Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33332d3333203d3e20323637303237.roa (raw, json)
Hash identifier:          fv8mVyeDJIbz6vq/yFz3dsNoo2UbvsOtImejaYG2ESc=
Subject key identifier:   9D:7A:06:24:26:04:BE:82:4A:0E:7E:FB:9C:60:97:ED:42:E7:A2:DB
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       728D99977FDE8228FC6475F45CAFDBF21A95AED4
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:08 +0000
ROA not before:           Fri 08 Nov 2024 14:19:08 +0000
ROA not after:            Fri 07 Nov 2025 14:24:08 +0000
asID:                     267027
IP address blocks:        2804:4708::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8d:99:97:7f:de:82:28:fc:64:75:f4:5c:af:db:f2:1a:95:ae:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:08 2024 GMT
            Not After : Nov  7 14:24:08 2025 GMT
        Subject: CN=9D7A06242604BE824A0E7EFB9C6097ED42E7A2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:30:cc:8d:78:2a:3a:6e:69:d6:8a:c3:f0:
                    34:d0:7b:8e:3b:eb:83:5c:12:c2:83:a8:02:0f:4a:
                    9a:6f:85:e5:d7:f0:ae:94:61:f2:c1:62:6e:4b:7c:
                    17:4c:35:36:b0:77:75:6d:73:ef:b0:2a:39:b1:37:
                    cd:6f:89:57:69:57:4d:f4:af:83:a8:90:09:0d:c8:
                    47:54:4a:0e:c7:30:2b:e5:20:15:83:80:9a:c8:15:
                    c4:1c:de:79:a7:d1:81:d7:21:75:b2:f9:d6:80:0e:
                    1a:cc:5b:80:19:fe:6f:32:e7:98:39:83:dd:be:4e:
                    ff:8b:3f:c8:3e:a3:d0:d8:b5:4a:be:5d:bf:e2:c5:
                    91:cf:88:4c:04:6d:4b:95:e2:a0:4a:20:28:13:20:
                    4c:69:5e:fb:53:bf:0f:bf:33:bb:f4:34:7d:92:35:
                    a6:94:10:6c:3b:4a:76:f7:c4:9a:f1:a3:f0:c3:a2:
                    d4:01:d7:c8:59:5d:85:11:1b:94:79:73:2a:45:a5:
                    59:df:93:95:1d:90:7d:15:09:de:e8:f2:5f:4f:8a:
                    18:6b:de:84:81:77:26:fe:e8:70:23:62:8a:f7:4a:
                    ad:ff:bd:15:ee:d7:19:27:1e:ae:7c:27:eb:c5:bf:
                    8e:89:47:da:8a:58:26:f6:a5:b6:e2:90:d1:5b:db:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:06:24:26:04:BE:82:4A:0E:7E:FB:9C:60:97:ED:42:E7:A2:DB
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:6e:78:aa:5a:4f:bd:2c:78:9a:9d:29:51:76:0e:e0:96:
         c1:9e:af:d2:58:8b:d3:cb:bf:71:91:2a:5c:52:03:fb:31:b2:
         b2:82:eb:42:45:64:90:7d:ae:87:c9:de:00:bb:2f:2f:de:a7:
         e7:a8:95:6a:c2:a5:f9:fb:f9:6e:f2:fb:fb:54:ba:3d:4c:9b:
         30:4a:17:56:f7:86:d5:ae:2a:0a:fc:da:b9:ea:03:d2:cb:1a:
         83:99:6e:bb:f4:6b:7b:de:6e:c0:0b:f6:30:12:b5:9e:ed:e8:
         91:8c:a1:4e:ca:92:02:f4:c8:bd:c8:ae:4e:a1:d6:6b:8a:28:
         64:29:28:bc:4e:b3:1b:43:37:02:6f:8a:9e:2d:a1:b3:62:a4:
         ef:1e:26:7c:35:06:a8:24:c1:54:60:37:f4:d2:8d:02:a7:47:
         e6:73:17:56:1f:a3:d1:36:e9:f7:1d:66:9f:34:c0:9d:e1:08:
         38:38:8a:29:eb:f4:1a:9a:84:be:cf:1b:b0:66:28:02:31:6a:
         36:74:43:5c:58:b6:25:66:eb:12:1b:17:29:f1:8b:f2:ef:eb:
         69:64:36:4c:4c:be:6f:c2:27:a8:1b:c0:93:0b:d1:f7:ef:43:
         9c:b3:44:02:b7:35:64:06:75:77:39:57:5d:cd:94:70:d0:16:
         8d:52:a6:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUco2Zl3/egij8ZHX0XK/b8hqVrtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M4MUJDMDUyRjI0NTFCQUMxNkZBNDIyNTREMTY4NkUw
Rjk3QkU3QjAeFw0yNDExMDgxNDE5MDhaFw0yNTExMDcxNDI0MDhaMDMxMTAvBgNV
BAMTKDlEN0EwNjI0MjYwNEJFODI0QTBFN0VGQjlDNjA5N0VENDJFN0EyREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+DDMjXgqOm5p1orD8DTQe447
64NcEsKDqAIPSppvheXX8K6UYfLBYm5LfBdMNTawd3Vtc++wKjmxN81viVdpV030
r4OokAkNyEdUSg7HMCvlIBWDgJrIFcQc3nmn0YHXIXWy+daADhrMW4AZ/m8y55g5
g92+Tv+LP8g+o9DYtUq+Xb/ixZHPiEwEbUuV4qBKICgTIExpXvtTvw+/M7v0NH2S
NaaUEGw7Snb3xJrxo/DDotQB18hZXYURG5R5cypFpVnfk5UdkH0VCd7o8l9Pihhr
3oSBdyb+6HAjYor3Sq3/vRXu1xknHq58J+vFv46JR9qKWCb2pbbikNFb22ZVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnXoGJCYEvoJKDn77nGCX7ULnotswHwYDVR0j
BBgwFoAUzIG8BS8kUbrBb6QiVNFobg+XvnswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC9DQzgxQkMwNTJGMjQ1MUJBQzE2RkE0MjI1NEQxNjg2RTBGOTdCRTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDODFCQzA1MkYyNDUxQkFD
MTZGQTQyMjU0RDE2ODZFMEY5N0JFN0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzIzODMwMzQzYTM0MzczMDM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzAzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARHCAAwDQYJKoZIhvcNAQELBQADggEBACPVbniq
Wk+9LHianSlRdg7glsGer9JYi9PLv3GRKlxSA/sxsrKC60JFZJB9rofJ3gC7Ly/e
p+eolWrCpfn7+W7y+/tUuj1MmzBKF1b3htWuKgr82rnqA9LLGoOZbrv0a3vebsAL
9jAStZ7t6JGMoU7KkgL0yL3Irk6h1muKKGQpKLxOsxtDNwJvip4tobNipO8eJnw1
BqgkwVRgN/TSjQKnR+ZzF1Yfo9E26fcdZp80wJ3hCDg4iinr9BqahL7PG7BmKAIx
ajZ0Q1xYtiVm6xIbFynxi/Lv62lkNkxMvm/CJ6gbwJML0ffvQ5yzRAK3NWQGdXc5
V13NlHDQFo1Spok=
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:47 2024 by rpki-client on console-fra.rpki-client.org