Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
File:                     323830343a373334383a3a2f33322d3332203d3e20323632363930.roa (raw, json)
Hash identifier:          teZu03FSKD6MZqGDuc9rd+9OTCExvH2Zi+p/HEbgn/I=
Subject key identifier:   B2:24:8D:47:80:5A:7C:AB:EB:BF:57:1D:C7:00:8E:3E:9B:7D:B1:C4
Certificate issuer:       /CN=D099432381329A8B853BCFD609AEC204846D7EF8
Certificate serial:       2FD39787E23A744433226B289D0A856A91F87ADF
Authority key identifier: D0:99:43:23:81:32:9A:8B:85:3B:CF:D6:09:AE:C2:04:84:6D:7E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D099432381329A8B853BCFD609AEC204846D7EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
Signing time:             Wed 28 Aug 2024 19:06:26 +0000
ROA not before:           Wed 28 Aug 2024 19:01:26 +0000
ROA not after:            Wed 27 Aug 2025 19:06:26 +0000
asID:                     262690
IP address blocks:        2804:7348::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/D099432381329A8B853BCFD609AEC204846D7EF8.crl
                          rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/D099432381329A8B853BCFD609AEC204846D7EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D099432381329A8B853BCFD609AEC204846D7EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d3:97:87:e2:3a:74:44:33:22:6b:28:9d:0a:85:6a:91:f8:7a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D099432381329A8B853BCFD609AEC204846D7EF8
        Validity
            Not Before: Aug 28 19:01:26 2024 GMT
            Not After : Aug 27 19:06:26 2025 GMT
        Subject: CN=B2248D47805A7CABEBBF571DC7008E3E9B7DB1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:5a:e7:bb:1e:e8:a8:4c:f2:d4:43:7a:f8:
                    88:7a:4a:ef:94:17:ec:6a:09:bf:ab:5f:f1:17:0d:
                    4f:f4:b4:73:c8:28:9a:b0:76:ce:23:04:c7:28:88:
                    4c:f7:60:e3:e5:ab:67:59:63:c0:68:24:b6:8d:0f:
                    d7:0c:7c:6d:c3:6e:0e:86:de:ad:af:19:d4:96:21:
                    3c:da:a4:38:aa:76:ee:e7:b0:87:fe:00:af:c0:03:
                    15:1a:49:71:89:3a:a4:9b:45:e5:20:9c:01:89:37:
                    6e:59:89:56:e6:a2:8e:67:a7:d2:66:ff:80:34:e2:
                    74:49:6d:ff:cb:38:5b:24:30:44:ff:08:c5:1e:f2:
                    fe:56:1e:af:8e:e8:03:4c:85:41:04:55:1f:fd:e0:
                    48:d8:22:ef:53:6c:92:c2:e4:f3:15:bb:58:80:11:
                    7b:4b:81:f4:a7:6c:cb:af:9b:0a:46:67:59:a2:27:
                    17:83:57:7d:ce:54:fa:c0:51:ef:cd:66:e6:8a:ec:
                    ed:66:bc:4b:fb:3d:36:55:be:09:4d:58:ee:58:05:
                    d5:b6:80:22:e7:b9:fe:9a:b3:3b:6c:21:a0:29:d6:
                    cd:74:bf:60:3d:38:74:51:40:fc:77:1f:5a:73:7e:
                    32:be:91:c2:56:fe:8c:7c:44:12:d6:29:1c:22:e5:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:24:8D:47:80:5A:7C:AB:EB:BF:57:1D:C7:00:8E:3E:9B:7D:B1:C4
            X509v3 Authority Key Identifier:
