Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/323830343a323961303a3a2f33322d3334203d3e203238323139.roa
File:                     323830343a323961303a3a2f33322d3334203d3e203238323139.roa (raw, json)
Hash identifier:          hCSiSjeo5IDJ2NEn0fbj5dC+SNi7gC7UQmaZDk3yKjQ=
Subject key identifier:   61:6B:DA:B7:00:91:2E:0A:BB:44:BC:B9:FF:A6:17:88:1E:B0:08:13
Certificate issuer:       /CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Certificate serial:       3FF5096B17FFDDFCEDC73FBA85D329A7D21D6044
Authority key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/323830343a323961303a3a2f33322d3334203d3e203238323139.roa
Signing time:             Thu 04 Apr 2024 00:07:07 +0000
ROA not before:           Thu 04 Apr 2024 00:02:07 +0000
ROA not after:            Thu 03 Apr 2025 00:07:07 +0000
asID:                     28219
IP address blocks:        2804:29a0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
                          rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f5:09:6b:17:ff:dd:fc:ed:c7:3f:ba:85:d3:29:a7:d2:1d:60:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
        Validity
            Not Before: Apr  4 00:02:07 2024 GMT
            Not After : Apr  3 00:07:07 2025 GMT
        Subject: CN=616BDAB700912E0ABB44BCB9FFA617881EB00813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:54:54:33:62:89:01:77:14:20:23:1f:ba:
                    a8:02:49:44:34:40:b4:d0:21:b5:aa:2d:ca:d7:73:
                    79:1d:7a:20:43:45:56:cd:24:bc:b7:20:f2:56:40:
                    cb:b0:0b:cf:4a:2e:85:bc:49:f1:9b:dc:f8:b5:44:
                    d8:51:59:85:42:a9:2c:34:e7:7b:8a:cc:46:ff:9a:
                    f2:a2:f8:64:e4:0d:e4:df:01:e5:80:73:1d:1d:60:
                    27:1c:e1:f2:87:7b:3f:02:71:5c:31:4f:80:66:ef:
                    c4:f6:24:e3:9e:9c:2f:23:65:66:a5:b9:ed:ff:e0:
                    17:ee:12:11:30:04:41:7f:8d:56:ae:f2:65:10:1c:
                    b0:1b:e6:b2:ba:e5:4c:86:f2:66:4b:48:fa:a7:bb:
                    a2:75:8a:8e:49:b9:1b:32:16:98:20:67:22:1d:82:
                    1e:dd:92:89:38:0d:73:95:d6:db:84:bd:cf:62:db:
                    2d:42:86:72:a7:4e:8c:24:34:7c:a3:df:a0:93:76:
                    15:ef:bc:86:d2:27:b8:f8:a6:d8:66:17:c1:02:5f:
                    a2:41:8b:13:71:42:02:c4:e6:c3:d0:e0:58:17:5f:
                    0f:84:51:d0:f6:fb:a8:0b:9e:be:d9:d8:12:dd:04:
                    e9:da:59:46:c4:6f:02:ae:a6:9c:82:e5:78:95:b1:
                    3a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6B:DA:B7:00:91:2E:0A:BB:44:BC:B9:FF:A6:17:88:1E:B0:08:13
            X509v3 Authority Key Identifier:
                keyid:80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/323830343a323961303a3a2f33322d3334203d3e203238323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:b4:54:b9:9b:95:63:5d:15:17:07:0f:9d:eb:00:ee:cc:
         50:b8:65:09:45:5b:01:4a:9e:52:74:7d:ff:63:b4:9e:35:39:
         d0:14:ea:48:00:2a:88:6d:a9:d1:c9:69:1f:bb:76:85:b9:b0:
         d5:a0:94:6f:55:aa:5e:a2:64:a5:59:f5:f6:b4:e6:b9:2c:d1:
         2e:70:a5:b5:e5:63:36:d3:81:1d:b3:82:8f:81:e4:71:b7:1a:
         a9:d1:65:b6:88:aa:43:02:a0:b4:07:d6:ec:8e:83:1c:6d:64:
         ac:60:74:08:4e:93:40:62:80:96:d6:0e:05:44:a4:a9:86:0c:
         c1:e3:97:bf:c3:19:d2:6a:ab:12:3e:5b:78:8f:71:aa:25:58:
         c7:39:c8:49:22:a6:c6:b5:91:ea:16:79:ff:c8:bc:6f:bb:ce:
         b9:c7:0b:51:5b:c0:9a:35:17:b0:c4:b7:c1:63:83:3c:85:17:
         85:d1:f1:b1:4a:1e:19:7e:35:98:20:ce:ac:97:97:87:45:89:
         1a:55:c2:5a:62:80:d7:07:18:ed:cf:73:b2:a1:79:c2:5a:9c:
         0a:9f:54:60:e0:ea:c4:32:0a:f1:93:4c:f0:07:c8:b7:0a:48:
         15:94:2b:ef:1a:83:c7:4f:d8:16:a5:34:b9:99:81:9c:a0:7a:
         67:cf:f5:25
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUP/UJaxf/3fztxz+6hdMpp9IdYEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5RDlGRDJGNzQxQ0QyQzZFQUNBOTFCQ0E4RDI5NTgy
NDk0ODU2QzAeFw0yNDA0MDQwMDAyMDdaFw0yNTA0MDMwMDA3MDdaMDMxMTAvBgNV
BAMTKDYxNkJEQUI3MDA5MTJFMEFCQjQ0QkNCOUZGQTYxNzg4MUVCMDA4MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAClRUM2KJAXcUICMfuqgCSUQ0
QLTQIbWqLcrXc3kdeiBDRVbNJLy3IPJWQMuwC89KLoW8SfGb3Pi1RNhRWYVCqSw0
53uKzEb/mvKi+GTkDeTfAeWAcx0dYCcc4fKHez8CcVwxT4Bm78T2JOOenC8jZWal
ue3/4BfuEhEwBEF/jVau8mUQHLAb5rK65UyG8mZLSPqnu6J1io5JuRsyFpggZyId
gh7dkok4DXOV1tuEvc9i2y1ChnKnTowkNHyj36CTdhXvvIbSJ7j4pthmF8ECX6JB
ixNxQgLE5sPQ4FgXXw+EUdD2+6gLnr7Z2BLdBOnaWUbEbwKuppyC5XiVsTq/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUYWvatwCRLgq7RLy5/6YXiB6wCBMwHwYDVR0j
BBgwFoAUgJ2f0vdBzSxurKkbyo0pWCSUhWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VmN3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRD
ZG4vMS84MDlEOUZEMkY3NDFDRDJDNkVBQ0E5MUJDQThEMjk1ODI0OTQ4NTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwOUQ5RkQyRjc0MUNEMkM2
RUFDQTkxQkNBOEQyOTU4MjQ5NDg1NkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdVZjdxSjFRVnA4SGRvRjdiNlVuUFIyNUM3Z2YzaHpjQkZORUgzZDQ0Q2RuLzEv
MzIzODMwMzQzYTMyMzk2MTMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzODMy
MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEKaAwDQYJKoZIhvcNAQELBQADggEBAHKktFS5m5Vj
XRUXBw+d6wDuzFC4ZQlFWwFKnlJ0ff9jtJ41OdAU6kgAKohtqdHJaR+7doW5sNWg
lG9Vql6iZKVZ9fa05rks0S5wpbXlYzbTgR2zgo+B5HG3GqnRZbaIqkMCoLQH1uyO
gxxtZKxgdAhOk0BigJbWDgVEpKmGDMHjl7/DGdJqqxI+W3iPcaolWMc5yEkipsa1
keoWef/IvG+7zrnHC1FbwJo1F7DEt8FjgzyFF4XR8bFKHhl+NZggzqyXl4dFiRpV
wlpigNcHGO3Pc7KhecJanAqfVGDg6sQyCvGTTPAHyLcKSBWUK+8ag8dP2BalNLmZ
gZygemfP9SU=
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org