Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa
File:                     323830343a323737343a3a2f33322d3438203d3e20323633393032.roa (raw, json)
Hash identifier:          4NYfuawOe5YVoSprip1Z0fN0mRM4bedDt9B1YluNw/U=
Subject key identifier:   2F:CA:13:A3:96:EE:4A:BB:12:92:F9:53:49:E3:65:38:59:0E:36:45
Certificate issuer:       /CN=642F5BFE9618C97BD02FBE38760D7906C042330D
Certificate serial:       41F1E48925EAA22D9DFC668FC871E98F9D1D10AB
Authority key identifier: 64:2F:5B:FE:96:18:C9:7B:D0:2F:BE:38:76:0D:79:06:C0:42:33:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642F5BFE9618C97BD02FBE38760D7906C042330D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa
Signing time:             Mon 08 Jul 2024 16:44:58 +0000
ROA not before:           Mon 08 Jul 2024 16:39:58 +0000
ROA not after:            Mon 07 Jul 2025 16:44:58 +0000
asID:                     263902
IP address blocks:        2804:2774::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/642F5BFE9618C97BD02FBE38760D7906C042330D.crl
                          rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/642F5BFE9618C97BD02FBE38760D7906C042330D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642F5BFE9618C97BD02FBE38760D7906C042330D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f1:e4:89:25:ea:a2:2d:9d:fc:66:8f:c8:71:e9:8f:9d:1d:10:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642F5BFE9618C97BD02FBE38760D7906C042330D
        Validity
            Not Before: Jul  8 16:39:58 2024 GMT
            Not After : Jul  7 16:44:58 2025 GMT
        Subject: CN=2FCA13A396EE4ABB1292F95349E36538590E3645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:35:0d:1a:01:26:07:00:f7:ec:d8:9a:99:
                    cc:3a:28:7a:49:a0:65:32:d9:92:b6:5d:20:91:7b:
                    9f:be:cb:d9:8a:30:18:e9:0e:96:b9:ae:bb:a8:38:
                    75:d8:83:bd:75:4c:1f:f7:83:f4:02:a9:be:66:ff:
                    3f:19:a0:9d:14:a7:cd:e3:3d:cf:70:ea:b7:a8:c5:
                    14:97:3e:3d:09:0a:ac:36:7b:2b:73:11:d7:e6:99:
                    f8:ec:fc:a7:0f:9b:3d:09:99:f3:71:47:ef:cc:52:
                    9c:80:e3:6e:70:1b:23:46:92:8f:e8:e8:af:cb:33:
                    4d:6b:42:14:25:ef:ee:da:46:6b:79:a6:06:66:d8:
                    e0:c1:85:d0:2c:b4:11:95:d7:2c:11:e8:a3:7f:d3:
                    54:b4:f5:ad:a7:7d:0a:23:ba:50:10:c0:a4:45:cc:
                    36:e6:d7:cd:c7:f3:7a:41:bd:e4:f0:f3:86:b8:ba:
                    4a:53:c2:a2:a4:8c:9e:7e:c3:f9:10:01:df:36:fa:
                    61:33:09:9a:65:56:6c:d2:82:6f:44:8a:5b:97:be:
                    a6:e2:d6:81:12:d2:a5:18:8f:38:4a:fd:0d:42:5a:
                    27:3c:a2:eb:60:31:f9:e6:31:d3:3c:a7:19:8c:2a:
                    68:33:59:59:b4:33:75:25:4f:56:e4:ca:3e:65:31:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:13:A3:96:EE:4A:BB:12:92:F9:53:49:E3:65:38:59:0E:36:45
            X509v3 Authority Key Identifier:
                keyid:64:2F:5B:FE:96:18:C9:7B:D0:2F:BE:38:76:0D:79:06:C0:42:33:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/642F5BFE9618C97BD02FBE38760D7906C042330D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642F5BFE9618C97BD02FBE38760D7906C042330D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2774::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:70:e8:ce:85:50:95:ed:42:b4:c9:ec:7d:d5:2f:f3:8a:fd:
         35:17:68:26:8e:04:ff:a3:b4:57:b5:fb:1f:6d:5c:19:07:d7:
         7d:91:ea:b9:37:20:25:70:9b:09:64:10:e0:ef:1f:a3:6b:5a:
         76:4c:b9:b4:9b:17:1e:09:12:90:7f:eb:cd:3b:de:ee:4a:3a:
         11:13:3e:03:cb:5e:ed:36:01:80:2e:0a:7f:a4:07:68:7a:ed:
         70:5b:96:4e:8b:29:16:11:ce:24:63:c5:59:d4:51:4f:fa:e7:
         9c:f6:11:91:ff:88:34:25:d2:06:e9:ec:06:07:16:c5:00:49:
         3b:d5:ec:b8:a0:aa:7c:f8:48:5e:73:fe:a7:15:bc:91:42:ab:
         a5:8d:b9:7c:c8:d6:8c:11:7f:1d:c1:cf:84:ed:b6:72:9d:07:
         e6:c1:d9:98:ec:86:4a:99:33:9d:f9:6c:2e:8b:54:2f:03:f6:
         3c:d2:10:0f:a4:10:fc:5e:3a:6f:86:a9:70:b3:50:01:ec:fb:
         70:40:e8:ff:44:4a:b8:0c:bc:24:68:0a:94:b4:e3:e5:d6:86:
         e4:08:b4:fe:0c:da:9a:f6:ef:22:00:bb:33:ae:0a:69:38:f5:
         9c:9a:d4:80:e9:9f:02:4e:3d:75:24:3b:74:a8:4e:cc:7c:4b:
         07:13:3e:ab
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQfHkiSXqoi2d/GaPyHHpj50dEKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyRjVCRkU5NjE4Qzk3QkQwMkZCRTM4NzYwRDc5MDZD
MDQyMzMwRDAeFw0yNDA3MDgxNjM5NThaFw0yNTA3MDcxNjQ0NThaMDMxMTAvBgNV
BAMTKDJGQ0ExM0EzOTZFRTRBQkIxMjkyRjk1MzQ5RTM2NTM4NTkwRTM2NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhjUNGgEmBwD37Niamcw6KHpJ
oGUy2ZK2XSCRe5++y9mKMBjpDpa5rruoOHXYg711TB/3g/QCqb5m/z8ZoJ0Up83j
Pc9w6reoxRSXPj0JCqw2eytzEdfmmfjs/KcPmz0JmfNxR+/MUpyA425wGyNGko/o
6K/LM01rQhQl7+7aRmt5pgZm2ODBhdAstBGV1ywR6KN/01S09a2nfQojulAQwKRF
zDbm183H83pBveTw84a4ukpTwqKkjJ5+w/kQAd82+mEzCZplVmzSgm9EiluXvqbi
1oES0qUYjzhK/Q1CWic8outgMfnmMdM8pxmMKmgzWVm0M3UlT1bkyj5lMRklAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUL8oTo5buSrsSkvlTSeNlOFkONkUwHwYDVR0j
BBgwFoAUZC9b/pYYyXvQL744dg15BsBCMw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3dnVjV1c3N5QUNUbXJORVp0YXQyV1llWUNGOXBwc2hiRk1mMXF4SmRo
ZXEvMC82NDJGNUJGRTk2MThDOTdCRDAyRkJFMzg3NjBENzkwNkMwNDIzMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkY1QkZFOTYxOEM5N0JE
MDJGQkUzODc2MEQ3OTA2QzA0MjMzMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3Z1Y1dXNzeUFDVG1yTkVadGF0MldZZVlDRjlwcHNoYkZNZjFxeEpkaGVxLzAv
MzIzODMwMzQzYTMyMzczNzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzkzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQndDANBgkqhkiG9w0BAQsFAAOCAQEANHDozoVQ
le1CtMnsfdUv84r9NRdoJo4E/6O0V7X7H21cGQfXfZHquTcgJXCbCWQQ4O8fo2ta
dky5tJsXHgkSkH/rzTve7ko6ERM+A8te7TYBgC4Kf6QHaHrtcFuWTospFhHOJGPF
WdRRT/rnnPYRkf+INCXSBunsBgcWxQBJO9XsuKCqfPhIXnP+pxW8kUKrpY25fMjW
jBF/HcHPhO22cp0H5sHZmOyGSpkznflsLotULwP2PNIQD6QQ/F46b4apcLNQAez7
cEDo/0RKuAy8JGgKlLTj5daG5Ai0/gzamvbvIgC7M64KaTj1nJrUgOmfAk49dSQ7
dKhOzHxLBxM+qw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:09 2024 by rpki-client on console-ams.rpki-client.org