Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/323830343a333062383a3a2f33322d3634203d3e203238313534.roa
File:                     323830343a333062383a3a2f33322d3634203d3e203238313534.roa (raw, json)
Hash identifier:          /knWsOa/v3q5SAF5L9Ht8G7PX9gj0W3EaauZHJ///xw=
Subject key identifier:   FA:DA:56:8F:81:16:68:86:2B:0A:9D:A3:8F:13:85:49:13:6B:B6:47
Certificate issuer:       /CN=812191D8B89140CC7C6B2A5D3CF140116F023979
Certificate serial:       0BC5FB177991528A77A941678DD3906BD4971B25
Authority key identifier: 81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/323830343a333062383a3a2f33322d3634203d3e203238313534.roa
Signing time:             Thu 04 Apr 2024 07:50:50 +0000
ROA not before:           Thu 04 Apr 2024 07:45:50 +0000
ROA not after:            Thu 03 Apr 2025 07:50:50 +0000
asID:                     28154
IP address blocks:        2804:30b8::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl
                          rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c5:fb:17:79:91:52:8a:77:a9:41:67:8d:d3:90:6b:d4:97:1b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812191D8B89140CC7C6B2A5D3CF140116F023979
        Validity
            Not Before: Apr  4 07:45:50 2024 GMT
            Not After : Apr  3 07:50:50 2025 GMT
        Subject: CN=FADA568F811668862B0A9DA38F138549136BB647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:a5:2c:54:4a:8e:17:a2:d3:94:f8:16:8a:
                    af:37:54:74:26:e4:23:6a:78:e1:7a:fb:13:81:39:
                    de:e4:dc:31:d6:51:b3:28:07:4e:ca:60:e8:ff:f0:
                    a7:ab:c8:61:51:8a:4d:93:e0:f4:2d:35:d9:74:30:
                    7a:2b:c9:e6:73:87:53:83:be:80:c1:b1:b0:73:b6:
                    b5:6c:ac:fb:46:b0:07:85:da:4a:0b:70:b9:1f:fe:
                    1d:56:7d:80:b5:9c:59:77:7a:a7:d2:74:2d:b4:98:
                    78:ea:50:51:d5:ff:e1:42:79:e5:bc:52:43:bb:c4:
                    98:db:5e:23:ad:19:ba:7b:82:b9:9b:21:a1:1b:94:
                    a9:c9:e1:27:fa:98:5a:7d:f5:d6:30:fb:0d:e5:1b:
                    81:cc:dd:c7:d9:97:a8:5a:2c:36:b4:a6:1d:73:f9:
                    f4:c1:9e:f8:9a:f8:80:50:b6:90:14:68:f2:26:5f:
                    97:91:03:7b:b7:70:7c:6d:0d:e9:40:7c:1b:63:8e:
                    68:31:6a:30:2e:f0:5b:3e:13:ec:31:a4:75:88:00:
                    b8:2a:5a:a6:57:3a:de:c0:85:f1:b1:64:cd:b0:e5:
                    09:9c:a2:72:a6:a7:e9:4b:de:89:9f:c9:65:5b:23:
                    f7:e1:4d:58:33:ce:c0:a1:11:7d:b9:31:81:1e:ba:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DA:56:8F:81:16:68:86:2B:0A:9D:A3:8F:13:85:49:13:6B:B6:47
            X509v3 Authority Key Identifier:
