Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a3a2f33322d313238203d3e20323637353330.roa
File:                     323830343a343264343a3a2f33322d313238203d3e20323637353330.roa (raw, json)
Hash identifier:          9QpWAke2wqwTN7UPDHtjAd09mQKthikl065p0FRdQDY=
Subject key identifier:   A8:0C:65:50:3E:BA:F6:D2:72:20:7A:B3:72:FF:3C:08:76:E5:DB:1D
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       24F62E093F1E164FFE21B6FC290F0777E4E4075C
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a3a2f33322d313238203d3e20323637353330.roa
Signing time:             Thu 07 Nov 2024 14:00:31 +0000
ROA not before:           Thu 07 Nov 2024 13:55:31 +0000
ROA not after:            Thu 06 Nov 2025 14:00:31 +0000
asID:                     267530
IP address blocks:        2804:42d4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl
                          rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f6:2e:09:3f:1e:16:4f:fe:21:b6:fc:29:0f:07:77:e4:e4:07:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Nov  7 13:55:31 2024 GMT
            Not After : Nov  6 14:00:31 2025 GMT
        Subject: CN=A80C65503EBAF6D272207AB372FF3C0876E5DB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:4b:96:7a:57:19:2f:2a:82:90:0b:6b:1e:
                    26:2b:10:20:37:64:00:d5:8b:4c:ba:60:fd:b1:30:
                    29:d8:29:ee:da:71:d7:66:5c:1c:91:da:c7:d0:ff:
                    3e:60:8e:6b:33:45:ff:85:6d:15:70:4a:46:bf:16:
                    c3:be:ef:f0:ea:5f:31:a5:6e:de:b0:13:17:74:3c:
                    37:1e:ec:c2:6b:46:c5:a9:c9:54:94:9f:4b:6b:93:
                    51:84:8e:32:69:37:7c:b3:20:de:83:6d:c2:e0:68:
                    93:08:42:1a:13:6e:d2:3f:0e:44:27:cf:62:1f:22:
                    37:7a:89:65:9e:1c:7c:d1:3e:14:7b:47:22:f5:dd:
                    a5:cb:25:5f:4d:f4:32:eb:46:4d:f8:cb:50:50:d5:
                    dc:a2:0a:df:39:f5:97:c3:f4:9c:4b:0c:6d:b8:d9:
                    f0:b2:48:3a:76:7c:ff:e5:b0:ee:1c:c2:ad:c1:61:
                    19:ed:85:f8:a8:02:91:2c:b9:57:0f:1a:32:4e:b7:
                    58:2c:59:72:c3:08:04:f9:7c:c5:23:3b:ed:71:30:
                    62:7d:a1:35:50:99:3d:c5:57:fc:f3:95:cb:ac:20:
                    a2:f6:05:b4:41:48:00:5d:e6:1d:29:88:e3:88:c2:
                    8a:97:61:ca:25:6a:5d:27:47:44:59:dc:7b:11:3c:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:65:50:3E:BA:F6:D2:72:20:7A:B3:72:FF:3C:08:76:E5:DB:1D
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a3a2f33322d313238203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:59:f3:4d:1e:38:f2:6f:7a:2f:31:53:f5:5e:4a:79:01:
