Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3664633a3a2f33322d3438203d3e2037303438.roa
File:                     323830343a3664633a3a2f33322d3438203d3e2037303438.roa (raw, json)
Hash identifier:          YfEHz8iDDp+k5L4Kd9bblX4+Miom2VKOU6lKK1x65n4=
Subject key identifier:   4C:B9:1F:E4:79:22:DC:3F:E9:D7:A9:A5:83:42:23:8B:D2:65:13:7C
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       75E154F385298BF9EEBDC75C4C509ED35435E384
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3664633a3a2f33322d3438203d3e2037303438.roa
Signing time:             Fri 08 Nov 2024 18:26:19 +0000
ROA not before:           Fri 08 Nov 2024 18:21:19 +0000
ROA not after:            Fri 07 Nov 2025 18:26:19 +0000
asID:                     7048
IP address blocks:        2804:6dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e1:54:f3:85:29:8b:f9:ee:bd:c7:5c:4c:50:9e:d3:54:35:e3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:21:19 2024 GMT
            Not After : Nov  7 18:26:19 2025 GMT
        Subject: CN=4CB91FE47922DC3FE9D7A9A58342238BD265137C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:82:8f:2a:cb:c3:59:56:9b:86:e2:e2:1e:16:
                    e6:15:9c:12:fc:c5:b0:5d:d0:75:a5:33:9e:15:4c:
                    b6:35:4c:49:56:0c:c4:04:8a:63:19:af:7e:ab:e0:
                    87:64:f9:d0:bf:5a:70:db:af:c4:e4:46:95:7f:5d:
                    90:79:9e:71:91:93:5c:d7:c5:a1:83:7a:58:06:5f:
                    16:bd:30:1b:d1:21:3e:dd:24:c9:b9:29:55:2e:2c:
                    b0:f1:b9:cd:0d:c7:a1:f6:c3:dd:a9:9b:17:90:d6:
                    37:6a:c3:fd:0e:16:de:a5:5d:ac:31:cd:87:c4:26:
                    17:3b:69:a8:ff:13:91:d3:1f:aa:59:0a:a5:d6:b5:
                    f1:63:f3:45:d9:a8:fa:4d:12:8c:66:ce:8b:c9:ad:
                    12:ca:fe:5b:a9:37:a8:05:23:97:48:65:e0:c7:70:
                    aa:76:f6:ef:bc:d1:d3:0e:92:b1:4c:ae:08:df:5a:
                    58:bd:48:e9:3c:70:f9:bd:f0:4e:69:b7:4f:22:3e:
                    87:79:61:bd:ea:65:8e:4d:64:80:09:7e:fb:bf:44:
                    cd:51:c9:73:4e:d0:1b:d6:46:6d:cd:80:ec:fc:be:
                    14:4e:ce:a3:cc:d6:f3:32:a5:4d:b4:31:1a:3c:89:
                    8d:38:ab:f2:0f:77:32:e5:02:4f:61:49:d5:71:d5:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B9:1F:E4:79:22:DC:3F:E9:D7:A9:A5:83:42:23:8B:D2:65:13:7C
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3664633a3a2f33322d3438203d3e2037303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:57:c0:dc:03:24:b4:02:ce:ee:61:fe:26:b4:ea:10:d5:4d:
         77:b4:a0:51:3f:52:06:9a:c7:ea:3f:9b:e1:8c:35:51:4a:a0:
         4e:5c:d6:d2:02:c3:6d:03:1e:1a:8e:b9:db:a2:a5:29:cd:0c:
         4a:67:3c:f6:49:69:25:3e:1f:71:db:7f:ae:f1:b3:86:a2:33:
         7a:22:b1:50:da:ab:24:1c:82:85:8b:d5:4f:58:1e:0e:60:72:
         ee:4b:45:7c:dd:7e:c5:59:fe:0b:4a:67:66:e7:07:37:85:28:
         ae:75:92:b6:57:4c:b7:47:45:62:ad:df:6a:3e:b1:da:c1:7f:
         47:80:05:a7:7e:fb:92:db:d4:06:e1:c0:4c:ea:7d:f6:ed:da:
         85:81:f4:df:dc:e1:0c:3b:9d:15:e3:88:37:9e:cc:20:42:a1:
         96:ba:85:d7:50:87:0b:af:5e:25:c1:10:0a:1b:73:10:42:85:
         98:66:8e:d7:e3:d6:50:96:05:61:66:65:ac:74:05:01:85:b4:
         6a:12:06:5c:a2:88:64:69:99:2f:78:5a:ce:6b:36:f3:f6:d1:
         7b:c8:41:42:f6:bb:38:80:56:55:4c:be:f7:17:c7:1a:2e:51:
         b2:96:11:6b:a3:51:17:19:75:22:14:82:2e:9b:d8:00:61:8a:
         c4:39:b6:6d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUdeFU84Upi/nuvcdcTFCe01Q144QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzQTVEREM3NTRCRDE2NTU1RkUxMzJBN0VFMEYwNThD
MkZGN0I1NjAeFw0yNDExMDgxODIxMTlaFw0yNTExMDcxODI2MTlaMDMxMTAvBgNV
BAMTKDRDQjkxRkU0NzkyMkRDM0ZFOUQ3QTlBNTgzNDIyMzhCRDI2NTEzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgo8qy8NZVpuG4uIeFuYVnBL8
xbBd0HWlM54VTLY1TElWDMQEimMZr36r4Idk+dC/WnDbr8TkRpV/XZB5nnGRk1zX
xaGDelgGXxa9MBvRIT7dJMm5KVUuLLDxuc0Nx6H2w92pmxeQ1jdqw/0OFt6lXawx
zYfEJhc7aaj/E5HTH6pZCqXWtfFj80XZqPpNEoxmzovJrRLK/lupN6gFI5dIZeDH
cKp29u+80dMOkrFMrgjfWli9SOk8cPm98E5pt08iPod5Yb3qZY5NZIAJfvu/RM1R
yXNO0BvWRm3NgOz8vhROzqPM1vMypU20MRo8iY04q/IPdzLlAk9hSdVx1bBxAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUTLkf5Hki3D/p16mlg0Iji9JlE3wwHwYDVR0j
BBgwFoAUwzpd3HVL0WVV/hMqfuDwWML/e1YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC9DMzNBNUREQzc1NEJEMTY1NTVGRTEzMkE3RUUwRjA1OEMyRkY3QjU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzM0E1RERDNzU0QkQxNjU1
NUZFMTMyQTdFRTBGMDU4QzJGRjdCNTYuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzIzODMwMzQzYTM2NjQ2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM3MzAzNDM4
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQG3DANBgkqhkiG9w0BAQsFAAOCAQEAx1fA3AMktALO7mH+
JrTqENVNd7SgUT9SBprH6j+b4Yw1UUqgTlzW0gLDbQMeGo6526KlKc0MSmc89klp
JT4fcdt/rvGzhqIzeiKxUNqrJByChYvVT1geDmBy7ktFfN1+xVn+C0pnZucHN4Uo
rnWStldMt0dFYq3faj6x2sF/R4AFp377ktvUBuHATOp99u3ahYH039zhDDudFeOI
N57MIEKhlrqF11CHC69eJcEQChtzEEKFmGaO1+PWUJYFYWZlrHQFAYW0ahIGXKKI
ZGmZL3hazms28/bRe8hBQva7OIBWVUy+9xfHGi5RspYRa6NRFxl1IhSCLpvYAGGK
xDm2bQ==
-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:39 2024 by rpki-client on console-fra.rpki-client.org