Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
File:                     323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa (raw, json)
Hash identifier:          Fl1qNAiv4QbxFJEVadfQCGHNRRpCbV7T5e3/cy567Do=
Subject key identifier:   C7:32:77:87:C3:82:AD:32:6B:01:CD:88:A9:A8:B5:41:D9:6C:8C:FE
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       36D7F233B4E2BE41FE65345DFA82FA1E5245108F
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
Signing time:             Wed 03 Apr 2024 20:20:16 +0000
ROA not before:           Wed 03 Apr 2024 20:15:16 +0000
ROA not after:            Wed 02 Apr 2025 20:20:16 +0000
asID:                     271311
IP address blocks:        2804:7988:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d7:f2:33:b4:e2:be:41:fe:65:34:5d:fa:82:fa:1e:52:45:10:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Apr  3 20:15:16 2024 GMT
            Not After : Apr  2 20:20:16 2025 GMT
        Subject: CN=C7327787C382AD326B01CD88A9A8B541D96C8CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:4f:83:a5:f5:d0:26:82:e6:c0:db:59:22:
                    57:9d:2d:be:95:69:63:51:92:0a:76:a9:21:a6:e1:
                    54:f4:b5:0f:f2:ab:f3:0d:9b:3a:12:fc:af:d0:38:
                    a1:60:25:17:31:4f:c6:1d:ee:f5:f8:6d:e5:23:9d:
                    04:7d:a4:a4:9c:74:13:b0:7c:85:17:6b:4b:bf:5b:
                    6c:e5:59:e6:4e:36:65:22:2d:5c:ff:ef:b2:2b:0d:
                    99:0c:be:5e:79:4e:21:bc:a1:52:77:48:25:aa:74:
                    eb:47:e2:df:0e:8c:91:88:9e:75:52:8b:9f:ce:06:
                    2f:38:c4:eb:09:b9:94:88:d9:4f:56:f5:ef:88:7c:
                    bd:5b:db:74:72:62:21:83:ff:0a:f2:2c:1d:cd:a1:
                    5e:52:f2:c7:41:d6:b9:68:8e:51:10:a2:9c:f8:ab:
                    35:89:6e:9d:eb:d9:92:08:5c:ec:29:18:7c:79:91:
                    47:b6:33:f7:fe:9c:ac:c5:c6:0e:f0:1a:dd:47:e4:
                    46:12:28:5c:74:45:86:19:95:4f:5f:6f:7d:bc:66:
                    de:18:10:14:39:ad:a3:f0:b8:c1:93:50:b3:e2:25:
                    73:92:c8:37:94:b9:2f:8b:23:51:20:3e:0f:7a:be:
                    bb:b5:c7:81:43:64:34:d4:34:73:53:25:cc:c6:cf:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:32:77:87:C3:82:AD:32:6B:01:CD:88:A9:A8:B5:41:D9:6C:8C:FE
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7988:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:d4:e5:c6:5f:c8:85:34:8d:64:b4:0f:28:ac:ad:ca:36:
         67:4b:65:10:d2:41:13:89:1a:4e:4e:f1:af:da:79:81:40:28:
         fb:4d:1b:3f:dc:40:1d:e0:e5:c6:20:b6:ec:0c:46:d1:d3:2f:
         83:ad:ef:f8:66:1b:18:90:7e:cb:a3:b5:2d:05:46:6e:6e:e7:
         b0:4d:30:69:37:4a:a2:cb:9e:27:bd:4c:b7:5d:56:ca:49:b3:
         9c:cb:d6:9d:06:50:cd:f2:88:fc:60:76:1b:8c:e1:f8:15:ad:
         5b:8e:47:dd:87:07:5f:89:b4:8d:d3:d9:da:a9:29:ec:36:bc:
         9a:e3:55:ed:f5:3d:70:d8:3b:86:93:ec:c8:b8:e6:61:8f:d0:
         75:d2:66:e1:09:97:c1:a4:79:92:9d:1b:ef:09:a8:f4:c9:08:
         0c:ac:d5:84:c1:11:11:46:f9:07:f4:4d:d3:d4:35:53:91:48:
         e9:24:ab:8a:97:58:a9:92:e8:5e:b7:6f:92:53:93:e1:45:c4:
         9b:00:13:9c:98:a1:a5:fe:65:07:fe:e5:5e:f6:92:e7:e6:84:
         62:d1:01:87:08:e2:dc:4a:36:0d:bd:11:a9:7d:77:93:10:6a:
         21:dc:6e:62:af:83:e6:4a:2f:a4:d3:fd:e9:e4:c0:6b:9d:d6:
         b4:57:03:51
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNtfyM7TivkH+ZTRd+oL6HlJFEI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDQzgxMkQ1OUY0MzA4RkNCMUQyMjM5NTU1Njc4QjQ3
NjIxODc2NzAeFw0yNDA0MDMyMDE1MTZaFw0yNTA0MDIyMDIwMTZaMDMxMTAvBgNV
BAMTKEM3MzI3Nzg3QzM4MkFEMzI2QjAxQ0Q4OEE5QThCNTQxRDk2QzhDRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNg0+DpfXQJoLmwNtZIledLb6V
aWNRkgp2qSGm4VT0tQ/yq/MNmzoS/K/QOKFgJRcxT8Yd7vX4beUjnQR9pKScdBOw
fIUXa0u/W2zlWeZONmUiLVz/77IrDZkMvl55TiG8oVJ3SCWqdOtH4t8OjJGInnVS
i5/OBi84xOsJuZSI2U9W9e+IfL1b23RyYiGD/wryLB3NoV5S8sdB1rlojlEQopz4
qzWJbp3r2ZIIXOwpGHx5kUe2M/f+nKzFxg7wGt1H5EYSKFx0RYYZlU9fb328Zt4Y
EBQ5raPwuMGTULPiJXOSyDeUuS+LI1EgPg96vru1x4FDZDTUNHNTJczGzyBxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUxzJ3h8OCrTJrAc2Iqai1QdlsjP4wHwYDVR0j
BBgwFoAUtsyBLVn0MI/LHSI5VVZ4tHYhh2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2dnU1hYbjdXRHBxMXFxNmh6Ync5WThzemJtWDdEV0VxVDM1YnRoN0NX
VkUvMS9CNkNDODEyRDU5RjQzMDhGQ0IxRDIyMzk1NTU2NzhCNDc2MjE4NzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2Q0M4MTJENTlGNDMwOEZD
QjFEMjIzOTU1NTY3OEI0NzYyMTg3NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdnZ1NYWG43V0RwcTFxcTZoemJ3OVk4c3pibVg3RFdFcVQzNWJ0aDdDV1ZFLzEv
MzIzODMwMzQzYTM3MzkzODM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEeYiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBk1tTlxl/IhTSNZLQPKKytyjZnS2UQ0kETiRpOTvGv2nmBQCj7TRs/3EAd
4OXGILbsDEbR0y+Dre/4ZhsYkH7Lo7UtBUZubuewTTBpN0qiy54nvUy3XVbKSbOc
y9adBlDN8oj8YHYbjOH4Fa1bjkfdhwdfibSN09naqSnsNrya41Xt9T1w2DuGk+zI
uOZhj9B10mbhCZfBpHmSnRvvCaj0yQgMrNWEwRERRvkH9E3T1DVTkUjpJKuKl1ip
kuhet2+SU5PhRcSbABOcmKGl/mUH/uVe9pLn5oRi0QGHCOLcSjYNvRGpfXeTEGoh
3G5ir4PmSi+k0/3p5MBrnda0VwNR
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org