Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3336203d3e20323637333230.roa
File:                     323830343a346261343a3a2f33322d3336203d3e20323637333230.roa (raw, json)
Hash identifier:          Sgk1X+FHEa6JoyGsGZiUx5awwJtDhh+tU2U0D2r3xnc=
Subject key identifier:   C7:C2:8C:F6:3C:7D:E7:53:94:2A:60:2A:B8:27:1B:DA:1F:43:12:25
Certificate issuer:       /CN=2093C028134D5E53FE47E27335D15EB3DE7F9C85
Certificate serial:       7395D4E1757E2DE9AA343606CEFD3FD5C5CCA66F
Authority key identifier: 20:93:C0:28:13:4D:5E:53:FE:47:E2:73:35:D1:5E:B3:DE:7F:9C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3336203d3e20323637333230.roa
Signing time:             Thu 11 Jul 2024 23:42:26 +0000
ROA not before:           Thu 11 Jul 2024 23:37:26 +0000
ROA not after:            Thu 10 Jul 2025 23:42:26 +0000
asID:                     267320
IP address blocks:        2804:4ba4::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.crl
                          rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:95:d4:e1:75:7e:2d:e9:aa:34:36:06:ce:fd:3f:d5:c5:cc:a6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2093C028134D5E53FE47E27335D15EB3DE7F9C85
        Validity
            Not Before: Jul 11 23:37:26 2024 GMT
            Not After : Jul 10 23:42:26 2025 GMT
        Subject: CN=C7C28CF63C7DE753942A602AB8271BDA1F431225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:5e:fa:f2:59:ef:c4:02:dc:4f:25:2a:6e:
                    81:04:86:27:b6:34:1a:af:88:9d:33:11:5c:86:9f:
                    15:6f:8b:ab:92:2c:e0:f6:68:48:75:6d:d7:47:15:
                    c4:2c:a4:f3:7b:4b:8c:7b:a4:ea:22:b8:6a:1f:e3:
                    7a:fa:1a:55:3f:7a:35:a1:f2:df:45:b1:e3:11:98:
                    ba:5e:ea:03:42:62:83:a6:25:f7:00:8c:0c:c1:e5:
                    cc:d4:7a:80:fa:6b:60:d5:0f:63:d0:9b:dd:61:1c:
                    61:07:07:60:26:2d:8f:49:48:30:fb:94:49:9b:5a:
                    66:6a:9d:22:1b:69:24:2f:e3:5b:88:3c:93:52:d2:
                    1c:99:ad:4d:19:53:71:a7:51:3b:53:7b:6b:c0:6d:
                    d4:76:a8:13:8d:02:07:45:85:8a:e6:70:b4:1a:5c:
                    3b:dd:71:bb:86:e8:9a:52:1a:54:48:74:53:6c:07:
                    20:b1:3b:46:30:da:9f:a6:62:89:d2:82:62:03:69:
                    e2:09:29:a7:a3:69:46:16:2f:43:05:c0:58:02:85:
                    54:f7:6a:c9:d7:34:4c:10:9f:1b:b3:29:d9:76:2c:
                    52:29:ed:0b:6d:a7:43:74:57:67:ae:1a:0e:2d:cf:
                    d5:a4:fc:6e:89:fd:a6:a7:92:c7:ba:b9:61:7b:83:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:8C:F6:3C:7D:E7:53:94:2A:60:2A:B8:27:1B:DA:1F:43:12:25
            X509v3 Authority Key Identifier:
