Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33332d3333203d3e20323731303030.roa
File:                     323830343a373462633a3a2f33332d3333203d3e20323731303030.roa (raw, json)
Hash identifier:          Jjf8A+1iywRPNFm9hBqP8A2GlM9DBwUzxZeYs1oM6LE=
Subject key identifier:   95:C8:B6:C8:EB:22:6C:0D:DE:A0:A5:A2:D8:18:A8:FD:F8:A4:46:D4
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       62D1AE1FE5C3ABE2C3A9B7111712444A05332288
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33332d3333203d3e20323731303030.roa
Signing time:             Fri 05 Apr 2024 00:25:25 +0000
ROA not before:           Fri 05 Apr 2024 00:20:25 +0000
ROA not after:            Fri 04 Apr 2025 00:25:25 +0000
asID:                     271000
IP address blocks:        2804:74bc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d1:ae:1f:e5:c3:ab:e2:c3:a9:b7:11:17:12:44:4a:05:33:22:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: Apr  5 00:20:25 2024 GMT
            Not After : Apr  4 00:25:25 2025 GMT
        Subject: CN=95C8B6C8EB226C0DDEA0A5A2D818A8FDF8A446D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:d0:bc:b0:7e:aa:89:06:e7:4c:eb:73:88:
                    d1:b2:39:b8:9b:ea:21:98:5d:f5:9b:12:d8:a1:63:
                    df:3d:7d:c2:ea:33:f1:d5:55:8a:69:2c:7f:bd:49:
                    51:e5:a8:9c:78:b8:98:17:69:db:29:b7:6d:84:b0:
                    de:b7:db:fa:88:99:58:0a:60:35:6f:7b:1d:d3:10:
                    43:dc:55:1d:dd:7b:58:f8:9d:0c:4e:3c:92:af:e0:
                    ae:3a:20:f8:12:9f:94:ba:ee:c6:aa:e8:7f:43:7c:
                    ac:93:b8:bf:6d:9d:8a:26:01:ae:6b:46:61:c5:f4:
                    21:8b:46:97:20:57:e6:19:59:99:13:cf:36:ce:f1:
                    43:67:28:3f:0f:2e:5d:bc:a5:1d:cb:27:57:d1:0d:
                    8e:5e:5c:d6:c6:27:79:7c:f9:bc:ed:ad:30:80:69:
                    22:c5:ea:08:b3:d5:39:53:2f:b0:92:3f:8a:74:c9:
                    d0:18:4c:0a:cf:df:b5:79:a5:e4:19:96:5d:79:22:
                    2f:05:b9:8b:fc:b4:95:a6:b5:68:21:41:11:7c:70:
                    db:8d:f7:48:67:dc:59:51:ae:d2:9e:ff:33:b4:4a:
                    80:db:f4:ed:3c:79:fc:d6:c6:f6:12:75:4a:5a:d5:
                    7e:4f:ea:73:db:de:6e:c5:46:79:e4:a6:05:03:fa:
                    76:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:B6:C8:EB:22:6C:0D:DE:A0:A5:A2:D8:18:A8:FD:F8:A4:46:D4
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33332d3333203d3e20323731303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:5f:a3:e3:a9:43:e8:ba:73:0d:8b:c2:00:2e:0f:67:c6:
         e6:da:b9:b4:bc:4c:f4:f1:2b:ea:ef:72:28:00:f7:44:d2:a7:
         9b:8d:74:b8:ee:c5:6b:67:4a:62:e2:85:29:5f:d6:66:18:3d:
         d0:02:72:b0:77:25:5b:e3:30:1d:fe:37:ad:93:72:39:3d:79:
         1f:55:17:fc:8a:cf:df:ca:12:82:a7:0a:94:5a:3f:25:e2:0d:
         19:f5:99:ab:33:bd:12:88:59:df:a4:7d:d4:ad:5a:91:b6:a6:
         a9:4e:f5:93:82:75:be:6e:d1:79:f4:9f:24:a6:97:05:b7:ec:
         72:8c:f9:0b:9b:91:cf:47:0b:f4:a1:b0:4e:1f:28:ec:22:5d:
         5b:37:d3:ae:c7:25:e6:52:4e:f3:36:77:a4:83:a8:bf:09:26:
         a2:a0:93:2e:2b:49:51:66:63:70:94:2f:9b:d3:79:72:c0:1d:
         0a:8c:d5:4d:6e:ea:4f:cf:89:60:38:7b:26:69:01:fd:4b:e3:
         37:96:2e:4f:88:64:29:c5:49:b8:c4:5f:59:2f:75:5e:db:0e:
         c9:89:43:da:b1:c9:f4:7a:01:dc:e3:73:86:ca:d9:30:7d:43:
         99:d6:f3:24:ae:3b:dc:f2:60:36:85:c6:83:a4:28:cf:7a:b8:
         e2:24:30:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYtGuH+XDq+LDqbcRFxJESgUzIogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI4REE0NUMzOUMwREY2RkI3NEIwNkYwRjgwOThBQzY5
MTY4NjREQjAeFw0yNDA0MDUwMDIwMjVaFw0yNTA0MDQwMDI1MjVaMDMxMTAvBgNV
BAMTKDk1QzhCNkM4RUIyMjZDMERERUEwQTVBMkQ4MThBOEZERjhBNDQ2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJS9C8sH6qiQbnTOtziNGyObib
6iGYXfWbEtihY989fcLqM/HVVYppLH+9SVHlqJx4uJgXadspt22EsN632/qImVgK
YDVvex3TEEPcVR3de1j4nQxOPJKv4K46IPgSn5S67saq6H9DfKyTuL9tnYomAa5r
RmHF9CGLRpcgV+YZWZkTzzbO8UNnKD8PLl28pR3LJ1fRDY5eXNbGJ3l8+bztrTCA
aSLF6giz1TlTL7CSP4p0ydAYTArP37V5peQZll15Ii8FuYv8tJWmtWghQRF8cNuN
90hn3FlRrtKe/zO0SoDb9O08efzWxvYSdUpa1X5P6nPb3m7FRnnkpgUD+nYBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlci2yOsibA3eoKWi2Bio/fikRtQwHwYDVR0j
BBgwFoAUG42kXDnA32+3Swbw+AmKxpFoZNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZWclFib25jQWRwZ2NLcWhKaVh3dTRqU1J0UWVtUTNyYWZ6ak5GREs1
WWcvMS8xQjhEQTQ1QzM5QzBERjZGQjc0QjA2RjBGODA5OEFDNjkxNjg2NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCOERBNDVDMzlDMERGNkZC
NzRCMDZGMEY4MDk4QUM2OTE2ODY0REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWVnJRYm9uY0FkcGdjS3FoSmlYd3U0alNSdFFlbVEzcmFmempORkRLNVlnLzEv
MzIzODMwMzQzYTM3MzQ2MjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzAzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR0vAAwDQYJKoZIhvcNAQELBQADggEBAD2XX6Pj
qUPounMNi8IALg9nxubaubS8TPTxK+rvcigA90TSp5uNdLjuxWtnSmLihSlf1mYY
PdACcrB3JVvjMB3+N62Tcjk9eR9VF/yKz9/KEoKnCpRaPyXiDRn1maszvRKIWd+k
fdStWpG2pqlO9ZOCdb5u0Xn0nySmlwW37HKM+Qubkc9HC/ShsE4fKOwiXVs3067H
JeZSTvM2d6SDqL8JJqKgky4rSVFmY3CUL5vTeXLAHQqM1U1u6k/PiWA4eyZpAf1L
4zeWLk+IZCnFSbjEX1kvdV7bDsmJQ9qxyfR6Adzjc4bK2TB9Q5nW8ySuO9zyYDaF
xoOkKM96uOIkMPk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org