Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa
File:                     323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (raw, json)
Hash identifier:          yZ/DX02E1LbqjSMMYh+hQPPwf/wVyQKbwMMsLBL472s=
Subject key identifier:   70:C9:A6:3B:4C:75:CB:D4:90:66:1E:3B:41:4A:79:35:80:1A:1E:AB
Certificate issuer:       /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial:       517E552F28BACD1F5E1738010E527F255014CBB8
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa
Signing time:             Tue 12 Nov 2024 19:10:07 +0000
ROA not before:           Tue 12 Nov 2024 19:05:07 +0000
ROA not after:            Tue 11 Nov 2025 19:10:07 +0000
asID:                     268878
IP address blocks:        2804:5bf0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7e:55:2f:28:ba:cd:1f:5e:17:38:01:0e:52:7f:25:50:14:cb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
        Validity
            Not Before: Nov 12 19:05:07 2024 GMT
            Not After : Nov 11 19:10:07 2025 GMT
        Subject: CN=70C9A63B4C75CBD490661E3B414A7935801A1EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:d7:6a:61:29:2c:7c:a4:1c:b9:39:f9:9c:
                    1b:14:f1:34:3b:eb:53:c4:c2:c0:ed:ad:67:d4:e2:
                    b9:86:15:53:a6:40:8b:33:4f:15:21:ab:5a:6f:e4:
                    55:5d:dd:96:c5:5f:90:e0:17:42:7f:f3:ec:0c:66:
                    16:40:76:a3:95:55:2d:e0:64:7a:99:5c:50:fd:96:
                    78:c3:e9:cb:f1:1e:1c:2b:10:e5:ef:4b:05:1c:eb:
                    fc:32:a2:27:e0:02:4e:e2:8e:04:ba:50:fc:26:d1:
                    fe:24:b2:85:1e:6d:ea:c0:96:d5:2e:11:82:84:9a:
                    81:a9:e1:53:00:84:94:93:de:18:30:f9:e6:db:c5:
                    24:e1:62:28:9a:17:85:43:1e:e5:b4:81:4e:fb:02:
                    12:9f:00:d9:bc:55:05:73:a0:2f:bc:74:d9:86:8f:
                    57:8a:62:dd:99:eb:00:37:04:78:01:e8:61:da:71:
                    f7:f4:49:4e:d5:7b:df:b9:b8:e0:08:d0:60:f7:f0:
                    82:70:5c:e2:c9:81:cf:4b:20:c5:72:e3:00:81:d6:
                    e5:bf:00:5e:21:db:29:a7:c8:2e:f1:6e:31:5f:d0:
                    19:0c:53:c8:9f:9e:a1:ae:30:fd:0e:23:bf:9d:e0:
                    a3:03:ee:8d:fa:09:ec:ef:4f:2b:8f:33:7f:52:82:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:A6:3B:4C:75:CB:D4:90:66:1E:3B:41:4A:79:35:80:1A:1E:AB
            X509v3 Authority Key Identifier:
                keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:93:d2:70:70:16:66:c7:ab:f0:4b:d5:d2:7a:f1:d3:84:87:
         bf:97:07:bf:ab:99:9c:d0:56:fd:d4:b3:c3:7b:b1:61:7f:09:
         c5:eb:0b:9f:24:3e:9b:53:15:56:97:43:6f:3c:bb:e5:07:9a:
         94:3f:9d:74:33:2a:5a:05:28:08:0b:fd:62:3a:33:4f:b0:fa:
         0c:e6:cb:44:eb:ba:fd:57:dc:10:16:51:85:1f:42:85:57:6f:
         93:7b:38:8a:40:64:75:ed:03:67:b3:fc:0a:cc:6d:2e:27:99:
         30:2c:f4:9a:6c:4d:b0:75:bb:f6:93:05:44:ed:4d:68:ac:12:
         ad:3a:62:dd:23:76:cc:0e:12:00:0b:80:a0:67:ea:7c:2f:8b:
         6c:0d:95:81:62:5c:0f:af:8f:35:4b:5a:54:b5:09:3d:f3:b8:
         25:dd:52:af:3a:73:2f:90:2c:02:7d:a2:00:c8:7b:ea:47:a8:
         ac:61:b3:97:f0:bb:3c:85:69:e9:5d:e8:09:2e:6b:dc:f5:84:
         c5:66:5d:13:86:38:5a:cc:f1:54:8b:6f:38:4c:4a:1a:f9:58:
         c8:30:ab:03:c2:1f:01:c1:a5:c6:eb:cd:f5:15:38:78:e7:69:
         6c:1c:01:74:98:58:41:be:62:64:ff:29:b5:36:43:e0:6f:ab:
         da:82:f7:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUX5VLyi6zR9eFzgBDlJ/JVAUy7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDNDJEQThGMDkxMzA2NDBCNkRFMDBBQTg0REZCMTA4
NjJBMkY1OTAeFw0yNDExMTIxOTA1MDdaFw0yNTExMTExOTEwMDdaMDMxMTAvBgNV
BAMTKDcwQzlBNjNCNEM3NUNCRDQ5MDY2MUUzQjQxNEE3OTM1ODAxQTFFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYT9dqYSksfKQcuTn5nBsU8TQ7
61PEwsDtrWfU4rmGFVOmQIszTxUhq1pv5FVd3ZbFX5DgF0J/8+wMZhZAdqOVVS3g
ZHqZXFD9lnjD6cvxHhwrEOXvSwUc6/wyoifgAk7ijgS6UPwm0f4ksoUeberAltUu
EYKEmoGp4VMAhJST3hgw+ebbxSThYiiaF4VDHuW0gU77AhKfANm8VQVzoC+8dNmG
j1eKYt2Z6wA3BHgB6GHacff0SU7Ve9+5uOAI0GD38IJwXOLJgc9LIMVy4wCB1uW/
AF4h2ymnyC7xbjFf0BkMU8ifnqGuMP0OI7+d4KMD7o36CezvTyuPM39SgvnvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcMmmO0x1y9SQZh47QUp5NYAaHqswHwYDVR0j
BBgwFoAU28QtqPCRMGQLbeAKqE37EIYqL1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9EQkM0MkRBOEYwOTEzMDY0MEI2REUwMEFBODRERkIxMDg2MkEyRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQzQyREE4RjA5MTMwNjQw
QjZERTAwQUE4NERGQjEwODYyQTJGNTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzIzODMwMzQzYTM1NjI2NjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARb8AAwDQYJKoZIhvcNAQELBQADggEBAFaT0nBw
FmbHq/BL1dJ68dOEh7+XB7+rmZzQVv3Us8N7sWF/CcXrC58kPptTFVaXQ288u+UH
mpQ/nXQzKloFKAgL/WI6M0+w+gzmy0Truv1X3BAWUYUfQoVXb5N7OIpAZHXtA2ez
/ArMbS4nmTAs9JpsTbB1u/aTBUTtTWisEq06Yt0jdswOEgALgKBn6nwvi2wNlYFi
XA+vjzVLWlS1CT3zuCXdUq86cy+QLAJ9ogDIe+pHqKxhs5fwuzyFaeld6Akua9z1
hMVmXROGOFrM8VSLbzhMShr5WMgwqwPCHwHBpcbrzfUVOHjnaWwcAXSYWEG+YmT/
KbU2Q+Bvq9qC9yU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org