Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
File:                     323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (raw, json)
Hash identifier:          qP53uLcUi8/lpPda1LFzdKBLMIoAo8Sn+EO7nc2hXIE=
Subject key identifier:   F3:B7:AE:9F:3E:84:42:A7:C4:3A:54:1D:9F:80:EF:1A:B1:09:7A:57
Certificate issuer:       /CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
Certificate serial:       53DC6F157EB624ACA2A69FAEB2BFAD352C44F875
Authority key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
Signing time:             Mon 23 Sep 2024 18:09:12 +0000
ROA not before:           Mon 23 Sep 2024 18:04:12 +0000
ROA not after:            Mon 22 Sep 2025 18:09:12 +0000
asID:                     271180
IP address blocks:        2804:7778::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dc:6f:15:7e:b6:24:ac:a2:a6:9f:ae:b2:bf:ad:35:2c:44:f8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
        Validity
            Not Before: Sep 23 18:04:12 2024 GMT
            Not After : Sep 22 18:09:12 2025 GMT
        Subject: CN=F3B7AE9F3E8442A7C43A541D9F80EF1AB1097A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:4c:14:ad:89:98:f1:b3:70:a9:aa:b7:ca:
                    51:9d:3d:e0:95:3e:d7:b7:ae:46:99:26:a8:f9:7a:
                    0f:07:8b:f3:4f:29:64:10:f4:0e:53:f1:35:37:5b:
                    ed:55:be:f5:22:6d:e9:bf:ea:6e:a6:6e:4e:d5:58:
                    4e:16:f5:ef:52:e1:53:0d:82:22:5a:81:cc:c5:85:
                    1d:98:47:7b:d8:3d:ce:df:5f:ae:93:ca:b7:18:23:
                    80:05:1b:0f:10:1c:dc:bc:4e:b0:1e:3e:f0:86:55:
                    d9:df:d3:da:ea:7e:58:9e:0c:b5:4f:e8:f1:07:64:
                    78:29:d8:57:76:62:b8:d0:d9:4c:94:0b:af:68:ec:
                    21:3c:34:c9:9f:b7:63:97:49:c7:f2:9a:65:11:55:
                    fa:00:e4:f7:c0:7f:6c:ff:cb:5e:2e:ba:7a:f1:6b:
                    a9:ce:49:8c:67:68:ee:37:5e:0d:65:4e:02:33:ed:
                    24:a8:97:20:dd:17:84:34:ba:db:d9:2c:b7:d1:45:
                    f5:37:55:ff:fc:e6:3f:43:f1:2b:3d:8d:71:84:03:
                    fa:76:a0:9c:9c:70:a9:cf:70:e6:d2:72:e2:59:49:
                    a3:d4:fe:09:04:43:f2:b7:eb:0c:23:b9:cc:d0:da:
                    87:aa:00:6b:16:aa:a5:c0:81:6d:48:f1:f2:8a:ce:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:AE:9F:3E:84:42:A7:C4:3A:54:1D:9F:80:EF:1A:B1:09:7A:57
            X509v3 Authority Key Identifier:
                keyid:A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7778::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:e8:a1:3a:8d:be:ea:03:70:a0:b5:ec:1f:67:19:4c:f4:
         98:a7:fb:af:ef:9c:ea:e5:63:3f:cd:91:b3:0d:68:74:54:a3:
         d7:09:d9:67:ec:73:12:31:85:58:16:40:65:7f:9f:24:e6:e2:
         31:14:5c:0f:ec:e3:e8:42:3b:7e:fa:25:0b:86:f6:97:c1:eb:
         1e:da:69:ab:d3:3d:32:7f:5d:72:99:12:96:b5:f6:a5:d6:11:
         19:a2:b0:3b:a2:a3:a6:9e:ff:b0:b5:22:aa:fa:c2:97:75:78:
         9f:ff:e1:1f:6e:18:47:99:49:e4:55:fe:92:bc:0d:ba:e1:5b:
         05:1a:f8:89:b3:8b:2c:60:69:3c:04:2d:6e:e7:78:e8:c4:dd:
         55:69:69:26:9f:84:78:bf:70:73:bd:c0:83:46:e7:0b:25:02:
         d6:44:f4:6a:ce:dc:ba:8c:5c:fd:1e:ea:d5:e6:f6:3e:42:86:
         cb:c1:53:34:f3:be:a4:27:88:2e:05:23:cd:5b:05:e8:32:68:
         0b:16:36:d9:b8:fc:09:11:b4:a2:b5:89:bc:4b:4c:62:b4:e3:
         ff:aa:ca:55:34:52:60:86:26:ed:0d:ad:c4:0b:b2:22:ab:08:
         6e:ff:19:dd:45:37:7c:13:60:a4:f6:20:1d:aa:ce:26:57:77:
         c1:be:bc:82
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUU9xvFX62JKyipp+usr+tNSxE+HUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThCQUY1NkRBOTE5MEE1QkY1QTk2REY4RUFCMEZEQjkw
RDNGMzc1RDAeFw0yNDA5MjMxODA0MTJaFw0yNTA5MjIxODA5MTJaMDMxMTAvBgNV
BAMTKEYzQjdBRTlGM0U4NDQyQTdDNDNBNTQxRDlGODBFRjFBQjEwOTdBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUkwUrYmY8bNwqaq3ylGdPeCV
Pte3rkaZJqj5eg8Hi/NPKWQQ9A5T8TU3W+1VvvUibem/6m6mbk7VWE4W9e9S4VMN
giJagczFhR2YR3vYPc7fX66TyrcYI4AFGw8QHNy8TrAePvCGVdnf09rqflieDLVP
6PEHZHgp2Fd2YrjQ2UyUC69o7CE8NMmft2OXScfymmURVfoA5PfAf2z/y14uunrx
a6nOSYxnaO43Xg1lTgIz7SSolyDdF4Q0utvZLLfRRfU3Vf/85j9D8Ss9jXGEA/p2
oJyccKnPcObScuJZSaPU/gkEQ/K36wwjuczQ2oeqAGsWqqXAgW1I8fKKzhBBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU87eunz6EQqfEOlQdn4DvGrEJelcwHwYDVR0j
BBgwFoAUqLr1bakZClv1qW346rD9uQ0/N10wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhG
WW8vMi9BOEJBRjU2REE5MTkwQTVCRjVBOTZERjhFQUIwRkRCOTBEM0YzNzVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QkFGNTZEQTkxOTBBNUJG
NUE5NkRGOEVBQjBGREI5MEQzRjM3NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIZEt1MTczaVdjTnlzNVlpY015RjZSNUtralR3blZSazhSZE1zeWpoRllvLzIv
MzIzODMwMzQzYTM3MzczNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzEzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR3eDANBgkqhkiG9w0BAQsFAAOCAQEAT9DooTqN
vuoDcKC17B9nGUz0mKf7r++c6uVjP82Rsw1odFSj1wnZZ+xzEjGFWBZAZX+fJObi
MRRcD+zj6EI7fvolC4b2l8HrHtppq9M9Mn9dcpkSlrX2pdYRGaKwO6Kjpp7/sLUi
qvrCl3V4n//hH24YR5lJ5FX+krwNuuFbBRr4ibOLLGBpPAQtbud46MTdVWlpJp+E
eL9wc73Ag0bnCyUC1kT0as7cuoxc/R7q1eb2PkKGy8FTNPO+pCeILgUjzVsF6DJo
CxY22bj8CRG0orWJvEtMYrTj/6rKVTRSYIYm7Q2txAuyIqsIbv8Z3UU3fBNgpPYg
HarOJld3wb68gg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org