Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/323830343a343338303a3a2f33322d313238203d3e20323637353734.roa
File:                     323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (raw, json)
Hash identifier:          2hFf6qpax1RO4mE3DAUS9lmGsHO6m6S7mC10W5k/lXI=
Subject key identifier:   F7:80:B8:28:D2:94:6A:76:17:49:0D:28:1D:48:DD:5D:C8:5D:3B:92
Certificate issuer:       /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial:       72CC60A729FD88107607E844A18D040C2A85E5A2
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/323830343a343338303a3a2f33322d313238203d3e20323637353734.roa
Signing time:             Mon 22 Jul 2024 12:41:46 +0000
ROA not before:           Mon 22 Jul 2024 12:36:46 +0000
ROA not after:            Mon 21 Jul 2025 12:41:46 +0000
asID:                     267574
IP address blocks:        2804:4380::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
                          rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cc:60:a7:29:fd:88:10:76:07:e8:44:a1:8d:04:0c:2a:85:e5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
        Validity
            Not Before: Jul 22 12:36:46 2024 GMT
            Not After : Jul 21 12:41:46 2025 GMT
        Subject: CN=F780B828D2946A7617490D281D48DD5DC85D3B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:f2:14:5f:f8:16:68:98:f3:92:d7:d5:ea:
                    00:88:71:9c:44:fb:c5:78:d5:6f:f9:05:de:c8:2a:
                    4c:65:bb:5b:8d:73:93:5f:f9:41:9c:5e:6d:1d:70:
                    7a:17:7a:55:84:d2:ac:a1:6c:25:54:94:27:81:b5:
                    eb:f7:2d:39:3b:58:df:95:03:ba:85:16:16:78:13:
                    d4:f9:d5:1e:2c:c2:d0:70:85:0a:bc:4e:c1:2e:3c:
                    17:41:9c:fa:93:4e:01:c2:24:24:3c:a9:4c:6c:0c:
                    78:a3:0c:c7:22:30:20:01:53:81:01:bc:16:0f:7d:
                    51:e5:43:f9:a2:06:2e:47:e0:8d:ef:55:03:16:d8:
                    04:0a:bd:b6:67:04:aa:a5:9e:aa:75:06:51:e0:78:
                    9f:f0:fc:2e:03:92:e3:31:21:07:a2:d5:77:44:07:
                    0a:63:58:6a:70:62:80:82:d0:f3:bf:ea:f5:fa:23:
                    61:e6:aa:09:37:f5:3d:f1:6e:28:e1:d6:b9:4a:05:
                    11:53:e2:bb:5e:87:6f:c6:ef:b2:f0:d0:a3:b5:80:
                    e9:5c:d5:22:17:bd:69:1c:d7:95:53:bb:eb:1e:88:
                    ce:fa:69:3e:d0:a2:b6:a4:5b:4d:2c:26:26:a4:7e:
                    46:be:a6:fe:c3:76:cd:1c:b9:6d:40:fb:58:b5:89:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:B8:28:D2:94:6A:76:17:49:0D:28:1D:48:DD:5D:C8:5D:3B:92
            X509v3 Authority Key Identifier:
                keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/323830343a343338303a3a2f33322d313238203d3e20323637353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4380::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:02:0f:80:3b:d6:d9:6a:cf:ce:dc:04:c3:c9:23:50:dc:ff:
