Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa
File:                     323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa (raw, json)
Hash identifier:          Sy3Orvdck3/KZiqbXcSfZb2zrt16VMXnNBChJKwqaFI=
Subject key identifier:   E9:9F:9A:83:0B:77:69:01:7D:3E:A3:5E:9B:D7:D1:48:44:5C:6B:3A
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       0C750CDEE426C9A0FAD4DFB4E49B97773161F09B
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:57 +0000
ROA not before:           Thu 15 Aug 2024 17:06:57 +0000
ROA not after:            Thu 14 Aug 2025 17:11:57 +0000
asID:                     266551
IP address blocks:        2804:3dc0:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:75:0c:de:e4:26:c9:a0:fa:d4:df:b4:e4:9b:97:77:31:61:f0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:57 2024 GMT
            Not After : Aug 14 17:11:57 2025 GMT
        Subject: CN=E99F9A830B7769017D3EA35E9BD7D148445C6B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:1e:26:40:96:60:74:1f:35:01:ff:b6:97:
                    28:93:9c:55:2a:00:ba:73:ff:30:ed:95:36:8c:69:
                    0a:87:ef:3b:35:c7:7c:e9:c0:ed:00:61:da:40:90:
                    c7:f8:d4:0b:6c:8f:ac:77:34:a0:ac:b1:c6:6e:e0:
                    16:b0:c2:c5:7b:57:da:c4:38:ff:32:fe:1e:ca:48:
                    e5:ef:70:8a:d7:c9:b4:5a:fc:ad:59:93:ed:bf:8e:
                    91:9c:8f:17:c6:db:7d:b5:e1:c0:30:49:eb:d6:54:
                    f1:4a:4b:63:b6:00:ee:47:19:ce:c2:10:3c:0b:d3:
                    e5:7a:65:0b:11:23:b3:98:e2:a4:0c:1e:2b:1a:e0:
                    1a:97:88:86:c6:da:97:94:48:cd:f2:a1:e1:11:14:
                    e5:ae:6d:bc:ff:59:8c:ef:d9:d7:48:4a:81:9b:6a:
                    29:8e:14:ac:c1:6d:cb:ef:e8:37:fd:79:ef:49:10:
                    31:6a:c9:f3:30:23:9e:32:0b:c0:8f:8c:77:ae:0b:
                    2e:a4:31:42:ef:f1:53:78:ce:18:df:8b:50:71:aa:
                    d0:13:a3:3b:55:ee:14:de:79:cf:bf:c1:f1:ce:73:
                    92:4f:3a:ed:7b:68:10:19:95:60:05:cc:d1:ba:08:
                    03:7e:a7:b3:66:6d:04:cd:0d:cc:88:fb:4b:d0:b0:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9F:9A:83:0B:77:69:01:7D:3E:A3:5E:9B:D7:D1:48:44:5C:6B:3A
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a613030303a3a2f33362d3336203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:0b:6d:f2:1d:6c:f4:99:3d:5c:1b:f8:aa:2a:56:fb:99:
         a9:74:55:ed:b8:3e:58:1f:fc:ed:1e:88:f5:f9:f2:e9:9d:ff:
         a1:19:b7:88:fe:5d:ba:e4:0a:12:50:96:5c:70:26:4e:4c:2b:
         a1:99:7b:29:63:50:bc:b9:6e:a7:0d:38:e2:d9:6f:fa:d5:f6:
         ae:f2:9b:2d:03:8f:f7:62:bc:15:d4:ed:f8:37:2a:1c:67:2b:
         52:46:04:97:66:69:4a:e1:c8:c6:cd:62:cd:e3:a1:55:9d:8d:
         81:77:b3:29:d9:87:1a:59:aa:eb:47:24:32:7a:fe:c0:5e:0d:
         c3:b0:b4:f6:5a:08:0d:11:e1:1d:68:41:80:0c:a9:98:89:2a:
         77:6b:9f:50:ce:6c:30:ea:d9:a9:5b:ac:a7:97:32:6f:08:38:
         f0:d0:b7:d9:a8:46:d5:d7:22:3a:54:4e:c3:8e:f1:ec:ba:1d:
         0f:15:6c:eb:49:34:13:52:14:46:6f:1c:a2:fb:d6:e3:d2:24:
         9e:10:df:e3:03:74:3f:0f:cb:2e:e1:c2:a6:28:8a:57:73:c7:
         c2:68:82:69:21:ae:5d:48:29:72:f7:f1:2f:89:cc:8b:14:6d:
         cd:d6:8f:f3:56:4a:0c:9b:44:af:32:a6:47:7d:5c:e7:92:d2:
         6b:a0:23:a7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDHUM3uQmyaD61N+05JuXdzFh8JswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyNkQyRkQ5QTNFQzI2RUQ2RTNFQUQ2MTFFNTk0RTZC
RTBBMkU5OTAeFw0yNDA4MTUxNzA2NTdaFw0yNTA4MTQxNzExNTdaMDMxMTAvBgNV
BAMTKEU5OUY5QTgzMEI3NzY5MDE3RDNFQTM1RTlCRDdEMTQ4NDQ1QzZCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIh4mQJZgdB81Af+2lyiTnFUq
ALpz/zDtlTaMaQqH7zs1x3zpwO0AYdpAkMf41Atsj6x3NKCsscZu4BawwsV7V9rE
OP8y/h7KSOXvcIrXybRa/K1Zk+2/jpGcjxfG23214cAwSevWVPFKS2O2AO5HGc7C
EDwL0+V6ZQsRI7OY4qQMHisa4BqXiIbG2peUSM3yoeERFOWubbz/WYzv2ddISoGb
aimOFKzBbcvv6Df9ee9JEDFqyfMwI54yC8CPjHeuCy6kMULv8VN4zhjfi1BxqtAT
oztV7hTeec+/wfHOc5JPOu17aBAZlWAFzNG6CAN+p7NmbQTNDcyI+0vQsEBdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6Z+agwt3aQF9PqNem9fRSERcazowHwYDVR0j
BBgwFoAU9SbS/Zo+wm7W4+rWEeWU5r4KLpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dhc0haOU1tTUd3NGRZY3FIR2hOV0ZIYW04VVdRZTVCdWZuRzRMSkRw
MmovMC9GNTI2RDJGRDlBM0VDMjZFRDZFM0VBRDYxMUU1OTRFNkJFMEEyRTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MjZEMkZEOUEzRUMyNkVE
NkUzRUFENjExRTU5NEU2QkUwQTJFOTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXYXNIWjlNbU1HdzRkWWNxSEdoTldGSGFtOFVXUWU1QnVmbkc0TEpEcDJqLzAv
MzIzODMwMzQzYTMzNjQ2MzMwM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM1MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEPcCgMA0GCSqGSIb3DQEBCwUA
A4IBAQCvewtt8h1s9Jk9XBv4qipW+5mpdFXtuD5YH/ztHoj1+fLpnf+hGbeI/l26
5AoSUJZccCZOTCuhmXspY1C8uW6nDTji2W/61fau8pstA4/3YrwV1O34NyocZytS
RgSXZmlK4cjGzWLN46FVnY2Bd7Mp2YcaWarrRyQyev7AXg3DsLT2WggNEeEdaEGA
DKmYiSp3a59Qzmww6tmpW6ynlzJvCDjw0LfZqEbV1yI6VE7DjvHsuh0PFWzrSTQT
UhRGbxyi+9bj0iSeEN/jA3Q/D8su4cKmKIpXc8fCaIJpIa5dSCly9/EvicyLFG3N
1o/zVkoMm0SvMqZHfVznktJroCOn
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org