                keyid:D0:99:43:23:81:32:9A:8B:85:3B:CF:D6:09:AE:C2:04:84:6D:7E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/D099432381329A8B853BCFD609AEC204846D7EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D099432381329A8B853BCFD609AEC204846D7EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7348::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:ca:ad:1d:19:31:7b:ea:69:c2:a5:f6:b3:18:8d:f1:de:93:
         01:ad:94:95:78:7d:f3:c6:b9:bb:b8:33:55:d2:6b:b3:00:8b:
         cd:88:c4:70:68:e1:46:ee:03:0a:fe:3b:ec:9e:d1:74:50:df:
         5e:3e:a6:83:7f:d4:53:ee:ae:79:35:4f:e2:5a:e5:52:97:c9:
         9a:79:4a:4c:14:84:d7:ec:89:8c:e3:cd:b6:94:c9:b3:e9:78:
         5f:cc:d9:4c:a8:c9:69:48:13:40:65:ac:59:7e:e7:8f:68:d5:
         b6:a9:85:22:6d:32:36:af:c1:ec:24:94:32:fc:da:88:c1:9f:
         5d:17:ee:05:62:fc:84:27:3e:d0:d1:f4:f2:2f:98:22:c0:63:
         18:36:c2:e5:3a:bc:af:97:9d:1d:14:5a:ee:ab:79:89:c1:2d:
         f4:01:ce:61:9d:75:60:da:3d:16:44:eb:74:71:11:fa:c2:2a:
         37:e1:89:af:48:17:3d:d7:21:d0:d0:a4:a2:75:99:a4:0a:aa:
         d1:67:97:d4:53:a1:8d:43:68:6f:58:87:47:ab:35:cd:e4:de:
         76:a7:5f:da:44:18:a5:de:a5:ce:42:de:76:00:42:42:7e:8e:
         99:6e:cd:fd:e4:f7:9a:af:fc:a2:ce:ef:97:10:58:51:0f:e8:
         5b:f0:1e:1d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL9OXh+I6dEQzImsonQqFapH4et8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5OTQzMjM4MTMyOUE4Qjg1M0JDRkQ2MDlBRUMyMDQ4
NDZEN0VGODAeFw0yNDA4MjgxOTAxMjZaFw0yNTA4MjcxOTA2MjZaMDMxMTAvBgNV
BAMTKEIyMjQ4RDQ3ODA1QTdDQUJFQkJGNTcxREM3MDA4RTNFOUI3REIxQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30lrnux7oqEzy1EN6+Ih6Su+U
F+xqCb+rX/EXDU/0tHPIKJqwds4jBMcoiEz3YOPlq2dZY8BoJLaND9cMfG3Dbg6G
3q2vGdSWITzapDiqdu7nsIf+AK/AAxUaSXGJOqSbReUgnAGJN25ZiVbmoo5np9Jm
/4A04nRJbf/LOFskMET/CMUe8v5WHq+O6ANMhUEEVR/94EjYIu9TbJLC5PMVu1iA
EXtLgfSnbMuvmwpGZ1miJxeDV33OVPrAUe/NZuaK7O1mvEv7PTZVvglNWO5YBdW2
gCLnuf6asztsIaAp1s10v2A9OHRRQPx3H1pzfjK+kcJW/ox8RBLWKRwi5U0NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsiSNR4BafKvrv1cdxwCOPpt9scQwHwYDVR0j
BBgwFoAU0JlDI4EymouFO8/WCa7CBIRtfvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODJ6cnVhU1RkYWNVMWFQc0FDSkc4bXFXY1A3a1c2SlF4ZkZ5WG15cnBO
bVovMC9EMDk5NDMyMzgxMzI5QThCODUzQkNGRDYwOUFFQzIwNDg0NkQ3RUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwOTk0MzIzODEzMjlBOEI4
NTNCQ0ZENjA5QUVDMjA0ODQ2RDdFRjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgyenJ1YVNUZGFjVTFhUHNBQ0pHOG1xV2NQN2tXNkpReGZGeVhteXJwTm1aLzAv
MzIzODMwMzQzYTM3MzMzNDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzYzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzSDANBgkqhkiG9w0BAQsFAAOCAQEAjcqtHRkx
e+ppwqX2sxiN8d6TAa2UlXh988a5u7gzVdJrswCLzYjEcGjhRu4DCv477J7RdFDf
Xj6mg3/UU+6ueTVP4lrlUpfJmnlKTBSE1+yJjOPNtpTJs+l4X8zZTKjJaUgTQGWs
WX7nj2jVtqmFIm0yNq/B7CSUMvzaiMGfXRfuBWL8hCc+0NH08i+YIsBjGDbC5Tq8
r5edHRRa7qt5icEt9AHOYZ11YNo9FkTrdHER+sIqN+GJr0gXPdch0NCkonWZpAqq
0WeX1FOhjUNob1iHR6s1zeTedqdf2kQYpd6lzkLedgBCQn6OmW7N/eT3mq/8os7v
lxBYUQ/oW/AeHQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:33 2024 by rpki-client on console-ams.rpki-client.org