Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
File:                     323830343a346263383a3a2f33322d3332203d3e20323637333239.roa (raw, json)
Hash identifier:          8fR9MkD5aKa3XuNHX4NX3fhbVdE9KsJcW0hfcjhr0fs=
Subject key identifier:   73:FC:58:4D:9D:35:FB:38:51:6D:4C:76:36:DA:59:7E:A3:2D:58:7B
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       2E79F8342A0D64E349BA71FC4021C7807C91290E
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
Signing time:             Thu 04 Apr 2024 04:01:08 +0000
ROA not before:           Thu 04 Apr 2024 03:56:08 +0000
ROA not after:            Thu 03 Apr 2025 04:01:08 +0000
asID:                     267329
IP address blocks:        2804:4bc8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:79:f8:34:2a:0d:64:e3:49:ba:71:fc:40:21:c7:80:7c:91:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  4 03:56:08 2024 GMT
            Not After : Apr  3 04:01:08 2025 GMT
        Subject: CN=73FC584D9D35FB38516D4C7636DA597EA32D587B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:d9:3a:45:57:75:89:6c:b8:24:36:cd:bf:
                    9b:01:5c:74:3a:0d:07:3d:a2:49:57:56:90:15:db:
                    1c:eb:02:4f:7b:08:50:c1:90:63:56:1a:77:56:3e:
                    f4:40:6f:90:ac:03:ed:47:e4:6c:7b:1f:70:56:e8:
                    99:27:21:14:d3:9f:32:bb:54:6d:8e:15:c1:6a:2b:
                    4c:e3:73:b4:8c:cb:49:2f:78:22:4a:5e:fe:48:5f:
                    cf:39:ef:b7:9d:ab:47:97:01:54:d2:70:f0:71:49:
                    88:25:dc:94:ac:e3:25:c5:8b:2d:68:25:34:0a:3d:
                    74:eb:4e:2f:a5:27:37:a9:af:d0:b7:9b:dd:e6:d6:
                    7f:f2:38:18:f2:c7:ac:c2:d8:a2:7d:7a:3a:54:d5:
                    c8:94:69:39:bc:01:8c:9b:b2:4a:f8:c2:cb:aa:0d:
                    a8:ad:36:d1:74:1d:d0:27:e0:2e:c2:f6:14:31:c7:
                    49:fb:48:a0:01:7c:6f:8a:54:9c:a9:3c:e4:8f:e1:
                    6f:17:4a:5c:b2:86:02:3d:57:61:ef:e3:8c:9f:fd:
                    bf:a7:d7:6a:89:16:55:b6:26:10:0d:22:9e:87:e8:
                    5f:fb:a5:6f:47:55:20:bb:9d:0f:06:b2:4c:02:5d:
                    93:45:f4:50:48:83:f1:c3:f3:dc:38:98:ce:2a:92:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FC:58:4D:9D:35:FB:38:51:6D:4C:76:36:DA:59:7E:A3:2D:58:7B
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:28:22:3e:f7:17:e8:92:4a:07:6e:25:48:09:a9:fe:72:
         3b:c9:78:3a:4b:d1:c0:27:04:52:2b:e5:28:80:e5:a8:ac:2e:
         22:e1:44:9f:29:df:13:ba:db:c5:bc:52:46:69:bc:cd:59:38:
         ee:79:02:e0:0c:9a:26:92:4e:de:70:79:c5:e9:8b:96:15:8e:
         8c:61:00:bc:7c:24:aa:dc:5a:2f:61:d3:0d:9d:d9:74:97:00:
         ba:4c:60:91:07:f0:cf:87:d4:d8:92:d6:08:d8:1c:ce:95:2c:
         d9:75:2f:00:a1:5b:06:39:e2:ce:ad:c2:f5:6b:be:1c:4c:7c:
         ba:39:4a:05:64:68:45:79:c8:72:95:b6:d5:11:a0:d4:85:bb:
         21:11:a0:61:cb:50:0d:70:9e:f0:ab:30:c6:39:16:f4:88:0e:
         1d:99:09:9b:59:31:d7:77:01:ca:a3:b2:e3:2c:4f:54:af:87:
         0e:f1:c4:18:fa:06:b7:1d:65:8e:83:92:1a:d5:2d:d0:e8:19:
         96:2f:ec:db:d5:1d:1a:5b:5b:45:bb:ec:39:1e:29:42:21:87:
         a1:cb:bc:5a:71:eb:37:b9:5f:85:52:bf:ba:cf:04:ef:d5:75:
         ea:0f:46:a1:3d:57:cf:5d:28:4a:55:15:ad:e2:8a:9f:9c:fa:
         94:af:e2:70
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULnn4NCoNZONJunH8QCHHgHyRKQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJDOUY3QUQ0MkYyMkI5RjA1OTlERURFRjdERjYwNzE4
RENFMTA2MjAeFw0yNDA0MDQwMzU2MDhaFw0yNTA0MDMwNDAxMDhaMDMxMTAvBgNV
BAMTKDczRkM1ODREOUQzNUZCMzg1MTZENEM3NjM2REE1OTdFQTMyRDU4N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0Nk6RVd1iWy4JDbNv5sBXHQ6
DQc9oklXVpAV2xzrAk97CFDBkGNWGndWPvRAb5CsA+1H5Gx7H3BW6JknIRTTnzK7
VG2OFcFqK0zjc7SMy0kveCJKXv5IX88577edq0eXAVTScPBxSYgl3JSs4yXFiy1o
JTQKPXTrTi+lJzepr9C3m93m1n/yOBjyx6zC2KJ9ejpU1ciUaTm8AYybskr4wsuq
DaitNtF0HdAn4C7C9hQxx0n7SKABfG+KVJypPOSP4W8XSlyyhgI9V2Hv44yf/b+n
12qJFlW2JhANIp6H6F/7pW9HVSC7nQ8GskwCXZNF9FBIg/HD89w4mM4qkgPlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUc/xYTZ01+zhRbUx2NtpZfqMtWHswHwYDVR0j
BBgwFoAUi8n3rULyK58Fmd7e999gcY3OEGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VTRmlBSGh2WTd5aTFDZjlGNXFxc1I0RnluUTRuVHlXS3duUURudEEy
Y1AvMS84QkM5RjdBRDQyRjIyQjlGMDU5OURFREVGN0RGNjA3MThEQ0UxMDYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQzlGN0FENDJGMjJCOUYw
NTk5REVERUY3REY2MDcxOERDRTEwNjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFU0ZpQUhodlk3eWkxQ2Y5RjVxcXNSNEZ5blE0blR5V0t3blFEbnRBMmNQLzEv
MzIzODMwMzQzYTM0NjI2MzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzMzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLyDANBgkqhkiG9w0BAQsFAAOCAQEATRUoIj73
F+iSSgduJUgJqf5yO8l4OkvRwCcEUivlKIDlqKwuIuFEnynfE7rbxbxSRmm8zVk4
7nkC4AyaJpJO3nB5xemLlhWOjGEAvHwkqtxaL2HTDZ3ZdJcAukxgkQfwz4fU2JLW
CNgczpUs2XUvAKFbBjnizq3C9Wu+HEx8ujlKBWRoRXnIcpW21RGg1IW7IRGgYctQ
DXCe8KswxjkW9IgOHZkJm1kx13cByqOy4yxPVK+HDvHEGPoGtx1ljoOSGtUt0OgZ
li/s29UdGltbRbvsOR4pQiGHocu8WnHrN7lfhVK/us8E79V16g9GoT1Xz10oSlUV
reKKn5z6lK/icA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org