7b:79:0d:f6:e0:c4:51:de:
         52:41:a8:11:56:d9:f5:09:96:19:db:32:83:8d:74:f2:09:35:
         5d:2a:17:d4:f8:ef:77:3b:fc:aa:62:94:bf:ef:df:a6:56:07:
         07:6a:49:e4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUd/s52kq5vEWNuaU38WxRJ8bjF8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdBNTFFNjhGNDhBRDZFODI0RjQ1ODNCRkVCQkM1NUU2
OUQ0RENDQjAeFw0yNDA5MTYyMjI2MDdaFw0yNTA5MTUyMjMxMDdaMDMxMTAvBgNV
BAMTKEU5MTIzNTQyMUFGMEM5OUNFMTBCM0JENEZBMDNBNzgwM0Y0NTdDNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsZW7bxLaBq4gTCbBBFxoJ6rQ
121XcTwzHngMaaFIxjjbLdJLXzdwfBqLiH8OoWO8oI0WR9Klt8wI4Ge6r+XSS8jU
5IBpVWo2ciBZdpF9ohKlPyT1xeBZ13uOHPDFsWSiKCrmZcZq8Ueu9V7m9hOEbJIr
8l0GLBrsAyEAtj5VvfnQFdJOJtjxQOVV6dTaFC2b2rBjUeUU5Y22P2A8TjxTvGh9
Rki/oVMRG92fMpZ5c3f+8+XKJCoYfyhf4234wkMCgnEZWUbp5jAGc8CBw7tdO7hh
u5Ear41O/zIhWP8XN/4VeVFNVjQFv/ucezp/aUbcGwkyATgvo49VN52lDg69AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6RI1QhrwyZzhCzvU+gOngD9FfGUwHwYDVR0j
BBgwFoAUB6UeaPSK1ugk9Fg7/rvFXmnU3MswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkR0Tmtwck1tR1pGZGVVek1ZSm54dWtxVXJmVm1LQkJSelI1dEhxUFZC
QnovMC8wN0E1MUU2OEY0OEFENkU4MjRGNDU4M0JGRUJCQzU1RTY5RDREQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3QTUxRTY4RjQ4QUQ2RTgy
NEY0NTgzQkZFQkJDNTVFNjlENERDQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEdE5rcHJNbUdaRmRlVXpNWUpueHVrcVVyZlZtS0JCUnpSNXRIcVBWQkJ6LzAv
MzIzODMwMzQzYTM2MzkzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpJDANBgkqhkiG9w0BAQsFAAOCAQEALVnfTsHn
qf+mh7YqKTK1pfX4pLmqjV7tO0co4mZXOYpwE0hgnaIy8FSWBrTFlLCmwEd+Lg1N
8F82Rpar9gHcZDXWTSX27hNRi9Bt0lyNODBNUpuBMaseCZDUKaReapJxOM8f8O4C
I2M7d01X5ImyFzPsE8dUIYQU5zlrZKcklC6O34MmxrSfQK4zmnC47ZImBgDdsBjp
2w0ApFq6l+ky6mqZjciwwOjR5dU6/EojFRUzbWYOayOMgLQJ++556Bc78SO8Aly2
GdUXJ/l0PPWRDXt5DfbgxFHeUkGoEVbZ9QmWGdsyg4108gk1XSoX1Pjvdzv8qmKU
v+/fplYHB2pJ5A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org