Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a34393a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a34393a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          YU8IRh09Nhzsr152Iqz70x2pJyGDVvZx1+yzivv+mcE=
Subject key identifier:   C7:71:7C:FB:50:41:F3:02:79:7D:09:95:A7:C0:DB:44:22:33:23:47
Certificate issuer:       /CN=2AA457BEF432F83463DE6AD111F6881D89605D25
Certificate serial:       1D14746B3AD818865B75FEC95F42C6EB63EE8228
Authority key identifier: 2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a34393a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Wed 03 Apr 2024 19:06:34 +0000
ROA not before:           Wed 03 Apr 2024 19:01:34 +0000
ROA not after:            Wed 02 Apr 2025 19:06:34 +0000
asID:                     264409
IP address blocks:        2804:1e20:49::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:14:74:6b:3a:d8:18:86:5b:75:fe:c9:5f:42:c6:eb:63:ee:82:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA457BEF432F83463DE6AD111F6881D89605D25
        Validity
            Not Before: Apr  3 19:01:34 2024 GMT
            Not After : Apr  2 19:06:34 2025 GMT
        Subject: CN=C7717CFB5041F302797D0995A7C0DB4422332347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:02:d9:ef:97:96:e1:89:bb:25:e2:5a:19:
                    5a:e9:59:6a:62:c2:6f:0f:2b:e1:78:79:51:29:49:
                    bb:10:3b:74:1a:aa:f1:90:f9:8d:d6:26:2b:c9:62:
                    28:36:b9:0d:9f:dd:41:d2:42:14:75:94:e7:17:90:
                    fc:ec:4a:fd:4d:85:10:ba:b4:66:d3:cf:1d:e5:ff:
                    d3:57:08:ce:f9:fc:7d:2c:7e:c3:93:91:41:51:f7:
                    e6:58:80:90:a5:da:60:b2:67:00:e7:65:06:69:8b:
                    ac:93:fd:12:67:d6:be:89:58:ba:60:c1:5e:f2:b5:
                    8e:9d:c5:44:2a:5a:d0:d6:ec:98:e6:e4:b0:38:35:
                    2a:8e:1b:f9:65:18:24:c1:5b:0a:ae:74:88:42:05:
                    f5:e9:d5:56:b4:3d:8c:26:62:9d:79:cc:56:d1:8a:
                    c0:a4:60:c7:af:54:9b:e5:83:5c:d8:80:7a:14:da:
                    de:49:f0:66:16:d8:bf:32:60:2b:ff:c9:7c:e0:a5:
                    46:ed:69:d5:48:bc:51:2d:d7:a8:ca:93:80:e9:58:
                    14:76:43:86:4e:ba:79:52:70:3a:7d:18:1a:07:7c:
                    75:83:18:da:b3:4b:a6:ce:29:46:be:dd:39:0e:9a:
                    cd:a3:b1:63:e0:cb:97:6e:d2:c3:03:43:a3:38:eb:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:71:7C:FB:50:41:F3:02:79:7D:09:95:A7:C0:DB:44:22:33:23:47
            X509v3 Authority Key Identifier:
                keyid:2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a34393a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:49::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:56:0d:cc:14:99:10:7d:13:91:11:8a:f5:cc:df:da:8d:f2:
