Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa
File:                     323830343a326436633a3a2f33332d3333203d3e20323635323831.roa (raw, json)
Hash identifier:          VK2LFISmb8/QIYpuK7fs6Ah2wgRcs1kPqpf3LfINzvY=
Subject key identifier:   FC:28:20:30:4B:C8:DA:84:16:CA:6F:5B:6E:B3:8F:A1:75:90:9B:F4
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       3264747B93476D25378E7C1C082905B892310155
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa
Signing time:             Thu 04 Jul 2024 16:32:11 +0000
ROA not before:           Thu 04 Jul 2024 16:27:11 +0000
ROA not after:            Thu 03 Jul 2025 16:32:11 +0000
asID:                     265281
IP address blocks:        2804:2d6c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:64:74:7b:93:47:6d:25:37:8e:7c:1c:08:29:05:b8:92:31:01:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jul  4 16:27:11 2024 GMT
            Not After : Jul  3 16:32:11 2025 GMT
        Subject: CN=FC2820304BC8DA8416CA6F5B6EB38FA175909BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:de:29:d7:00:0a:70:5c:91:05:a1:f5:c1:
                    83:ef:27:35:92:55:0f:08:0a:51:3d:06:b3:70:c6:
                    16:5b:e5:3c:26:a0:e2:44:51:a3:88:df:a0:e5:b6:
                    18:91:2b:f0:71:60:ce:e4:b6:97:a7:0c:5d:75:97:
                    e4:5a:56:17:86:54:23:ca:92:73:19:cb:9e:5b:ec:
                    e1:fd:e1:b9:d8:2a:f8:cf:ef:4c:a8:3f:51:f9:96:
                    ff:90:4a:33:ca:38:38:0d:f4:fc:bd:d5:9c:c5:c0:
                    99:55:b5:fd:fb:12:c6:f1:f6:55:c4:3b:e1:52:e1:
                    1f:d8:9a:dc:8e:b0:33:87:d6:2e:dc:de:1c:63:57:
                    57:86:50:e8:e8:84:14:7d:27:5c:53:9a:83:18:f3:
                    56:74:45:2a:0d:cb:99:30:fa:f8:d7:75:21:43:33:
                    89:70:64:79:35:1a:4c:65:07:9c:7b:fb:7c:c2:2b:
                    4d:ea:5f:5a:98:10:c6:d3:76:d5:22:34:dc:f7:27:
                    a8:9c:dc:8c:fa:9e:74:57:40:9d:b8:9f:80:df:cf:
                    ca:a1:7c:af:c4:f3:e2:ff:83:99:dd:d2:a3:2c:a6:
                    45:2c:31:58:df:a1:72:89:19:3d:47:2a:ae:be:0d:
                    d1:6d:bf:c2:a0:29:95:1b:49:a5:5f:76:e3:90:0f:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:28:20:30:4B:C8:DA:84:16:CA:6F:5B:6E:B3:8F:A1:75:90:9B:F4
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d6c::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:09:1d:1f:f0:a2:e9:6b:32:0e:58:2c:5c:d4:2d:de:06:9c:
         f9:1d:7f:a9:da:e7:80:74:a3:9d:eb:5a:53:6c:9e:6f:3b:a4:
         91:e4:be:d4:36:b6:a3:e3:85:a1:45:6a:d4:a9:52:84:a9:77:
         b5:f8:97:c7:95:dd:7f:4d:59:87:18:10:e6:55:ef:74:f1:04:
         99:4c:e0:1a:7d:1a:20:15:76:7e:96:1d:1c:3f:ab:95:62:de:
         6f:8b:da:09:5e:6d:3c:97:7c:0f:97:07:b5:26:8e:ce:9a:2c:
         1f:91:7d:ce:d5:14:77:db:0e:43:97:f7:98:1f:5a:7d:f5:02:
         a7:1a:ca:c6:f3:a8:11:ab:e8:0d:17:02:d0:8d:36:8e:3b:51:
         67:22:0a:e6:c7:7d:05:08:c6:2e:9e:90:1f:22:30:40:3d:98:
         ac:9a:9b:c1:e3:dd:72:47:f1:87:ee:e4:95:75:4e:c0:9e:9d:
         37:c7:bb:34:20:31:ed:fa:e5:8f:4a:a1:49:f3:fe:7c:e1:bf:
         4d:f2:cd:a1:f2:85:6c:0c:57:ad:e5:71:74:78:f7:17:6f:64:
         9d:0c:84:26:9a:f5:ae:81:32:5e:09:93:45:f7:ea:47:62:f1:
         eb:22:2d:a7:08:50:9d:3e:24:87:48:10:59:bd:64:07:e7:b4:
         bb:3c:b9:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMmR0e5NHbSU3jnwcCCkFuJIxAVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3MDNENjcxQUU2QTlCNDVEMjIyMUNCNDQyRjhDMzQw
MjE2QTM1NDAeFw0yNDA3MDQxNjI3MTFaFw0yNTA3MDMxNjMyMTFaMDMxMTAvBgNV
BAMTKEZDMjgyMDMwNEJDOERBODQxNkNBNkY1QjZFQjM4RkExNzU5MDlCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUN4p1wAKcFyRBaH1wYPvJzWS
VQ8IClE9BrNwxhZb5TwmoOJEUaOI36DlthiRK/BxYM7ktpenDF11l+RaVheGVCPK
knMZy55b7OH94bnYKvjP70yoP1H5lv+QSjPKODgN9Py91ZzFwJlVtf37Esbx9lXE
O+FS4R/YmtyOsDOH1i7c3hxjV1eGUOjohBR9J1xTmoMY81Z0RSoNy5kw+vjXdSFD
M4lwZHk1GkxlB5x7+3zCK03qX1qYEMbTdtUiNNz3J6ic3Iz6nnRXQJ24n4Dfz8qh
fK/E8+L/g5nd0qMspkUsMVjfoXKJGT1HKq6+DdFtv8KgKZUbSaVfduOQD5L1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/CggMEvI2oQWym9bbrOPoXWQm/QwHwYDVR0j
BBgwFoAUJ3A9ZxrmqbRdIiHLRC+MNAIWo1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZOd3JFUlhucFN4TEt1QnU2c2p0NGU0cVBvQ3dqV2txRTZzcFZ1NmpO
M0YvMC8yNzcwM0Q2NzFBRTZBOUI0NUQyMjIxQ0I0NDJGOEMzNDAyMTZBMzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NzAzRDY3MUFFNkE5QjQ1
RDIyMjFDQjQ0MkY4QzM0MDIxNkEzNTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmTndyRVJYbnBTeExLdUJ1NnNqdDRlNHFQb0N3aldrcUU2c3BWdTZqTjNGLzAv
MzIzODMwMzQzYTMyNjQzNjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzIzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQtbAAwDQYJKoZIhvcNAQELBQADggEBAHcJHR/w
oulrMg5YLFzULd4GnPkdf6na54B0o53rWlNsnm87pJHkvtQ2tqPjhaFFatSpUoSp
d7X4l8eV3X9NWYcYEOZV73TxBJlM4Bp9GiAVdn6WHRw/q5Vi3m+L2glebTyXfA+X
B7Umjs6aLB+Rfc7VFHfbDkOX95gfWn31AqcaysbzqBGr6A0XAtCNNo47UWciCubH
fQUIxi6ekB8iMEA9mKyam8Hj3XJH8Yfu5JV1TsCenTfHuzQgMe365Y9KoUnz/nzh
v03yzaHyhWwMV63lcXR49xdvZJ0MhCaa9a6BMl4Jk0X36kdi8esiLacIUJ0+JIdI
EFm9ZAfntLs8uaQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org