Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa
File:                     323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa (raw, json)
Hash identifier:          Z7IC0vhHU5vP+ApX/X1K40fSz6xIGdQKXWW/bX3SYd0=
Subject key identifier:   8D:1F:4C:3A:1B:37:3D:CD:55:C7:DA:6D:85:6E:BC:9C:B1:2F:A2:3E
Certificate issuer:       /CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
Certificate serial:       084A20D4B4B3E75BA0BDD1D87852CF9915E3CDA9
Authority key identifier: A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa
Signing time:             Thu 21 Nov 2024 21:46:03 +0000
ROA not before:           Thu 21 Nov 2024 21:41:03 +0000
ROA not after:            Thu 20 Nov 2025 21:46:03 +0000
asID:                     266020
IP address blocks:        2804:393c:7700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4a:20:d4:b4:b3:e7:5b:a0:bd:d1:d8:78:52:cf:99:15:e3:cd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Validity
            Not Before: Nov 21 21:41:03 2024 GMT
            Not After : Nov 20 21:46:03 2025 GMT
        Subject: CN=8D1F4C3A1B373DCD55C7DA6D856EBC9CB12FA23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:0c:4a:b9:2b:ee:b8:87:89:5e:6b:b8:1a:
                    3c:5b:a3:a0:bc:2f:a4:4a:bb:25:b3:d8:1e:cd:e8:
                    c9:03:bd:b5:55:d3:91:92:9c:ab:26:0c:9a:5c:18:
                    b7:ba:38:72:cd:4a:f3:ef:08:41:af:af:21:49:7e:
                    9a:47:d0:a7:34:29:f5:4b:57:93:06:01:24:a3:b5:
                    2d:5b:7a:6c:86:d5:95:e9:b6:18:00:0b:eb:55:ef:
                    6b:30:eb:82:07:54:dd:0a:a3:9c:98:9d:0b:86:fd:
                    71:b7:48:35:ed:33:aa:e2:43:eb:e7:65:29:50:96:
                    c2:93:f1:a8:10:38:8f:a0:bc:a6:2f:51:6c:e4:70:
                    5a:6e:cf:d8:93:66:f6:ff:86:84:0d:75:f8:1d:f0:
                    c5:c0:3a:95:d3:0c:6f:43:8e:d4:15:00:4c:84:7a:
                    37:e6:a7:13:db:32:d5:7c:a5:0f:00:76:f7:5d:fe:
                    63:45:fb:df:cc:7b:fc:fd:88:c4:53:a3:9a:88:49:
                    9d:e1:40:e7:6e:a3:7d:3b:52:6a:cd:76:fe:c1:33:
                    0a:09:58:4d:da:5a:80:df:13:96:c1:0f:38:be:2e:
                    d2:c9:3e:90:d0:69:98:9e:cb:3a:09:e0:74:9e:a0:
                    b4:65:9f:ca:33:a1:58:23:2f:a0:eb:94:4e:3f:36:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1F:4C:3A:1B:37:3D:CD:55:C7:DA:6D:85:6E:BC:9C:B1:2F:A2:3E
            X509v3 Authority Key Identifier:
                keyid:A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:db:8e:1f:6f:9b:3c:8b:76:12:77:92:6a:bb:ad:c8:60:49:
         c8:d5:e2:c5:66:2c:ac:92:10:8e:0a:7a:a9:56:df:28:f8:03:
         5f:b8:7a:ee:29:4c:2d:64:57:ef:f2:0c:d0:62:ab:9c:c1:c1:
         e9:eb:90:61:32:a1:eb:4c:7c:53:9a:bf:39:30:54:15:0b:d7:
         81:0b:9a:d6:c4:e0:7f:65:91:7e:ea:5a:f4:71:03:10:bb:77:
         b4:af:fc:68:d0:d4:11:25:c2:94:b3:0a:49:0c:ef:2e:16:38:
         92:60:d7:5e:ca:d9:15:60:0b:fe:a4:73:45:ab:68:90:8f:30:
         01:99:34:72:08:e9:34:80:fa:ad:a8:a3:5b:7b:37:e2:8b:62:
         e3:32:98:5d:14:c8:ce:b0:20:88:c6:8f:06:be:0f:41:d8:a2:
         4d:da:25:db:f2:f1:e2:ae:df:ed:ff:2f:6e:e3:c3:e3:1a:bc:
         1e:78:3c:19:97:65:52:61:7e:7a:e5:6c:61:a4:10:98:4e:5d:
         d0:ec:09:3b:5a:af:cf:60:f2:ec:c9:51:af:27:c4:36:0b:33:
         7c:d7:c2:7d:78:0c:e6:f5:35:85:c8:4f:89:1f:b7:b8:b4:52:
         45:64:cd:52:ee:ac:67:b5:28:e7:39:d6:54:bf:0f:eb:4b:4d:
         3c:b0:21:53
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCEog1LSz51ugvdHYeFLPmRXjzakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc4M0VCMjQzMEFGQTJCOTEyRjBGMUMwN0U1QTBDMkU0
NENENjU1NDAeFw0yNDExMjEyMTQxMDNaFw0yNTExMjAyMTQ2MDNaMDMxMTAvBgNV
BAMTKDhEMUY0QzNBMUIzNzNEQ0Q1NUM3REE2RDg1NkVCQzlDQjEyRkEyM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhswxKuSvuuIeJXmu4Gjxbo6C8
L6RKuyWz2B7N6MkDvbVV05GSnKsmDJpcGLe6OHLNSvPvCEGvryFJfppH0Kc0KfVL
V5MGASSjtS1bemyG1ZXpthgAC+tV72sw64IHVN0Ko5yYnQuG/XG3SDXtM6riQ+vn
ZSlQlsKT8agQOI+gvKYvUWzkcFpuz9iTZvb/hoQNdfgd8MXAOpXTDG9DjtQVAEyE
ejfmpxPbMtV8pQ8Advdd/mNF+9/Me/z9iMRTo5qISZ3hQOduo307UmrNdv7BMwoJ
WE3aWoDfE5bBDzi+LtLJPpDQaZieyzoJ4HSeoLRln8ozoVgjL6DrlE4/NrX7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjR9MOhs3Pc1Vx9pthW68nLEvoj4wHwYDVR0j
BBgwFoAUp4PrJDCvorkS8PHAfloMLkTNZVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB
RU4vMC9BNzgzRUIyNDMwQUZBMkI5MTJGMEYxQzA3RTVBMEMyRTQ0Q0Q2NTU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3ODNFQjI0MzBBRkEyQjkx
MkYwRjFDMDdFNUEwQzJFNDRDRDY1NTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv
MzIzODMwMzQzYTMzMzkzMzYzM2EzNzM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEOTx3MA0GCSqGSIb3DQEBCwUA
A4IBAQCy244fb5s8i3YSd5Jqu63IYEnI1eLFZiyskhCOCnqpVt8o+ANfuHruKUwt
ZFfv8gzQYqucwcHp65BhMqHrTHxTmr85MFQVC9eBC5rWxOB/ZZF+6lr0cQMQu3e0
r/xo0NQRJcKUswpJDO8uFjiSYNdeytkVYAv+pHNFq2iQjzABmTRyCOk0gPqtqKNb
ezfii2LjMphdFMjOsCCIxo8Gvg9B2KJN2iXb8vHirt/t/y9u48PjGrweeDwZl2VS
YX565WxhpBCYTl3Q7Ak7Wq/PYPLsyVGvJ8Q2CzN818J9eAzm9TWFyE+JH7e4tFJF
ZM1S7qxntSjnOdZUvw/rS008sCFT
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org