Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa
File:                     323830343a343032343a3a2f33322d3438203d3e20323635393337.roa (raw, json)
Hash identifier:          pukWa1GTDowT45kUeQ1VcDLjO/rLlu1dMcccAued1Ng=
Subject key identifier:   D5:D8:40:A1:BA:5F:2B:8E:BE:D9:92:E4:21:07:7F:B2:E3:E1:5A:54
Certificate issuer:       /CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
Certificate serial:       1CE90A782855C2DCB30FDADC66919F8FC419122A
Authority key identifier: 7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa
Signing time:             Thu 04 Apr 2024 08:57:32 +0000
ROA not before:           Thu 04 Apr 2024 08:52:32 +0000
ROA not after:            Thu 03 Apr 2025 08:57:32 +0000
asID:                     265937
IP address blocks:        2804:4024::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl
                          rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e9:0a:78:28:55:c2:dc:b3:0f:da:dc:66:91:9f:8f:c4:19:12:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
        Validity
            Not Before: Apr  4 08:52:32 2024 GMT
            Not After : Apr  3 08:57:32 2025 GMT
        Subject: CN=D5D840A1BA5F2B8EBED992E421077FB2E3E15A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:5a:dc:e6:16:92:19:df:3c:ff:94:e1:2a:
                    88:26:ee:53:8d:e1:f4:50:12:69:8d:18:12:a3:13:
                    9d:ea:c3:77:cd:e9:b9:2a:87:d3:37:67:b9:ea:eb:
                    4c:88:e5:89:e3:63:ae:31:78:24:b4:6f:6b:7f:af:
                    0e:c1:15:b1:fb:af:2c:fd:ab:e2:b3:31:d6:89:e9:
                    6c:e6:14:d4:13:c5:7f:51:02:93:a7:3a:29:c2:b1:
                    25:c4:14:e5:df:7c:fb:93:8d:84:39:a4:63:d9:65:
                    c6:49:e3:9a:31:f7:05:b7:14:ab:d4:07:57:56:ba:
                    d9:15:8e:54:5c:7a:1a:39:03:32:13:3c:c9:1f:ec:
                    17:f7:20:fa:86:3e:5d:04:a9:5f:1c:f8:ec:ad:ca:
                    30:26:4a:3b:10:9e:fc:bb:77:45:eb:ac:d3:3b:81:
                    98:d0:1d:2d:05:f3:22:e9:8f:06:49:a5:fc:50:3e:
                    fc:36:a2:96:f5:42:5d:0d:a3:62:5d:12:b1:fe:ab:
                    f8:00:a2:b0:a0:32:d5:f3:a5:f8:2b:89:52:70:97:
                    41:49:00:bb:f0:bd:38:96:5d:96:f7:07:aa:0a:d7:
                    12:dc:ee:fd:d6:f1:fa:0e:69:92:13:ec:68:89:c5:
                    11:d4:4a:61:a2:6a:d3:0e:90:b3:70:2e:87:7e:44:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:40:A1:BA:5F:2B:8E:BE:D9:92:E4:21:07:7F:B2:E3:E1:5A:54
            X509v3 Authority Key Identifier:
                keyid:7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4024::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:9f:80:1b:99:38:5b:1b:3a:15:03:aa:32:38:05:eb:8d:
         15:00:67:a0:dc:ef:99:c9:d5:b4:1b:88:6b:0b:a5:e3:b6:3b:
         f1:8b:bb:0d:8e:0d:37:c0:96:71:d1:58:f4:cb:e2:54:e7:f5:
         b6:13:9e:95:f4:a7:f1:52:30:ce:a9:8f:e3:64:28:3b:dc:21:
         e6:2c:eb:3a:ad:0e:1c:05:f4:fd:bf:18:84:09:b9:77:ee:bc:
         7f:db:f8:28:6f:ef:b3:05:a8:7d:a2:ac:8b:8f:3a:df:04:8c:
         19:1c:37:d5:da:55:9a:31:de:0c:ed:ae:28:31:2c:b9:b3:df:
         87:4a:ca:1a:7d:d7:86:27:cc:8a:7b:b3:f3:b8:0b:41:a2:d6:
         d5:f6:f4:d0:ff:fc:6d:4f:03:81:d4:57:e5:0f:76:9e:67:ab:
         a2:95:a7:23:06:f0:e7:c9:24:d3:23:75:3a:1c:e3:f0:f8:ce:
         4d:40:a6:89:27:18:ca:a7:f4:7b:6f:b1:26:c1:77:dd:e7:66:
         fd:be:9f:20:37:f6:7d:fc:a3:d3:71:91:48:c5:37:ae:a3:d2:
         9d:54:ad:b0:d1:68:6e:72:fc:bf:5e:70:f9:31:c3:89:f8:20:
         4f:58:f2:05:a9:bd:c9:2a:ec:bd:c1:a6:fa:d2:97:46:e5:d1:
         fb:9b:46:ca
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHOkKeChVwtyzD9rcZpGfj8QZEiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UwNkYwQUQ2QzNEQ0NFRTMxOUE5MkIxMzA2QzRDNERE
RDk5MjMyNjAeFw0yNDA0MDQwODUyMzJaFw0yNTA0MDMwODU3MzJaMDMxMTAvBgNV
BAMTKEQ1RDg0MEExQkE1RjJCOEVCRUQ5OTJFNDIxMDc3RkIyRTNFMTVBNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj41rc5haSGd88/5ThKogm7lON
4fRQEmmNGBKjE53qw3fN6bkqh9M3Z7nq60yI5YnjY64xeCS0b2t/rw7BFbH7ryz9
q+KzMdaJ6WzmFNQTxX9RApOnOinCsSXEFOXffPuTjYQ5pGPZZcZJ45ox9wW3FKvU
B1dWutkVjlRceho5AzITPMkf7Bf3IPqGPl0EqV8c+OytyjAmSjsQnvy7d0XrrNM7
gZjQHS0F8yLpjwZJpfxQPvw2opb1Ql0No2JdErH+q/gAorCgMtXzpfgriVJwl0FJ
ALvwvTiWXZb3B6oK1xLc7v3W8foOaZIT7GiJxRHUSmGiatMOkLNwLod+RO61AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1dhAobpfK46+2ZLkIQd/suPhWlQwHwYDVR0j
BBgwFoAUfgbwrWw9zO4xmpKxMGxMTd2ZIyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5RcTdxZkwxZjRmamFVNGp4VDd2VDZZMmthbW0xcDJrdDJrWHpDbzZw
QTMvMS83RTA2RjBBRDZDM0RDQ0VFMzE5QTkyQjEzMDZDNEM0REREOTkyMzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFMDZGMEFENkMzRENDRUUz
MTlBOTJCMTMwNkM0QzREREQ5OTIzMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuUXE3cWZMMWY0ZmphVTRqeFQ3dlQ2WTJrYW1tMXAya3Qya1h6Q282cEEzLzEv
MzIzODMwMzQzYTM0MzAzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzkzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARAJDANBgkqhkiG9w0BAQsFAAOCAQEAPCqfgBuZ
OFsbOhUDqjI4BeuNFQBnoNzvmcnVtBuIawul47Y78Yu7DY4NN8CWcdFY9MviVOf1
thOelfSn8VIwzqmP42QoO9wh5izrOq0OHAX0/b8YhAm5d+68f9v4KG/vswWofaKs
i4863wSMGRw31dpVmjHeDO2uKDEsubPfh0rKGn3XhifMinuz87gLQaLW1fb00P/8
bU8DgdRX5Q92nmeropWnIwbw58kk0yN1Ohzj8PjOTUCmiScYyqf0e2+xJsF33edm
/b6fIDf2ffyj03GRSMU3rqPSnVStsNFobnL8v15w+THDifggT1jyBam9ySrsvcGm
+tKXRuXR+5tGyg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org