Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f33322d313238203d3e20323731333535.roa
File:                     323830343a376133343a3a2f33322d313238203d3e20323731333535.roa (raw, json)
Hash identifier:          JdloexSasxLzwx2pYEJ1mS18dGc8eTSh1DjoYob/pjA=
Subject key identifier:   00:4C:E4:65:B0:D7:88:41:31:48:19:37:86:A8:01:F3:92:A4:B3:22
Certificate issuer:       /CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
Certificate serial:       724D29E7A97CCDA60081A8E866D781AF64137DA6
Authority key identifier: B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f33322d313238203d3e20323731333535.roa
Signing time:             Fri 22 Nov 2024 23:11:22 +0000
ROA not before:           Fri 22 Nov 2024 23:06:22 +0000
ROA not after:            Fri 21 Nov 2025 23:11:22 +0000
asID:                     271355
IP address blocks:        2804:7a34::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl
                          rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 14:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4d:29:e7:a9:7c:cd:a6:00:81:a8:e8:66:d7:81:af:64:13:7d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
        Validity
            Not Before: Nov 22 23:06:22 2024 GMT
            Not After : Nov 21 23:11:22 2025 GMT
        Subject: CN=004CE465B0D788413148193786A801F392A4B322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:a8:53:5f:a6:23:1a:6d:6c:fa:9b:6a:2e:
                    70:5e:b1:9f:17:dd:30:76:cc:77:9a:46:cd:d4:a2:
                    6d:63:17:aa:82:e2:f5:3d:ac:96:87:52:d1:e2:fc:
                    2e:53:70:87:d2:e6:8e:bf:00:73:a9:bd:ff:68:ed:
                    d8:32:7f:12:4d:98:75:c7:15:74:6e:f0:57:80:08:
                    77:07:78:73:cc:af:35:93:ad:f4:55:08:d0:9f:60:
                    b8:a4:c9:a6:1c:b3:43:c9:e9:60:95:66:e0:9c:70:
                    c2:e0:a2:0d:c5:e4:9c:a6:5c:2f:1b:13:52:b1:f5:
                    c5:9d:e7:f6:b0:d5:00:a3:fa:b8:49:d9:e9:76:d6:
                    46:0a:1a:60:9c:12:04:bc:79:97:17:9f:ff:0f:b2:
                    e5:e1:01:d1:50:df:3a:42:a7:b8:6c:4a:ab:5f:aa:
                    1f:a8:d1:71:51:67:15:a2:2e:66:87:e2:74:65:d4:
                    3e:34:ba:78:02:9f:42:5a:5a:97:78:72:d2:a2:76:
                    4b:42:99:9d:10:29:93:96:68:d9:99:07:a0:1f:be:
                    fa:40:6e:82:26:17:52:83:34:c0:16:cf:11:cd:92:
                    12:fe:fd:1a:cd:26:cd:1d:8a:3e:58:3a:91:5b:4c:
                    0f:bf:93:80:3a:33:f9:0b:42:4e:f6:c4:5c:b2:41:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:E4:65:B0:D7:88:41:31:48:19:37:86:A8:01:F3:92:A4:B3:22
            X509v3 Authority Key Identifier:
                keyid:B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f33322d313238203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a34::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:16:96:ed:bb:61:3f:f8:af:57:3d:8b:97:9f:eb:c0:22:ff:
         95:30:46:27:d0:c1:44:b6:1b:7d:70:d7:94:a3:ae:43:e0:8d:
         c3:b1:80:10:69:33:57:a6:03:2a:ea:dc:9c:09:6f:39:06:b3:
         9e:b7:39:de:cd:8d:76:3d:80:0f:83:e9:58:53:64:a5:23:4e:
         18:66:36:21:14:20:9a:04:64:52:b3:3a:42:93:b4:2d:fa:b1:
         0d:51:45:31:1a:56:98:fe:35:8c:d2:f6:8f:a5:52:1f:29:09:
         59:b6:4f:d3:b3:77:25:c6:38:22:da:e1:7c:a7:55:e8:21:4d:
         f0:ca:bb:24:9f:f0:b4:57:c5:8a:32:6f:f2:5c:0d:b9:17:ce:
         d1:77:02:be:46:ed:f9:2c:6f:30:f9:68:5a:b2:c0:e3:d8:9b:
         e6:75:ea:31:4b:34:af:f4:ae:d6:57:2e:a6:cd:c0:9c:b8:16:
         f7:8c:06:0b:c5:be:39:eb:8a:41:b3:1b:17:f1:83:15:c8:4d:
         4d:54:c2:4e:9d:95:bb:1a:88:d1:a7:2e:2b:a8:eb:9b:36:92:
         00:ac:61:26:5c:43:31:55:bb:c3:64:0b:68:12:a8:df:a1:86:
         54:7c:bc:7a:29:9a:6b:b7:e4:05:5e:11:5f:56:49:3f:fd:23:
         2b:0b:b1:ef
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUck0p56l8zaYAgajoZteBr2QTfaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA5QTcyRjdEQUExOTA1RTBCODlDN0Q4RkVBMDNEM0Uy
MUU4NTM5MTAeFw0yNDExMjIyMzA2MjJaFw0yNTExMjEyMzExMjJaMDMxMTAvBgNV
BAMTKDAwNENFNDY1QjBENzg4NDEzMTQ4MTkzNzg2QTgwMUYzOTJBNEIzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vahTX6YjGm1s+ptqLnBesZ8X
3TB2zHeaRs3Uom1jF6qC4vU9rJaHUtHi/C5TcIfS5o6/AHOpvf9o7dgyfxJNmHXH
FXRu8FeACHcHeHPMrzWTrfRVCNCfYLikyaYcs0PJ6WCVZuCccMLgog3F5JymXC8b
E1Kx9cWd5/aw1QCj+rhJ2el21kYKGmCcEgS8eZcXn/8PsuXhAdFQ3zpCp7hsSqtf
qh+o0XFRZxWiLmaH4nRl1D40ungCn0JaWpd4ctKidktCmZ0QKZOWaNmZB6AfvvpA
boImF1KDNMAWzxHNkhL+/RrNJs0dij5YOpFbTA+/k4A6M/kLQk72xFyyQU5PAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUAEzkZbDXiEExSBk3hqgB85KksyIwHwYDVR0j
BBgwFoAUsJpy99qhkF4LicfY/qA9PiHoU5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0
VHgvMC9CMDlBNzJGN0RBQTE5MDVFMEI4OUM3RDhGRUEwM0QzRTIxRTg1MzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwOUE3MkY3REFBMTkwNUUw
Qjg5QzdEOEZFQTAzRDNFMjFFODUzOTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzREc2I0ckNBdWIxNmRUejh1bUpXOGY1dnRkcTVqcG1qUE1QS2s4VkFjdFR4LzAv
MzIzODMwMzQzYTM3NjEzMzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMzM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHo0MA0GCSqGSIb3DQEBCwUAA4IBAQAFFpbt
u2E/+K9XPYuXn+vAIv+VMEYn0MFEtht9cNeUo65D4I3DsYAQaTNXpgMq6tycCW85
BrOetznezY12PYAPg+lYU2SlI04YZjYhFCCaBGRSszpCk7Qt+rENUUUxGlaY/jWM
0vaPpVIfKQlZtk/Ts3clxjgi2uF8p1XoIU3wyrskn/C0V8WKMm/yXA25F87RdwK+
Ru35LG8w+WhassDj2JvmdeoxSzSv9K7WVy6mzcCcuBb3jAYLxb4564pBsxsX8YMV
yE1NVMJOnZW7GojRpy4rqOubNpIArGEmXEMxVbvDZAtoEqjfoYZUfLx6KZprt+QF
XhFfVkk//SMrC7Hv
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:08 2024 by rpki-client on console-fra.rpki-client.org