Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3332203d3e20323639313735.roa
File:                     323830343a316634633a3a2f33322d3332203d3e20323639313735.roa (raw, json)
Hash identifier:          1w7/3g2jnOrotC49nW1EYA8lup8R/WWYbA+wjJYgmHI=
Subject key identifier:   F5:C1:7E:72:1E:2A:91:96:DC:BB:1B:12:52:5D:F5:2D:F9:E2:DF:F7
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       70F77D0BBC3968C3CA0F72F87173E14D00DBE69C
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3332203d3e20323639313735.roa
Signing time:             Tue 10 Sep 2024 19:49:58 +0000
ROA not before:           Tue 10 Sep 2024 19:44:58 +0000
ROA not after:            Tue 09 Sep 2025 19:49:58 +0000
asID:                     269175
IP address blocks:        2804:1f4c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f7:7d:0b:bc:39:68:c3:ca:0f:72:f8:71:73:e1:4d:00:db:e6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Sep 10 19:44:58 2024 GMT
            Not After : Sep  9 19:49:58 2025 GMT
        Subject: CN=F5C17E721E2A9196DCBB1B12525DF52DF9E2DFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f0:29:d9:1e:08:f6:65:35:cc:66:ea:76:06:
                    24:34:ad:e5:02:8e:e5:cd:a3:c3:f4:40:b4:bb:64:
                    f7:a5:12:9a:3b:e0:b6:a6:22:05:c4:2e:4a:a6:7a:
                    17:e7:53:61:3c:7d:28:9e:4b:d6:df:37:91:85:82:
                    6e:64:a7:2a:e9:6d:e8:14:bd:e0:cb:18:d0:95:90:
                    77:ca:7e:e6:18:ef:2d:10:65:39:47:a0:16:39:80:
                    cd:7a:8a:91:2b:e8:e5:ce:11:24:4f:56:33:ad:da:
                    06:1e:10:96:31:f9:b8:d5:3d:6b:7d:c4:0c:e0:3d:
                    7c:c6:51:11:29:d9:db:ff:e8:6b:84:76:9e:2e:46:
                    4a:c0:8b:a2:0b:c7:8a:66:be:a6:75:ac:2b:38:cb:
                    ae:cc:a4:5b:f6:b2:d8:50:06:87:d8:1e:fe:08:14:
                    34:45:17:d1:5a:40:58:48:24:d2:9e:3d:50:3c:4a:
                    b4:ad:36:b4:cc:81:e9:65:da:30:87:e3:08:76:30:
                    98:85:81:48:20:fd:50:33:d2:f1:cd:c9:83:12:f1:
                    c9:f6:6c:e2:3a:d1:25:4b:fc:7d:e3:53:e1:d9:eb:
                    3c:4e:b5:c6:f1:e7:ac:e6:6d:42:5b:b8:46:96:ef:
                    92:c5:27:e3:45:71:1d:11:c3:76:2f:63:1c:ce:12:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:7E:72:1E:2A:91:96:DC:BB:1B:12:52:5D:F5:2D:F9:E2:DF:F7
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3332203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:cb:46:c4:ca:f7:79:9b:84:12:e5:d4:4f:bb:c2:ac:7c:3c:
         75:28:cc:07:5f:26:cf:a2:b9:d4:c8:13:fc:0b:94:8a:22:67:
         4c:e3:c7:87:b5:f0:4c:2a:00:4c:d3:f4:9c:67:24:77:2d:c4:
         45:3a:ff:83:5b:eb:f4:9e:bc:a5:37:db:1b:d0:30:62:3a:e7:
         bb:bb:80:bc:3f:7e:a2:66:eb:b1:2f:89:2e:ee:01:7b:da:da:
         69:a9:35:d7:01:36:c5:3e:39:c9:c3:37:5b:95:f8:06:d5:79:
         ee:8c:8e:32:2a:1a:bf:38:9f:f2:e0:1c:34:80:42:5b:d8:f0:
         49:7c:35:19:98:42:73:05:63:8f:25:28:9e:23:bc:98:1e:c0:
         df:5e:cd:8d:cc:73:84:fc:29:8e:e2:16:8f:0d:bb:80:b8:9c:
         96:c9:bf:99:18:52:e5:44:4b:c3:25:98:c7:26:66:ee:a9:c5:
         db:c5:c7:78:9a:00:e9:f1:75:a5:4b:80:3e:4a:66:31:7f:3e:
         37:f3:a0:81:70:8a:be:3e:d5:6f:c2:31:9a:8e:a3:62:11:81:
         07:d1:a3:fe:7c:c8:ce:f1:20:b2:3c:ce:81:f0:e4:3c:93:a8:
         00:33:62:a7:ad:e5:3b:56:5b:0d:a1:eb:ea:a3:fd:27:0b:ac:
         d0:18:fa:c2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcPd9C7w5aMPKD3L4cXPhTQDb5pwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwRjMxRTI4RUI2ODM1RkU5NENDNjJEOTA4OTg5QTc0
NzkwQ0IzRTAeFw0yNDA5MTAxOTQ0NThaFw0yNTA5MDkxOTQ5NThaMDMxMTAvBgNV
BAMTKEY1QzE3RTcyMUUyQTkxOTZEQ0JCMUIxMjUyNURGNTJERjlFMkRGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD58CnZHgj2ZTXMZup2BiQ0reUC
juXNo8P0QLS7ZPelEpo74LamIgXELkqmehfnU2E8fSieS9bfN5GFgm5kpyrpbegU
veDLGNCVkHfKfuYY7y0QZTlHoBY5gM16ipEr6OXOESRPVjOt2gYeEJYx+bjVPWt9
xAzgPXzGUREp2dv/6GuEdp4uRkrAi6ILx4pmvqZ1rCs4y67MpFv2sthQBofYHv4I
FDRFF9FaQFhIJNKePVA8SrStNrTMgell2jCH4wh2MJiFgUgg/VAz0vHNyYMS8cn2
bOI60SVL/H3jU+HZ6zxOtcbx56zmbUJbuEaW75LFJ+NFcR0Rw3YvYxzOEjMFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9cF+ch4qkZbcuxsSUl31Lfni3/cwHwYDVR0j
BBgwFoAUhw8x4o62g1/pTMYtkImJp0eQyz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMC84NzBGMzFFMjhFQjY4MzVGRTk0Q0M2MkQ5MDg5ODlBNzQ3OTBDQjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEYzMUUyOEVCNjgzNUZF
OTRDQzYyRDkwODk4OUE3NDc5MENCM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzAv
MzIzODMwMzQzYTMxNjYzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQfTDANBgkqhkiG9w0BAQsFAAOCAQEApstGxMr3
eZuEEuXUT7vCrHw8dSjMB18mz6K51MgT/AuUiiJnTOPHh7XwTCoATNP0nGckdy3E
RTr/g1vr9J68pTfbG9AwYjrnu7uAvD9+ombrsS+JLu4Be9raaak11wE2xT45ycM3
W5X4BtV57oyOMioavzif8uAcNIBCW9jwSXw1GZhCcwVjjyUoniO8mB7A317Njcxz
hPwpjuIWjw27gLiclsm/mRhS5URLwyWYxyZm7qnF28XHeJoA6fF1pUuAPkpmMX8+
N/OggXCKvj7Vb8Ixmo6jYhGBB9Gj/nzIzvEgsjzOgfDkPJOoADNip63lO1ZbDaHr
6qP9Jwus0Bj6wg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:09 2024 by rpki-client on console-fra.rpki-client.org