Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa
File:                     323830343a336538633a3a2f33322d3430203d3e20323636363035.roa (raw, json)
Hash identifier:          XGZF5HUTFa6XBb1ih89G50Fd78RlmJvnbII9PZi44TY=
Subject key identifier:   97:FD:81:BD:02:F8:E4:3C:09:08:70:9F:EC:91:D8:43:68:8D:95:CB
Certificate issuer:       /CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
Certificate serial:       7928A5772975A182F91921E3498CDD5A7EDDEF6F
Authority key identifier: 57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa
Signing time:             Wed 03 Apr 2024 23:54:57 +0000
ROA not before:           Wed 03 Apr 2024 23:49:57 +0000
ROA not after:            Wed 02 Apr 2025 23:54:57 +0000
asID:                     266605
IP address blocks:        2804:3e8c::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl
                          rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:28:a5:77:29:75:a1:82:f9:19:21:e3:49:8c:dd:5a:7e:dd:ef:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
        Validity
            Not Before: Apr  3 23:49:57 2024 GMT
            Not After : Apr  2 23:54:57 2025 GMT
        Subject: CN=97FD81BD02F8E43C0908709FEC91D843688D95CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:e0:d4:0e:5a:2b:d1:e9:4e:0b:b5:91:67:
                    88:70:bc:2e:dd:c5:9e:e9:c4:f6:44:76:96:0d:8b:
                    87:33:41:75:14:2d:90:f6:7a:ae:75:33:38:19:03:
                    46:f5:78:83:e1:de:39:f5:5d:73:9c:ec:20:02:9b:
                    00:94:4d:26:6f:dd:0b:08:de:f4:28:a0:48:34:9e:
                    bb:4a:f5:3e:c0:69:9c:62:6b:19:9c:c9:c0:3f:8e:
                    8a:3c:5f:c6:82:bc:fc:6d:fc:b0:d7:b5:c0:4d:dd:
                    de:30:56:9d:9a:0e:a5:e4:01:39:84:1b:22:20:97:
                    85:33:4b:61:f6:c8:67:16:3a:75:e9:55:7b:82:a5:
                    14:59:75:e8:3d:5f:a2:ba:3b:a7:83:a8:5b:5e:ea:
                    61:36:e0:90:e1:72:70:37:b0:5c:ac:a9:20:46:e2:
                    57:d9:56:4e:b8:f8:ef:63:31:70:0e:6c:11:bd:2a:
                    98:b7:71:0e:e9:45:40:cc:26:f3:c7:c6:1f:fc:71:
                    9b:06:7c:22:b6:2b:93:a5:c6:d3:c3:fd:95:a1:47:
                    16:d7:12:4a:c3:e8:b2:ad:91:1c:cf:83:f8:d8:94:
                    48:8e:8f:86:36:98:17:92:dc:0b:08:f0:80:21:b3:
                    6a:e0:57:70:c3:4b:aa:95:35:8a:2b:c8:1d:09:81:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:81:BD:02:F8:E4:3C:09:08:70:9F:EC:91:D8:43:68:8D:95:CB
            X509v3 Authority Key Identifier:
                keyid:57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:23:02:0b:a3:68:25:a7:7a:9b:32:46:91:6e:6c:b1:ec:a3:
         7a:82:61:21:74:b0:57:af:fc:85:be:b2:a3:fb:ed:64:9b:8c:
         6c:c1:e7:e6:60:0f:25:31:08:88:c5:ef:a4:15:7c:6d:38:bd:
         87:25:66:51:17:0d:84:fd:0f:d1:a2:ed:48:79:77:ee:2b:1e:
         aa:68:95:69:94:78:ff:f4:25:ce:55:77:d6:73:63:b9:3f:03:
         3d:69:4c:2e:f3:ff:6a:41:d3:80:37:6c:a1:39:9f:b9:d2:70:
         c2:4a:31:56:29:6d:e5:2e:2e:7b:4d:b7:c9:95:5e:6b:4b:96:
         e1:30:0c:30:68:f1:6f:84:f7:26:47:3a:a4:cb:f1:55:4d:30:
         ec:0d:a4:74:a6:c4:52:99:ec:ad:96:16:04:b8:6e:f9:16:43:
         6b:a0:7a:91:cd:e3:c7:95:aa:6d:9b:a3:6d:38:33:50:b7:f9:
         ad:08:f3:42:9f:fa:4c:dd:da:4b:67:fb:b8:38:96:4b:06:7f:
         70:c3:09:30:92:e7:42:70:9f:70:30:b6:0b:7d:0e:7d:d5:66:
         2b:b7:68:6f:79:91:00:75:9b:bb:9e:0c:bc:97:83:f7:e4:cb:
         92:86:42:4a:c7:39:6e:32:52:47:7c:77:e8:f7:76:c4:2a:4c:
         24:f2:8d:b1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeSildyl1oYL5GSHjSYzdWn7d728wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBMjQ2QUM5MDQ1MkQxRTMxNzA4NUY4QUY2RUVGOEUx
MUFDNDU1MzAeFw0yNDA0MDMyMzQ5NTdaFw0yNTA0MDIyMzU0NTdaMDMxMTAvBgNV
BAMTKDk3RkQ4MUJEMDJGOEU0M0MwOTA4NzA5RkVDOTFEODQzNjg4RDk1Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKj+DUDlor0elOC7WRZ4hwvC7d
xZ7pxPZEdpYNi4czQXUULZD2eq51MzgZA0b1eIPh3jn1XXOc7CACmwCUTSZv3QsI
3vQooEg0nrtK9T7AaZxiaxmcycA/joo8X8aCvPxt/LDXtcBN3d4wVp2aDqXkATmE
GyIgl4UzS2H2yGcWOnXpVXuCpRRZdeg9X6K6O6eDqFte6mE24JDhcnA3sFysqSBG
4lfZVk64+O9jMXAObBG9Kpi3cQ7pRUDMJvPHxh/8cZsGfCK2K5OlxtPD/ZWhRxbX
EkrD6LKtkRzPg/jYlEiOj4Y2mBeS3AsI8IAhs2rgV3DDS6qVNYoryB0JgbzpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUl/2BvQL45DwJCHCf7JHYQ2iNlcswHwYDVR0j
BBgwFoAUV6JGrJBFLR4xcIX4r27vjhGsRVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JHSHZGVWdxS0sxZTVtcXRaSmVKOTJuV2h0b21XTG5OenhiV2VhUHFK
YnkvMS81N0EyNDZBQzkwNDUyRDFFMzE3MDg1RjhBRjZFRUY4RTExQUM0NTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3QTI0NkFDOTA0NTJEMUUz
MTcwODVGOEFGNkVFRjhFMTFBQzQ1NTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiR0h2RlVncUtLMWU1bXF0WkplSjkybldodG9tV0xuTnp4YldlYVBxSmJ5LzEv
MzIzODMwMzQzYTMzNjUzODYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM2
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+jDANBgkqhkiG9w0BAQsFAAOCAQEAhCMCC6No
Jad6mzJGkW5sseyjeoJhIXSwV6/8hb6yo/vtZJuMbMHn5mAPJTEIiMXvpBV8bTi9
hyVmURcNhP0P0aLtSHl37iseqmiVaZR4//QlzlV31nNjuT8DPWlMLvP/akHTgDds
oTmfudJwwkoxVilt5S4ue023yZVea0uW4TAMMGjxb4T3Jkc6pMvxVU0w7A2kdKbE
UpnsrZYWBLhu+RZDa6B6kc3jx5WqbZujbTgzULf5rQjzQp/6TN3aS2f7uDiWSwZ/
cMMJMJLnQnCfcDC2C30OfdVmK7dob3mRAHWbu54MvJeD9+TLkoZCSsc5bjJSR3x3
6Pd2xCpMJPKNsQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:25 2024 by rpki-client on console-fra.rpki-client.org