Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/323830343a353737383a3a2f33322d3334203d3e20323638303637.roa
File:                     323830343a353737383a3a2f33322d3334203d3e20323638303637.roa (raw, json)
Hash identifier:          3sy+kduS2pbwRMRe53UR4Cy7MW3hCh/9TP3uGqO6HjU=
Subject key identifier:   51:6D:7E:9E:FF:56:22:5B:D6:AB:BC:59:95:EB:1C:69:03:D6:DA:B1
Certificate issuer:       /CN=A05BF308DC29C25A26A0F4A33425B04FFB3D9251
Certificate serial:       7441F8529A9D2AE0BC12BBFE9BBFF39ABAEE2D32
Authority key identifier: A0:5B:F3:08:DC:29:C2:5A:26:A0:F4:A3:34:25:B0:4F:FB:3D:92:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/323830343a353737383a3a2f33322d3334203d3e20323638303637.roa
Signing time:             Wed 17 Jul 2024 12:32:48 +0000
ROA not before:           Wed 17 Jul 2024 12:27:48 +0000
ROA not after:            Wed 16 Jul 2025 12:32:48 +0000
asID:                     268067
IP address blocks:        2804:5778::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.crl
                          rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:41:f8:52:9a:9d:2a:e0:bc:12:bb:fe:9b:bf:f3:9a:ba:ee:2d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A05BF308DC29C25A26A0F4A33425B04FFB3D9251
        Validity
            Not Before: Jul 17 12:27:48 2024 GMT
            Not After : Jul 16 12:32:48 2025 GMT
        Subject: CN=516D7E9EFF56225BD6ABBC5995EB1C6903D6DAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:9f:b0:87:86:d0:bd:a7:aa:b2:51:7e:1f:
                    0f:1a:5a:46:86:3a:a6:c9:cb:08:6a:ae:eb:48:6f:
                    fc:df:9c:c8:8f:f0:52:2c:af:16:2b:92:bb:ee:d1:
                    7b:25:52:36:56:c1:f9:c5:b0:84:9b:45:4f:4e:b1:
                    f1:e1:77:c6:ca:f4:17:21:a3:2f:7d:31:7b:22:15:
                    b7:77:a3:15:37:38:f0:b9:7f:8a:11:38:5d:66:fa:
                    9a:9f:de:27:91:1c:de:97:f4:41:46:a7:c7:e2:75:
                    ba:1d:1c:86:05:c9:bd:60:5d:c4:1b:d0:e9:ed:5c:
                    f0:75:e8:c4:77:70:28:46:3a:86:ad:cd:b4:2c:10:
                    5a:f0:8b:0d:8b:bb:b0:74:d7:0b:e1:c9:ec:05:6b:
                    e1:36:ae:f1:7c:a4:cd:cb:e5:fb:f0:70:ec:22:1a:
                    d4:8b:cd:99:9f:eb:4c:8e:52:20:f7:86:d3:3f:dc:
                    a0:f5:6c:56:e8:56:cb:11:54:a1:df:dc:8c:df:a5:
                    83:d4:3c:39:3d:06:21:a8:86:48:b9:3a:30:e6:78:
                    39:a2:cb:22:00:da:ad:ed:9f:77:9f:31:a9:6f:1a:
                    7c:5e:ff:11:f2:ee:d3:3d:d0:35:95:30:27:04:4f:
                    ff:03:5f:dd:86:c0:95:7c:ad:59:1a:8c:a5:f9:ea:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:7E:9E:FF:56:22:5B:D6:AB:BC:59:95:EB:1C:69:03:D6:DA:B1
            X509v3 Authority Key Identifier:
