Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
File:                     323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (raw, json)
Hash identifier:          c/mKwEcxcIpeaH/dZLFugTEJlyXNQr1NxOikgiIi4RA=
Subject key identifier:   7C:85:96:E7:CC:9F:F1:CC:1E:27:6E:B3:41:ED:1F:00:B1:2B:57:06
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       397F82B8B7774403809AF295E187B0049416854C
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
Signing time:             Thu 04 Apr 2024 10:25:19 +0000
ROA not before:           Thu 04 Apr 2024 10:20:19 +0000
ROA not after:            Thu 03 Apr 2025 10:25:19 +0000
asID:                     270359
IP address blocks:        2804:6acc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7f:82:b8:b7:77:44:03:80:9a:f2:95:e1:87:b0:04:94:16:85:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Apr  4 10:20:19 2024 GMT
            Not After : Apr  3 10:25:19 2025 GMT
        Subject: CN=7C8596E7CC9FF1CC1E276EB341ED1F00B12B5706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:21:39:6a:fb:9d:ee:c8:03:09:b5:22:a7:
                    7f:6e:00:1a:9b:30:79:02:b8:2f:5a:ac:25:c7:2f:
                    fc:71:6f:22:8e:b1:60:2c:0b:5f:08:c2:2d:d8:2d:
                    77:12:38:77:e0:4f:49:13:10:ed:1c:45:68:48:93:
                    00:a7:da:29:a2:39:be:a3:a8:0b:af:94:3d:38:7e:
                    09:3b:58:1d:c1:ea:bf:3d:69:c3:d3:12:e5:a1:e1:
                    4f:38:ca:ed:a6:0e:5c:f3:35:73:e0:df:b3:2a:12:
                    e6:e2:9d:d2:46:cb:3e:f7:ca:bd:59:70:67:06:0c:
                    b5:6b:5f:e4:b1:3d:f5:de:1e:4d:89:a3:b5:41:f5:
                    52:41:e2:91:a1:c4:28:66:36:84:26:fb:d1:a4:19:
                    30:e8:df:d5:3c:8e:99:31:bf:47:94:c7:9c:6d:29:
                    e6:52:4e:47:68:4e:6a:b1:a5:8f:79:2a:41:cc:c3:
                    b2:13:9e:1c:6b:df:15:00:13:7a:c5:7b:25:bc:3a:
                    8f:4d:a3:99:60:02:fd:e4:ac:48:6f:02:2b:f7:5f:
                    34:8b:d3:6f:2a:92:58:d1:a2:69:d8:71:d7:63:bc:
                    11:ed:4c:a1:cc:25:c7:1d:b5:c7:4e:85:85:10:df:
                    6f:23:59:1f:df:91:69:db:33:22:10:5e:a7:30:73:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:85:96:E7:CC:9F:F1:CC:1E:27:6E:B3:41:ED:1F:00:B1:2B:57:06
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:f1:39:bd:6e:08:ed:b3:a4:82:c4:c4:d8:f9:57:bf:66:5f:
         eb:4f:5c:ef:94:9f:d1:4d:22:a8:b7:d7:e1:b5:14:bd:da:bf:
         e7:7e:7b:e4:0f:25:7f:4b:cd:a0:8e:75:8e:4d:47:e8:58:27:
         48:1b:2b:80:ad:b4:5d:56:68:67:13:b2:98:f5:9e:90:d9:5a:
         f0:b3:5a:83:af:a8:49:a9:61:d3:75:df:bb:a1:7c:47:66:77:
         cb:5c:61:75:f2:96:1f:5d:c1:07:7f:7b:30:9c:c2:38:39:5a:
         e5:2f:23:b0:6d:93:eb:ae:f6:75:e3:6f:6d:f5:fb:ea:b4:7d:
         d7:6b:95:ab:19:17:53:e5:53:23:cf:b5:b3:53:af:45:e7:96:
         bf:52:72:a2:10:ed:4e:3d:61:25:04:d3:4b:e8:75:fe:04:5f:
         cc:f7:d7:c9:22:9b:2a:57:bd:cb:39:20:4e:f2:5b:91:9c:4b:
         44:4b:87:4b:66:1d:f3:99:04:e8:2d:f0:bf:f2:ba:b0:8e:49:
         f5:63:7a:17:c0:5f:f5:73:03:6b:7d:24:8e:5c:90:40:89:2f:
         7a:9e:97:57:c2:94:8c:4e:e3:b6:a2:bb:c2:2e:a0:ab:59:c6:
         10:f4:ca:bf:70:9a:9f:ac:fe:fb:29:78:58:da:80:e6:bb:db:
         b1:46:26:ec
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOX+CuLd3RAOAmvKV4YewBJQWhUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZGODFERjA2MzE5RDAxRUI2NzZDOEI3RDY4RDMxQUQz
NjY0QjNCOTAeFw0yNDA0MDQxMDIwMTlaFw0yNTA0MDMxMDI1MTlaMDMxMTAvBgNV
BAMTKDdDODU5NkU3Q0M5RkYxQ0MxRTI3NkVCMzQxRUQxRjAwQjEyQjU3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TyE5avud7sgDCbUip39uABqb
MHkCuC9arCXHL/xxbyKOsWAsC18Iwi3YLXcSOHfgT0kTEO0cRWhIkwCn2imiOb6j
qAuvlD04fgk7WB3B6r89acPTEuWh4U84yu2mDlzzNXPg37MqEubindJGyz73yr1Z
cGcGDLVrX+SxPfXeHk2Jo7VB9VJB4pGhxChmNoQm+9GkGTDo39U8jpkxv0eUx5xt
KeZSTkdoTmqxpY95KkHMw7ITnhxr3xUAE3rFeyW8Oo9No5lgAv3krEhvAiv3XzSL
028qkljRomnYcddjvBHtTKHMJccdtcdOhYUQ328jWR/fkWnbMyIQXqcwcygfAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUfIWW58yf8cweJ26zQe0fALErVwYwHwYDVR0j
BBgwFoAUFvgd8GMZ0B62dsi31o0xrTZks7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtSTWo3NFRTd1REdzZHS2RMcG5IMjd6c3pOTXNjVnNaY3pEd3ZZcWIx
Um0vMi8xNkY4MURGMDYzMTlEMDFFQjY3NkM4QjdENjhEMzFBRDM2NjRCM0I5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2RjgxREYwNjMxOUQwMUVC
Njc2QzhCN0Q2OEQzMUFEMzY2NEIzQjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVrUk1qNzRUU3dURHc2R0tkTHBuSDI3enN6Tk1zY1ZzWmN6RHd2WXFiMVJtLzIv
MzIzODMwMzQzYTM2NjE2MzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGrMMA0GCSqGSIb3DQEBCwUAA4IBAQCk8Tm9
bgjts6SCxMTY+Ve/Zl/rT1zvlJ/RTSKot9fhtRS92r/nfnvkDyV/S82gjnWOTUfo
WCdIGyuArbRdVmhnE7KY9Z6Q2Vrws1qDr6hJqWHTdd+7oXxHZnfLXGF18pYfXcEH
f3swnMI4OVrlLyOwbZPrrvZ1429t9fvqtH3Xa5WrGRdT5VMjz7WzU69F55a/UnKi
EO1OPWElBNNL6HX+BF/M99fJIpsqV73LOSBO8luRnEtES4dLZh3zmQToLfC/8rqw
jkn1Y3oXwF/1cwNrfSSOXJBAiS96npdXwpSMTuO2orvCLqCrWcYQ9Mq/cJqfrP77
KXhY2oDmu9uxRibs
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org