         e3:4b:42:98:bc:5d:68:02:3a:45:de:7d:3e:11:49:a8:b1:70:
         db:4c:56:2a:58:05:de:b8:37:80:c3:5e:38:1d:e4:2d:20:d7:
         57:b0:27:73:2f:a2:64:1a:2b:13:de:30:3b:b4:e4:56:2a:87:
         ee:7f:c3:2a:b5:aa:50:ff:8a:8c:e9:7d:5b:de:23:9e:9b:cc:
         07:28:54:fb:69:64:f8:8f:2c:91:bd:dd:85:03:20:52:c7:a3:
         3b:2c:9c:f3:07:46:f1:07:66:e9:43:98:06:4f:14:36:34:83:
         54:39:96:05:56:7f:b3:00:79:1d:f8:4b:fd:89:f8:cf:25:96:
         e6:5f:52:a4:e2:46:7c:b2:96:69:68:8e:54:7e:b8:44:6a:08:
         12:32:b3:ae:95:eb:17:6d:a2:f3:18:ea:0d:7b:3b:ae:35:71:
         d2:c6:b3:d3:60:a5:db:74:f8:f8:d0:e1:a5:bd:88:af:c4:8d:
         23:b7:56:f4:89:02:53:22:86:08:19:37:2d:90:20:98:4d:28:
         37:a5:92:a7:56:bd:46:a1:76:c3:8a:a2:09:1d:50:e0:1d:46:
         7e:bb:25:26:67:2b:ad:60:c8:c0:fb:b5:9d:25:57:3d:31:1e:
         35:8e:29:03
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUcsxgpyn9iBB2B+hEoY0EDCqF5aIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEwNTJEMzFGRTQwQjVGMzcwNjM3RTJDMEU0RjFBMThG
RjA4Mjk1RjAeFw0yNDA3MjIxMjM2NDZaFw0yNTA3MjExMjQxNDZaMDMxMTAvBgNV
BAMTKEY3ODBCODI4RDI5NDZBNzYxNzQ5MEQyODFENDhERDVEQzg1RDNCOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLX/IUX/gWaJjzktfV6gCIcZxE
+8V41W/5Bd7IKkxlu1uNc5Nf+UGcXm0dcHoXelWE0qyhbCVUlCeBtev3LTk7WN+V
A7qFFhZ4E9T51R4swtBwhQq8TsEuPBdBnPqTTgHCJCQ8qUxsDHijDMciMCABU4EB
vBYPfVHlQ/miBi5H4I3vVQMW2AQKvbZnBKqlnqp1BlHgeJ/w/C4DkuMxIQei1XdE
BwpjWGpwYoCC0PO/6vX6I2Hmqgk39T3xbijh1rlKBRFT4rteh2/G77Lw0KO1gOlc
1SIXvWkc15VTu+seiM76aT7QorakW00sJiakfka+pv7Dds0cuW1A+1i1icbJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU94C4KNKUanYXSQ0oHUjdXchdO5IwHwYDVR0j
BBgwFoAUWgUtMf5AtfNwY34sDk8aGP8IKV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1m
TnAvMS81QTA1MkQzMUZFNDBCNUYzNzA2MzdFMkMwRTRGMUExOEZGMDgyOTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMDUyRDMxRkU0MEI1RjM3
MDYzN0UyQzBFNEYxQTE4RkYwODI5NUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdNSGZYa3VuQ2lRQnJSU0ZQNTlvajFVcjhMWHNCR3hCZ3Exc0dZVDRNZk5wLzEv
MzIzODMwMzQzYTM0MzMzODMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEOAMA0GCSqGSIb3DQEBCwUAA4IBAQCGAg+A
O9bZas/O3ATDySNQ3P/jS0KYvF1oAjpF3n0+EUmosXDbTFYqWAXeuDeAw144HeQt
INdXsCdzL6JkGisT3jA7tORWKofuf8MqtapQ/4qM6X1b3iOem8wHKFT7aWT4jyyR
vd2FAyBSx6M7LJzzB0bxB2bpQ5gGTxQ2NINUOZYFVn+zAHkd+Ev9ifjPJZbmX1Kk
4kZ8spZpaI5UfrhEaggSMrOulesXbaLzGOoNezuuNXHSxrPTYKXbdPj40OGlvYiv
xI0jt1b0iQJTIoYIGTctkCCYTSg3pZKnVr1GoXbDiqIJHVDgHUZ+uyUmZyutYMjA
+7WdJVc9MR41jikD
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:18 2024 by rpki-client on console-fra.rpki-client.org