Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
File:                     323830343a6666343a3a2f33322d313238203d3e203533323138.roa (raw, json)
Hash identifier:          tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=
Subject key identifier:   0C:44:E4:77:4B:09:DA:40:39:09:99:A6:85:FE:7D:5D:07:AE:AA:5D
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       38CDA9D1EB31E6167A046FD3870793FB1F98E48E
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
Signing time:             Mon 16 Sep 2024 19:21:51 +0000
ROA not before:           Mon 16 Sep 2024 19:16:51 +0000
ROA not after:            Mon 15 Sep 2025 19:21:51 +0000
asID:                     53218
IP address blocks:        2804:ff4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 13:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cd:a9:d1:eb:31:e6:16:7a:04:6f:d3:87:07:93:fb:1f:98:e4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Sep 16 19:16:51 2024 GMT
            Not After : Sep 15 19:21:51 2025 GMT
        Subject: CN=0C44E4774B09DA40390999A685FE7D5D07AEAA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:85:a4:6f:b2:17:cf:ae:9b:3a:2b:cd:12:
                    d1:5c:07:59:c0:34:d6:37:90:3e:94:10:17:7d:61:
                    f0:19:74:68:ae:2a:df:e3:c4:6a:42:18:9e:08:64:
                    b1:67:f4:51:23:2e:10:5b:49:ff:bd:9e:91:b8:86:
                    6b:ed:24:82:0b:12:5a:8e:f4:b2:a9:c1:f8:ad:4d:
                    93:3b:0e:2d:75:18:34:d4:84:4b:07:3a:34:54:1a:
                    4f:dd:e6:f4:dd:8c:21:f9:ae:86:4e:5d:58:b8:e7:
                    a0:b4:ac:c8:f7:f6:c3:02:a2:b1:7c:72:2d:0f:ff:
                    b1:31:65:35:e7:15:79:2c:f5:79:fd:4f:96:a1:f7:
                    a1:57:be:00:fe:cd:57:8b:02:42:45:62:5a:e5:74:
                    27:16:e4:6a:39:98:c1:e9:f4:ec:c6:da:06:14:8c:
                    14:a0:93:4c:2d:b6:95:dc:a8:7f:b0:ed:03:b2:5c:
                    ef:f4:0b:9d:b7:99:c4:3f:e5:22:1a:8a:b2:a8:4c:
                    f2:03:8c:1b:6b:36:d4:ca:7c:90:8c:4a:77:ff:c5:
                    35:00:97:a3:40:4e:28:1c:07:75:e1:99:d1:40:04:
                    e7:82:27:8b:94:6c:66:91:f8:22:30:ae:8a:60:1f:
                    47:db:74:22:80:91:11:67:0c:d3:ea:d9:a3:8c:38:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:E4:77:4B:09:DA:40:39:09:99:A6:85:FE:7D:5D:07:AE:AA:5D
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:50:20:56:37:4f:b4:47:56:b5:52:32:98:49:ca:7d:ef:
         b4:07:78:95:8e:a9:9f:a2:68:78:69:2f:ed:0d:80:f4:9f:92:
         56:db:20:9c:0a:27:3c:dd:6d:ea:22:ac:e5:71:04:97:66:13:
         c0:d3:a0:ad:0d:7a:7c:e4:45:63:49:a0:db:0e:33:d6:91:5c:
         17:e9:dd:d0:db:9e:c6:ba:75:a1:e8:04:d5:c9:d1:be:c2:1f:
         1f:60:3c:27:67:ea:60:67:c4:7d:1e:21:23:96:ab:d7:41:51:
         d9:af:b8:23:12:f5:be:6a:0a:8f:86:61:f8:89:48:be:eb:2e:
         d2:df:b2:ab:76:04:bf:e6:46:8e:6c:b9:d4:0c:f3:bf:38:92:
         08:b4:4c:e5:24:db:ad:1c:be:71:cd:8e:a8:00:f0:24:d7:c4:
         2a:52:cd:c5:3e:fa:cf:f5:94:d3:da:5b:f4:3e:56:27:66:3b:
         78:0a:f9:96:ce:81:14:9d:5b:fd:25:f3:89:ea:5a:07:4b:b8:
         45:7a:f5:5e:74:c4:6b:ab:39:b3:71:11:ca:17:70:16:86:51:
         5b:10:0f:a8:b9:ee:0a:08:5d:ba:45:6e:67:e5:ec:cf:62:db:
         53:f6:fd:6c:d6:94:2c:c4:14:0d:5b:ab:95:39:9a:68:40:bc:
         d3:86:2e:f3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUOM2p0esx5hZ6BG/ThweT+x+Y5I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0MkYyMjAwMEYzQTczMTU3MDNDRjNCMTMxMDBENzYz
ODZGQ0FEMTAeFw0yNDA5MTYxOTE2NTFaFw0yNTA5MTUxOTIxNTFaMDMxMTAvBgNV
BAMTKDBDNDRFNDc3NEIwOURBNDAzOTA5OTlBNjg1RkU3RDVEMDdBRUFBNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJYWkb7IXz66bOivNEtFcB1nA
NNY3kD6UEBd9YfAZdGiuKt/jxGpCGJ4IZLFn9FEjLhBbSf+9npG4hmvtJIILElqO
9LKpwfitTZM7Di11GDTUhEsHOjRUGk/d5vTdjCH5roZOXVi456C0rMj39sMCorF8
ci0P/7ExZTXnFXks9Xn9T5ah96FXvgD+zVeLAkJFYlrldCcW5Go5mMHp9OzG2gYU
jBSgk0wttpXcqH+w7QOyXO/0C523mcQ/5SIairKoTPIDjBtrNtTKfJCMSnf/xTUA
l6NATigcB3XhmdFABOeCJ4uUbGaR+CIwropgH0fbdCKAkRFnDNPq2aOMOM0pAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDETkd0sJ2kA5CZmmhf59XQeuql0wHwYDVR0j
BBgwFoAUKULyIADzpzFXA887ExANdjhvytEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hV
Z3gvMC8yOTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDJGMjIwMDBGM0E3MzE1
NzAzQ0YzQjEzMTAwRDc2Mzg2RkNBRDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVZOWhZYmdrbzhBWEZBYm82VFIyM1h0VXVBQ1F3Rzg2VTRnZFNKWTN4VWd4LzAv
MzIzODMwMzQzYTY2NjYzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMzMy
MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED/QwDQYJKoZIhvcNAQELBQADggEBAIZ/UCBWN0+0
R1a1UjKYScp977QHeJWOqZ+iaHhpL+0NgPSfklbbIJwKJzzdbeoirOVxBJdmE8DT
oK0NenzkRWNJoNsOM9aRXBfp3dDbnsa6daHoBNXJ0b7CHx9gPCdn6mBnxH0eISOW
q9dBUdmvuCMS9b5qCo+GYfiJSL7rLtLfsqt2BL/mRo5sudQM8784kgi0TOUk260c
vnHNjqgA8CTXxCpSzcU++s/1lNPaW/Q+VidmO3gK+ZbOgRSdW/0l84nqWgdLuEV6
9V50xGurObNxEcoXcBaGUVsQD6i57goIXbpFbmfl7M9i21P2/WzWlCzEFA1bq5U5
mmhAvNOGLvM=
-----END CERTIFICATE-----
Generated at Fri Sep 27 12:52:55 2024 by rpki-client on console-ams.rpki-client.org