         c8:be:27:b6:de:c4:02:9e:36:04:8d:83:97:6f:7a:b7:95:bf:
         73:79:77:ae:96:55:3d:ad:55:65:63:ac:c4:29:a5:70:98:f0:
         81:da:26:6c:df:00:52:e7:a5:3e:ca:49:df:52:85:1b:81:d4:
         53:85:e7:39:6c:2d:2f:cd:0b:31:24:41:c9:e9:3f:8c:b2:47:
         02:78:43:a0:7d:ea:04:43:43:32:32:ef:f8:24:34:9c:31:28:
         a6:0e:0f:f8:39:d1:de:16:74:56:d9:0c:88:ff:cb:f4:57:38:
         49:f8:01:62:ac:d2:36:47:3e:c6:09:e5:73:b1:b0:ae:89:24:
         16:54:16:23:9d:bd:6d:d8:9a:3b:39:d3:b7:8c:bb:a8:85:97:
         a8:45:7a:d0:3b:83:60:a5:55:a1:6b:06:fa:f9:76:48:6f:d7:
         64:4e:0a:36:35:97:c9:92:28:90:ee:5e:08:d3:80:80:7c:f8:
         d4:6e:f3:b4:28:d1:01:07:6d:c5:eb:42:f5:0c:b4:2f:ac:1f:
         37:b3:6d:77:2e:7d:d3:d4:5c:59:88:df:4f:54:1c:7a:a3:e9:
         56:a7:24:18:15:36:cf:39:2d:31:e9:9e:ae:b6:9f:0e:40:f5:
         c6:27:d9:53
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUJPYuCT8eFk/+Ibb8KQ8Hd+TkB1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM0QUIxNjY2RDc1QjNCRUFCQTc4MTcyQURCMzgzOUZF
NTk3QTQzODAeFw0yNDExMDcxMzU1MzFaFw0yNTExMDYxNDAwMzFaMDMxMTAvBgNV
BAMTKEE4MEM2NTUwM0VCQUY2RDI3MjIwN0FCMzcyRkYzQzA4NzZFNURCMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJEuWelcZLyqCkAtrHiYrECA3
ZADVi0y6YP2xMCnYKe7acddmXByR2sfQ/z5gjmszRf+FbRVwSka/FsO+7/DqXzGl
bt6wExd0PDce7MJrRsWpyVSUn0trk1GEjjJpN3yzIN6DbcLgaJMIQhoTbtI/DkQn
z2IfIjd6iWWeHHzRPhR7RyL13aXLJV9N9DLrRk34y1BQ1dyiCt859ZfD9JxLDG24
2fCySDp2fP/lsO4cwq3BYRnthfioApEsuVcPGjJOt1gsWXLDCAT5fMUjO+1xMGJ9
oTVQmT3FV/zzlcusIKL2BbRBSABd5h0piOOIwoqXYcolal0nR0RZ3HsRPIJ9AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUqAxlUD669tJyIHqzcv88CHbl2x0wHwYDVR0j
BBgwFoAU7EqxZm11s76rp4FyrbODn+WXpDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNThCQ0d2czZVQjZvNWoyaTE3MTJQNzhtVDIyWUxFUFZnakVuNUU0Mndr
ZFAvMC9FQzRBQjE2NjZENzVCM0JFQUJBNzgxNzJBREIzODM5RkU1OTdBNDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDNEFCMTY2NkQ3NUIzQkVB
QkE3ODE3MkFEQjM4MzlGRTU5N0E0MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4QkNHdnM2VUI2bzVqMmkxNzEyUDc4bVQyMllMRVBWZ2pFbjVFNDJ3a2RQLzAv
MzIzODMwMzQzYTM0MzI2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBELUMA0GCSqGSIb3DQEBCwUAA4IBAQA0P1nz
TR448m96LzFT9V5KeQHIvie23sQCnjYEjYOXb3q3lb9zeXeullU9rVVlY6zEKaVw
mPCB2iZs3wBS56U+yknfUoUbgdRThec5bC0vzQsxJEHJ6T+MskcCeEOgfeoEQ0My
Mu/4JDScMSimDg/4OdHeFnRW2QyI/8v0VzhJ+AFirNI2Rz7GCeVzsbCuiSQWVBYj
nb1t2Jo7OdO3jLuohZeoRXrQO4NgpVWhawb6+XZIb9dkTgo2NZfJkiiQ7l4I04CA
fPjUbvO0KNEBB23F60L1DLQvrB83s213Ln3T1FxZiN9PVBx6o+lWpyQYFTbPOS0x
6Z6utp8OQPXGJ9lT
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:17 2024 by rpki-client on console-fra.rpki-client.org