Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/323830343a383534633a3a2f33322d313238203d3e20323732353730.roa
File:                     323830343a383534633a3a2f33322d313238203d3e20323732353730.roa (raw, json)
Hash identifier:          CTzgrJKBLqv4pMeOIPhcK+piJ/ZYzjgl4kN1/mhiX/w=
Subject key identifier:   D4:7E:C6:93:E7:2A:18:9A:FA:7A:67:AA:6E:11:C4:00:F1:81:37:1E
Certificate issuer:       /CN=D97287D57D96D036C529C9616F5E53D9E23B6716
Certificate serial:       3F18C9F85A64A7E7BFC2CDC267D185BABFCB867C
Authority key identifier: D9:72:87:D5:7D:96:D0:36:C5:29:C9:61:6F:5E:53:D9:E2:3B:67:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97287D57D96D036C529C9616F5E53D9E23B6716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/323830343a383534633a3a2f33322d313238203d3e20323732353730.roa
Signing time:             Sun 28 Jul 2024 21:16:42 +0000
ROA not before:           Sun 28 Jul 2024 21:11:42 +0000
ROA not after:            Sun 27 Jul 2025 21:16:42 +0000
asID:                     272570
IP address blocks:        2804:854c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.crl
                          rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97287D57D96D036C529C9616F5E53D9E23B6716.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:18:c9:f8:5a:64:a7:e7:bf:c2:cd:c2:67:d1:85:ba:bf:cb:86:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97287D57D96D036C529C9616F5E53D9E23B6716
        Validity
            Not Before: Jul 28 21:11:42 2024 GMT
            Not After : Jul 27 21:16:42 2025 GMT
        Subject: CN=D47EC693E72A189AFA7A67AA6E11C400F181371E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:df:46:0a:aa:3d:2d:9e:3c:f4:33:99:9e:
                    00:64:a5:6c:5d:d0:6d:e0:ec:b4:a9:c4:bb:39:3b:
                    d1:1f:04:6c:27:0a:64:f4:65:f9:fa:b7:ae:5c:df:
                    00:fa:1b:5d:7f:03:29:f5:d8:16:b3:11:bc:61:12:
                    d7:0a:64:81:bd:76:2f:04:83:f3:3a:f1:22:d8:a6:
                    36:eb:50:18:49:26:a0:65:db:08:5a:49:ab:a5:32:
                    1c:bb:89:d0:b2:7d:b1:84:90:e9:93:79:a3:80:30:
                    5e:52:f3:ed:2d:e4:8b:33:dd:1f:25:6d:6a:28:ae:
                    10:0f:52:e7:b9:3b:b8:72:5a:17:da:64:d5:65:80:
                    a0:7a:bd:43:7a:01:77:90:21:8b:52:87:81:4d:85:
                    a5:71:16:77:63:5d:85:00:9c:e9:91:62:84:a8:f9:
                    89:55:f9:9c:a8:92:67:3e:ab:aa:2d:2a:8a:2a:51:
                    51:d4:6a:f8:fc:03:84:6a:ce:1f:2b:c5:d4:97:5a:
                    48:bf:25:bf:7c:9a:8f:cf:3a:c7:fa:46:91:6a:98:
                    2e:04:e1:a2:b7:73:ba:ff:be:f1:5c:2f:07:7c:00:
                    bc:41:d2:46:1e:2f:49:2a:24:07:be:42:3e:e2:3d:
                    a5:3b:38:0d:83:18:66:4b:5a:5b:e2:11:8a:e7:35:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:C6:93:E7:2A:18:9A:FA:7A:67:AA:6E:11:C4:00:F1:81:37:1E
            X509v3 Authority Key Identifier:
                keyid:D9:72:87:D5:7D:96:D0:36:C5:29:C9:61:6F:5E:53:D9:E2:3B:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97287D57D96D036C529C9616F5E53D9E23B6716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/323830343a383534633a3a2f33322d313238203d3e20323732353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:854c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:d0:6a:50:56:76:69:c3:85:bc:c9:6b:d0:f2:00:6b:f8:ae:
         36:1b:f2:bd:23:4f:03:81:d2:bb:85:85:82:b5:b8:dd:04:e7:
         53:3f:ca:5e:01:b7:a5:bb:dd:d7:9c:4d:1f:f7:7a:ec:c1:d6:
         a8:9d:4d:bb:7e:50:b1:ed:44:9a:3d:cd:e7:f3:bc:9f:d5:f0:
         d9:8a:76:88:bd:cf:e8:d0:59:30:85:fd:a4:55:6e:54:70:d9:
         72:09:42:fd:0b:fa:7d:ba:ad:f8:37:8c:5c:45:d4:ca:9b:23:
         07:5c:0b:c9:93:75:41:bd:f4:1b:1a:78:f0:02:91:e1:9c:78:
         bd:19:ad:19:65:e6:22:eb:2a:ce:d0:70:c6:8d:f7:1b:ed:c4:
         ca:fb:e8:17:61:47:ad:07:99:9c:db:a8:cc:63:ce:a8:ba:e9:
         87:47:7b:eb:9c:86:ce:88:62:38:fa:89:7c:d1:ba:0b:3e:87:
         1a:98:16:3a:66:af:9c:9a:d4:13:27:80:66:5f:ab:fe:b8:1b:
         da:dc:9e:db:e8:cf:2b:96:cb:f8:ec:16:e6:ab:9c:b3:63:56:
         8b:e1:7a:2c:bd:c6:eb:42:90:83:73:b4:0d:5f:46:18:9b:6b:
         d1:f5:43:ac:25:21:b4:57:fa:24:7a:4f:a7:86:d4:2a:23:0c:
         ed:8c:23:3c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPxjJ+Fpkp+e/ws3CZ9GFur/LhnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk3Mjg3RDU3RDk2RDAzNkM1MjlDOTYxNkY1RTUzRDlF
MjNCNjcxNjAeFw0yNDA3MjgyMTExNDJaFw0yNTA3MjcyMTE2NDJaMDMxMTAvBgNV
BAMTKEQ0N0VDNjkzRTcyQTE4OUFGQTdBNjdBQTZFMTFDNDAwRjE4MTM3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJd9GCqo9LZ489DOZngBkpWxd
0G3g7LSpxLs5O9EfBGwnCmT0Zfn6t65c3wD6G11/Ayn12BazEbxhEtcKZIG9di8E
g/M68SLYpjbrUBhJJqBl2whaSaulMhy7idCyfbGEkOmTeaOAMF5S8+0t5Isz3R8l
bWoorhAPUue5O7hyWhfaZNVlgKB6vUN6AXeQIYtSh4FNhaVxFndjXYUAnOmRYoSo
+YlV+Zyokmc+q6otKooqUVHUavj8A4Rqzh8rxdSXWki/Jb98mo/POsf6RpFqmC4E
4aK3c7r/vvFcLwd8ALxB0kYeL0kqJAe+Qj7iPaU7OA2DGGZLWlviEYrnNQAPAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU1H7Gk+cqGJr6emeqbhHEAPGBNx4wHwYDVR0j
BBgwFoAU2XKH1X2W0DbFKclhb15T2eI7ZxYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBv
eFgvMC9EOTcyODdENTdEOTZEMDM2QzUyOUM5NjE2RjVFNTNEOUUyM0I2NzE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzI4N0Q1N0Q5NkQwMzZD
NTI5Qzk2MTZGNUU1M0Q5RTIzQjY3MTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNRVlhmNGh4R0ZjbVl0eTRINjY4ZVdycXVnZzhWcmtEM3NEQUg5cXBQb3hYLzAv
MzIzODMwMzQzYTM4MzUzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIVMMA0GCSqGSIb3DQEBCwUAA4IBAQCz0GpQ
VnZpw4W8yWvQ8gBr+K42G/K9I08DgdK7hYWCtbjdBOdTP8peAbelu93XnE0f93rs
wdaonU27flCx7USaPc3n87yf1fDZinaIvc/o0Fkwhf2kVW5UcNlyCUL9C/p9uq34
N4xcRdTKmyMHXAvJk3VBvfQbGnjwApHhnHi9Ga0ZZeYi6yrO0HDGjfcb7cTK++gX
YUetB5mc26jMY86ouumHR3vrnIbOiGI4+ol80boLPocamBY6Zq+cmtQTJ4BmX6v+
uBva3J7b6M8rlsv47Bbmq5yzY1aL4XosvcbrQpCDc7QNX0YYm2vR9UOsJSG0V/ok
ek+nhtQqIwztjCM8
-----END CERTIFICATE-----
Generated at Fri Nov 29 07:06:31 2024 by rpki-client on console-fra.rpki-client.org