Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/323830343a376263343a3a2f33322d3438203d3e20323731343533.roa
File:                     323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (raw, json)
Hash identifier:          FiNZ7LDOZOUFY549WOsVUe6x9vgL2buDErawfk9C0us=
Subject key identifier:   F6:78:D4:1E:33:BA:83:7B:47:D5:3E:E2:FB:A6:40:35:65:7D:DD:03
Certificate issuer:       /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial:       415B2AFB86F8C95C2AC04F5073203542C12F25D4
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/323830343a376263343a3a2f33322d3438203d3e20323731343533.roa
Signing time:             Wed 03 Apr 2024 19:44:47 +0000
ROA not before:           Wed 03 Apr 2024 19:39:47 +0000
ROA not after:            Wed 02 Apr 2025 19:44:47 +0000
asID:                     271453
IP address blocks:        2804:7bc4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
                          rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5b:2a:fb:86:f8:c9:5c:2a:c0:4f:50:73:20:35:42:c1:2f:25:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
        Validity
            Not Before: Apr  3 19:39:47 2024 GMT
            Not After : Apr  2 19:44:47 2025 GMT
        Subject: CN=F678D41E33BA837B47D53EE2FBA64035657DDD03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:9f:f6:9b:f6:77:18:6f:e1:f6:f9:13:c7:
                    34:49:dd:4b:ca:a1:07:18:17:05:1f:23:2a:ad:c9:
                    0e:53:b9:28:99:d9:2f:53:3c:7a:3a:05:85:93:cd:
                    9c:2a:42:25:31:8f:2f:65:df:17:47:11:f9:cb:76:
                    50:76:7d:52:a7:e5:2a:22:01:50:a2:99:84:fa:01:
                    ba:c8:c2:d3:af:23:87:32:73:ae:06:48:82:4b:57:
                    68:99:bf:17:19:d2:4f:29:58:1d:c3:96:c6:71:17:
                    1e:38:aa:f8:6a:1a:b0:c3:37:8d:92:fe:7d:85:cc:
                    6d:cb:59:56:fa:5e:c7:a7:37:4f:8a:b1:da:c0:23:
                    51:1e:cb:32:c7:8c:cb:1e:13:d2:ec:20:c6:42:54:
                    c8:79:c9:22:72:20:c5:b7:7d:3b:71:8b:a4:5a:2d:
                    5a:85:4d:92:d4:12:6b:8d:26:22:de:e7:56:fb:ea:
                    ff:09:fc:ae:a0:5b:48:ec:4a:2a:69:fe:aa:fd:f9:
                    6f:04:9a:de:64:4a:e7:4a:90:07:ad:fc:ab:e5:7e:
                    65:7c:54:d8:8c:b1:d5:1c:6b:54:37:fb:bb:8e:e7:
                    40:de:d1:54:88:0d:ff:f4:df:39:ff:34:76:41:b3:
                    72:23:46:ab:88:a9:5d:cb:82:7a:88:74:f3:31:6c:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:D4:1E:33:BA:83:7B:47:D5:3E:E2:FB:A6:40:35:65:7D:DD:03
            X509v3 Authority Key Identifier:
                keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/323830343a376263343a3a2f33322d3438203d3e20323731343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:de:6b:8f:94:a7:6e:d8:c5:87:c8:b0:84:cd:08:c3:3b:82:
         fa:ad:f2:25:6a:42:ee:24:32:fc:21:b0:ce:54:c2:e0:16:da:
         7a:14:52:dc:f5:5b:fc:f9:63:52:ed:13:be:3d:88:9d:44:c1:
         2c:15:e0:7e:43:c4:7f:05:a5:ed:10:2a:a3:fe:26:38:37:ea:
         26:00:5e:b4:95:89:6a:cc:3d:39:28:9d:6b:b7:a5:c4:0a:59:
         44:76:65:a3:f4:c6:36:35:94:a8:27:42:2f:21:a5:6d:ff:62:
         0d:c2:c9:26:48:90:82:d1:a5:97:c7:7e:11:2a:af:04:39:95:
         f2:d0:f5:bc:31:3a:30:0c:74:7d:80:56:94:7a:39:6f:22:cc:
         ce:9b:da:d6:bb:36:bc:92:c7:92:41:ce:b4:8c:67:32:40:04:
         a6:9f:aa:db:55:32:ab:32:11:2a:79:84:16:b8:bb:54:79:e4:
         2d:0f:fe:bb:1f:e9:47:36:fe:67:01:1a:18:59:5e:87:03:fd:
         47:b1:53:6d:21:51:c8:2a:ad:df:97:aa:17:e6:76:cb:32:ab:
         8b:6a:68:b2:b3:46:bd:73:b3:31:ef:cb:dd:d6:9d:05:1d:f4:
         fc:4c:99:90:46:46:ad:5b:f8:27:15:a1:0c:0c:44:31:00:26:
         09:b4:20:2f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQVsq+4b4yVwqwE9QcyA1QsEvJdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5
NTFENkVCOTAeFw0yNDA0MDMxOTM5NDdaFw0yNTA0MDIxOTQ0NDdaMDMxMTAvBgNV
BAMTKEY2NzhENDFFMzNCQTgzN0I0N0Q1M0VFMkZCQTY0MDM1NjU3REREMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAJ/2m/Z3GG/h9vkTxzRJ3UvK
oQcYFwUfIyqtyQ5TuSiZ2S9TPHo6BYWTzZwqQiUxjy9l3xdHEfnLdlB2fVKn5Soi
AVCimYT6AbrIwtOvI4cyc64GSIJLV2iZvxcZ0k8pWB3DlsZxFx44qvhqGrDDN42S
/n2FzG3LWVb6XsenN0+KsdrAI1EeyzLHjMseE9LsIMZCVMh5ySJyIMW3fTtxi6Ra
LVqFTZLUEmuNJiLe51b76v8J/K6gW0jsSipp/qr9+W8Emt5kSudKkAet/KvlfmV8
VNiMsdUca1Q3+7uO50De0VSIDf/03zn/NHZBs3IjRquIqV3LgnqIdPMxbPyLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9njUHjO6g3tH1T7i+6ZANWV93QMwHwYDVR0j
BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV
eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG
OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdwQVM4UU12SzU5eVdQUkZ4ZmFSWlVxZUNudGN5dmtYQzNZaVhMMVBxVXpLLzEv
MzIzODMwMzQzYTM3NjI2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR7xDANBgkqhkiG9w0BAQsFAAOCAQEAEN5rj5Sn
btjFh8iwhM0IwzuC+q3yJWpC7iQy/CGwzlTC4BbaehRS3PVb/PljUu0Tvj2InUTB
LBXgfkPEfwWl7RAqo/4mODfqJgBetJWJasw9OSida7elxApZRHZlo/TGNjWUqCdC
LyGlbf9iDcLJJkiQgtGll8d+ESqvBDmV8tD1vDE6MAx0fYBWlHo5byLMzpva1rs2
vJLHkkHOtIxnMkAEpp+q21UyqzIRKnmEFri7VHnkLQ/+ux/pRzb+ZwEaGFlehwP9
R7FTbSFRyCqt35eqF+Z2yzKri2posrNGvXOzMe/L3dadBR30/EyZkEZGrVv4JxWh
DAxEMQAmCbQgLw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org