                keyid:20:93:C0:28:13:4D:5E:53:FE:47:E2:73:35:D1:5E:B3:DE:7F:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3336203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:0b:25:4a:11:8a:4e:45:c2:92:97:a3:59:8f:98:cc:88:c5:
         fa:e9:15:bf:c1:24:81:63:62:b0:95:61:ef:fc:e1:e5:95:c0:
         01:0c:3c:63:49:0e:b8:07:8f:9b:0b:5c:66:42:11:3c:06:f9:
         b7:fe:aa:e1:0e:66:37:1c:4d:fc:3f:8a:d8:18:5c:f3:40:3f:
         fd:15:fe:84:73:49:2e:d8:c6:d0:2d:40:5e:f5:be:8f:1b:e3:
         6d:7c:e0:bc:4c:34:70:c0:7f:86:da:21:d3:31:bf:19:69:d1:
         b0:43:14:1e:82:65:57:7f:7a:68:c2:bf:08:79:62:f4:af:f8:
         d8:db:f5:fe:7d:55:fc:02:cc:50:e3:0d:12:0f:9d:a4:3a:a7:
         7e:a2:c2:c1:13:37:42:43:e6:6b:df:e6:eb:3e:ba:1d:64:99:
         6e:da:e6:57:80:3c:1b:29:cc:3f:97:98:bc:5e:8c:5d:0d:52:
         72:70:f8:6f:c8:ed:6e:ae:54:a2:8a:72:6c:4b:72:30:7a:fa:
         6f:0e:ac:7d:89:33:df:84:1f:1c:b1:ac:04:32:2a:d2:4d:e2:
         f1:4c:0f:ec:9b:5f:e2:c3:57:89:a3:e6:71:fb:2f:3d:60:13:
         32:e4:8e:18:f7:08:ec:65:fb:7f:b7:ee:09:0c:2c:f4:82:43:
         7e:e9:56:27
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc5XU4XV+LemqNDYGzv0/1cXMpm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5M0MwMjgxMzRENUU1M0ZFNDdFMjczMzVEMTVFQjNE
RTdGOUM4NTAeFw0yNDA3MTEyMzM3MjZaFw0yNTA3MTAyMzQyMjZaMDMxMTAvBgNV
BAMTKEM3QzI4Q0Y2M0M3REU3NTM5NDJBNjAyQUI4MjcxQkRBMUY0MzEyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFR1768lnvxALcTyUqboEEhie2
NBqviJ0zEVyGnxVvi6uSLOD2aEh1bddHFcQspPN7S4x7pOoiuGof43r6GlU/ejWh
8t9FseMRmLpe6gNCYoOmJfcAjAzB5czUeoD6a2DVD2PQm91hHGEHB2AmLY9JSDD7
lEmbWmZqnSIbaSQv41uIPJNS0hyZrU0ZU3GnUTtTe2vAbdR2qBONAgdFhYrmcLQa
XDvdcbuG6JpSGlRIdFNsByCxO0Yw2p+mYonSgmIDaeIJKaejaUYWL0MFwFgChVT3
asnXNEwQnxuzKdl2LFIp7Qttp0N0V2euGg4tz9Wk/G6J/aankse6uWF7g395AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUx8KM9jx951OUKmAquCcb2h9DEiUwHwYDVR0j
BBgwFoAUIJPAKBNNXlP+R+JzNdFes95/nIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNaNTNLM2pBcHNvOVQ4NkZra2lMWUpINnJhQjVSSkdLQzhFRkpqQWF5
Yk4vMC8yMDkzQzAyODEzNEQ1RTUzRkU0N0UyNzMzNUQxNUVCM0RFN0Y5Qzg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwOTNDMDI4MTM0RDVFNTNG
RTQ3RTI3MzM1RDE1RUIzREU3RjlDODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzczWjUzSzNqQXBzbzlUODZGa2tpTFlKSDZyYUI1UkpHS0M4RUZKakFheWJOLzAv
MzIzODMwMzQzYTM0NjI2MTM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLpDANBgkqhkiG9w0BAQsFAAOCAQEAnQslShGK
TkXCkpejWY+YzIjF+ukVv8EkgWNisJVh7/zh5ZXAAQw8Y0kOuAePmwtcZkIRPAb5
t/6q4Q5mNxxN/D+K2Bhc80A//RX+hHNJLtjG0C1AXvW+jxvjbXzgvEw0cMB/htoh
0zG/GWnRsEMUHoJlV396aMK/CHli9K/42Nv1/n1V/ALMUOMNEg+dpDqnfqLCwRM3
QkPma9/m6z66HWSZbtrmV4A8GynMP5eYvF6MXQ1ScnD4b8jtbq5UoopybEtyMHr6
bw6sfYkz34QfHLGsBDIq0k3i8UwP7Jtf4sNXiaPmcfsvPWATMuSOGPcI7GX7f7fu
CQws9IJDfulWJw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:01 2024 by rpki-client on console-ams.rpki-client.org