                keyid:A0:5B:F3:08:DC:29:C2:5A:26:A0:F4:A3:34:25:B0:4F:FB:3D:92:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/323830343a353737383a3a2f33322d3334203d3e20323638303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5778::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:57:09:62:fa:47:40:6f:03:db:12:c6:dc:2a:63:6d:ef:39:
         fa:dd:de:f2:67:45:5d:64:72:42:03:56:79:37:c1:b5:16:5f:
         b2:85:c6:c2:ec:01:86:4e:41:1a:4d:f4:64:5b:0e:7e:74:e9:
         df:92:54:24:af:ef:8f:80:26:df:16:e6:ac:01:8e:70:26:90:
         b1:d8:0d:e2:f8:4d:45:c6:30:2e:ac:12:14:35:61:82:5f:3e:
         da:cc:50:b9:d3:f0:63:c0:d5:7b:9a:a0:62:c2:ae:f1:c2:13:
         42:55:d8:29:df:72:8a:18:2f:fe:35:38:02:8a:cf:05:7c:fc:
         3c:42:b5:25:7e:03:e5:8e:49:c9:eb:06:08:b1:5f:e2:44:b0:
         2c:1b:ea:19:40:16:97:f7:0c:5f:a8:0d:67:54:7d:ba:92:6c:
         f4:49:54:61:f1:b9:f5:ac:dd:91:5f:ea:03:74:5a:7e:06:b4:
         ea:c5:cf:69:40:d7:3f:d9:d9:66:61:88:9d:88:9a:0c:95:d8:
         dc:34:e8:b4:44:87:15:ea:cb:c6:45:f2:c1:ab:9a:70:16:ec:
         35:89:77:1e:6a:b6:9d:09:c4:23:7f:5f:95:dc:c9:47:57:4f:
         83:48:3f:bc:6b:09:8f:09:78:85:bf:bb:99:22:18:5c:83:7b:
         53:e8:7a:c5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdEH4UpqdKuC8Erv+m7/zmrruLTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA1QkYzMDhEQzI5QzI1QTI2QTBGNEEzMzQyNUIwNEZG
QjNEOTI1MTAeFw0yNDA3MTcxMjI3NDhaFw0yNTA3MTYxMjMyNDhaMDMxMTAvBgNV
BAMTKDUxNkQ3RTlFRkY1NjIyNUJENkFCQkM1OTk1RUIxQzY5MDNENkRBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgpp+wh4bQvaeqslF+Hw8aWkaG
OqbJywhqrutIb/zfnMiP8FIsrxYrkrvu0XslUjZWwfnFsISbRU9OsfHhd8bK9Bch
oy99MXsiFbd3oxU3OPC5f4oROF1m+pqf3ieRHN6X9EFGp8fidbodHIYFyb1gXcQb
0OntXPB16MR3cChGOoatzbQsEFrwiw2Lu7B01wvhyewFa+E2rvF8pM3L5fvwcOwi
GtSLzZmf60yOUiD3htM/3KD1bFboVssRVKHf3IzfpYPUPDk9BiGohki5OjDmeDmi
yyIA2q3tn3efMalvGnxe/xHy7tM90DWVMCcET/8DX92GwJV8rVkajKX56k5NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUW1+nv9WIlvWq7xZlescaQPW2rEwHwYDVR0j
BBgwFoAUoFvzCNwpwlomoPSjNCWwT/s9klEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1pyNXd6SDVZRjhWU2hmYnFkeG9HOXdtQ0ZlV0tIZXJ2bUw3M3dmMnFM
dWYvMC9BMDVCRjMwOERDMjlDMjVBMjZBMEY0QTMzNDI1QjA0RkZCM0Q5MjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwNUJGMzA4REMyOUMyNUEy
NkEwRjRBMzM0MjVCMDRGRkIzRDkyNTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdacjV3ekg1WUY4VlNoZmJxZHhvRzl3bUNGZVdLSGVydm1MNzN3ZjJxTHVmLzAv
MzIzODMwMzQzYTM1MzczNzM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzAzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARXeDANBgkqhkiG9w0BAQsFAAOCAQEAlVcJYvpH
QG8D2xLG3Cpjbe85+t3e8mdFXWRyQgNWeTfBtRZfsoXGwuwBhk5BGk30ZFsOfnTp
35JUJK/vj4Am3xbmrAGOcCaQsdgN4vhNRcYwLqwSFDVhgl8+2sxQudPwY8DVe5qg
YsKu8cITQlXYKd9yihgv/jU4AorPBXz8PEK1JX4D5Y5JyesGCLFf4kSwLBvqGUAW
l/cMX6gNZ1R9upJs9ElUYfG59azdkV/qA3Rafga06sXPaUDXP9nZZmGInYiaDJXY
3DTotESHFerLxkXywauacBbsNYl3Hmq2nQnEI39fldzJR1dPg0g/vGsJjwl4hb+7
mSIYXIN7U+h6xQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:28 2024 by rpki-client on console-fra.rpki-client.org