         8a:5f:14:4b:a2:bb:5e:4f:67:a7:60:58:83:ed:83:74:18:81:
         99:a6:39:f3:70:7d:74:14:6f:41:04:3b:7d:6d:9b:99:3b:6f:
         d4:d5:92:df:0c:52:1f:f9:05:e1:49:b7:4e:cd:6f:3a:58:3c:
         e1:eb:db:c3:49:9f:34:4b:7e:e5:63:d6:7c:17:fb:47:e7:7c:
         c4:cd:3d:89:31:dd:6f:d0:1d:2b:14:c4:e0:63:b6:3f:c5:09:
         52:91:50:3f:17:a4:9d:dc:9e:96:8b:59:a5:e1:a3:47:24:aa:
         1c:4d:a8:db:e9:0e:d1:06:61:81:9e:2c:90:a3:11:c1:c7:d8:
         77:69:f3:ec:35:bf:31:20:ec:66:5c:47:8c:44:40:6e:31:ce:
         97:c4:c2:af:79:04:5b:83:b2:f8:d3:e5:42:93:05:8e:02:8a:
         16:63:3d:4a:ad:ff:3d:44:8e:26:a7:43:23:47:9a:94:74:f9:
         bf:7b:65:81:23:5c:3d:6f:d4:d6:ed:40:89:89:73:5a:5a:a2:
         d5:e4:0e:86:81:dc:ea:c0:4b:3e:6b:04:1e:f7:27:48:8c:06:
         20:ef:7d:1a:88:c7:77:78:c4:bc:7c:1c:21:ec:82:c8:80:ef:
         24:69:0a:e1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUHRR0azrYGIZbdf7JX0LG62PugigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBNDU3QkVGNDMyRjgzNDYzREU2QUQxMTFGNjg4MUQ4
OTYwNUQyNTAeFw0yNDA0MDMxOTAxMzRaFw0yNTA0MDIxOTA2MzRaMDMxMTAvBgNV
BAMTKEM3NzE3Q0ZCNTA0MUYzMDI3OTdEMDk5NUE3QzBEQjQ0MjIzMzIzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxALZ75eW4Ym7JeJaGVrpWWpi
wm8PK+F4eVEpSbsQO3QaqvGQ+Y3WJivJYig2uQ2f3UHSQhR1lOcXkPzsSv1NhRC6
tGbTzx3l/9NXCM75/H0sfsOTkUFR9+ZYgJCl2mCyZwDnZQZpi6yT/RJn1r6JWLpg
wV7ytY6dxUQqWtDW7Jjm5LA4NSqOG/llGCTBWwqudIhCBfXp1Va0PYwmYp15zFbR
isCkYMevVJvlg1zYgHoU2t5J8GYW2L8yYCv/yXzgpUbtadVIvFEt16jKk4DpWBR2
Q4ZOunlScDp9GBoHfHWDGNqzS6bOKUa+3TkOms2jsWPgy5du0sMDQ6M464KtAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUx3F8+1BB8wJ5fQmVp8DbRCIzI0cwHwYDVR0j
BBgwFoAUKqRXvvQy+DRj3mrREfaIHYlgXSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzdhaUFhcWh0V0ZxVTFzQWJKaGRBSDV3WjZHdUdieUpOSHk2QjZSdVZp
SGgvMS8yQUE0NTdCRUY0MzJGODM0NjNERTZBRDExMUY2ODgxRDg5NjA1RDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQTQ1N0JFRjQzMkY4MzQ2
M0RFNkFEMTExRjY4ODFEODk2MDVEMjUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc3YWlBYXFodFdGcVUxc0FiSmhkQUg1d1o2R3VHYnlKTkh5NkI2UnVWaUhoLzEv
MzIzODMwMzQzYTMxNjUzMjMwM2EzNDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM0MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQeIABJMA0GCSqGSIb3DQEBCwUAA4IB
AQBxVg3MFJkQfROREYr1zN/ajfKKXxRLorteT2enYFiD7YN0GIGZpjnzcH10FG9B
BDt9bZuZO2/U1ZLfDFIf+QXhSbdOzW86WDzh69vDSZ80S37lY9Z8F/tH53zEzT2J
Md1v0B0rFMTgY7Y/xQlSkVA/F6Sd3J6Wi1ml4aNHJKocTajb6Q7RBmGBniyQoxHB
x9h3afPsNb8xIOxmXEeMREBuMc6XxMKveQRbg7L40+VCkwWOAooWYz1Krf89RI4m
p0MjR5qUdPm/e2WBI1w9b9TW7UCJiXNaWqLV5A6GgdzqwEs+awQe9ydIjAYg730a
iMd3eMS8fBwh7ILIgO8kaQrh
-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:47 2024 by rpki-client on console-fra.rpki-client.org