                keyid:81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/323830343a333062383a3a2f33322d3634203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:90:5d:0c:a6:4c:83:17:30:52:2f:11:06:be:64:4d:83:0e:
         74:6a:95:12:41:0b:e4:dd:24:99:79:36:39:38:4f:94:00:9e:
         5f:83:0a:c8:a6:68:97:62:21:be:a6:b8:31:b2:f9:bb:b1:20:
         79:1d:5b:fe:fa:c8:1e:ae:3a:89:1b:21:55:d7:86:e2:a8:98:
         d8:ef:25:5e:3b:f6:98:95:76:20:73:ee:93:a3:b5:cb:c2:34:
         5f:af:c7:40:f6:5c:e5:95:9b:2b:e1:e3:61:1d:9d:81:90:78:
         22:b7:a3:f5:ea:9e:cb:e5:e0:20:02:20:92:d3:76:41:3b:e8:
         f5:1c:28:93:bc:94:63:4e:64:13:ba:cf:cf:4f:f9:dd:80:41:
         19:e8:e7:87:69:ad:ce:05:81:33:c9:c3:26:ef:20:0d:17:eb:
         90:bf:6f:21:7d:3e:e6:d9:5f:5e:4c:83:52:92:71:ec:fc:4a:
         48:f2:51:da:11:be:76:e9:a3:ba:1d:c4:bc:87:26:b9:ed:e2:
         8c:37:83:93:56:ea:43:b8:5b:14:f3:06:3e:ed:86:fd:45:73:
         9c:16:15:18:71:ad:55:3b:e5:68:e7:38:0b:bd:4b:27:ad:53:
         c4:b7:2e:7e:60:7c:e8:65:25:c2:c3:f9:3a:c7:a6:71:f0:46:
         06:02:c0:f1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUC8X7F3mRUop3qUFnjdOQa9SXGyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEyMTkxRDhCODkxNDBDQzdDNkIyQTVEM0NGMTQwMTE2
RjAyMzk3OTAeFw0yNDA0MDQwNzQ1NTBaFw0yNTA0MDMwNzUwNTBaMDMxMTAvBgNV
BAMTKEZBREE1NjhGODExNjY4ODYyQjBBOURBMzhGMTM4NTQ5MTM2QkI2NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1KUsVEqOF6LTlPgWiq83VHQm
5CNqeOF6+xOBOd7k3DHWUbMoB07KYOj/8KeryGFRik2T4PQtNdl0MHoryeZzh1OD
voDBsbBztrVsrPtGsAeF2koLcLkf/h1WfYC1nFl3eqfSdC20mHjqUFHV/+FCeeW8
UkO7xJjbXiOtGbp7grmbIaEblKnJ4Sf6mFp99dYw+w3lG4HM3cfZl6haLDa0ph1z
+fTBnvia+IBQtpAUaPImX5eRA3u3cHxtDelAfBtjjmgxajAu8Fs+E+wxpHWIALgq
WqZXOt7AhfGxZM2w5QmconKmp+lL3omfyWVbI/fhTVgzzsChEX25MYEeuqifAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU+tpWj4EWaIYrCp2jjxOFSRNrtkcwHwYDVR0j
BBgwFoAUgSGR2LiRQMx8aypdPPFAEW8COXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFN5aU1HeGdtMnZIenVLcVRIRkVpb1F5RlNIQVNlSmpyWWlzVGt6YWdI
RzUvMS84MTIxOTFEOEI4OTE0MENDN0M2QjJBNUQzQ0YxNDAxMTZGMDIzOTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxMjE5MUQ4Qjg5MTQwQ0M3
QzZCMkE1RDNDRjE0MDExNkYwMjM5NzkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhTeWlNR3hnbTJ2SHp1S3FUSEZFaW9ReUZTSEFTZUpqcllpc1RremFnSEc1LzEv
MzIzODMwMzQzYTMzMzA2MjM4M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzODMx
MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEMLgwDQYJKoZIhvcNAQELBQADggEBAIWQXQymTIMX
MFIvEQa+ZE2DDnRqlRJBC+TdJJl5Njk4T5QAnl+DCsimaJdiIb6muDGy+buxIHkd
W/76yB6uOokbIVXXhuKomNjvJV479piVdiBz7pOjtcvCNF+vx0D2XOWVmyvh42Ed
nYGQeCK3o/Xqnsvl4CACIJLTdkE76PUcKJO8lGNOZBO6z89P+d2AQRno54dprc4F
gTPJwybvIA0X65C/byF9PubZX15Mg1KScez8SkjyUdoRvnbpo7odxLyHJrnt4ow3
g5NW6kO4WxTzBj7thv1Fc5wWFRhxrVU75WjnOAu9SyetU8S3Ln5gfOhlJcLD+TrH
pnHwRgYCwPE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org