Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/323830343a336561633a3a2f33322d3336203d3e20323636363134.roa
File:                     323830343a336561633a3a2f33322d3336203d3e20323636363134.roa (raw, json)
Hash identifier:          A4ecR9vAgS5CiKSAYwfCotm8CVJBNgZvk5nFjxTh6Bs=
Subject key identifier:   0D:52:7F:44:37:38:A7:12:EA:74:CE:B4:A0:FF:54:CE:F1:78:B0:E0
Certificate issuer:       /CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
Certificate serial:       137E3ABB0ACCB46D19CA34763A4A127FC58F4A06
Authority key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/323830343a336561633a3a2f33322d3336203d3e20323636363134.roa
Signing time:             Thu 31 Oct 2024 20:40:36 +0000
ROA not before:           Thu 31 Oct 2024 20:35:36 +0000
ROA not after:            Thu 30 Oct 2025 20:40:36 +0000
asID:                     266614
IP address blocks:        2804:3eac::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl
                          rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7e:3a:bb:0a:cc:b4:6d:19:ca:34:76:3a:4a:12:7f:c5:8f:4a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
        Validity
            Not Before: Oct 31 20:35:36 2024 GMT
            Not After : Oct 30 20:40:36 2025 GMT
        Subject: CN=0D527F443738A712EA74CEB4A0FF54CEF178B0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:82:21:dd:90:f9:39:8c:ec:3b:39:5a:ba:40:
                    00:6e:ae:88:1b:63:0d:77:35:25:7d:ea:92:4f:d9:
                    55:4b:09:49:4d:b1:6d:ba:e4:8d:2d:b0:86:04:a3:
                    e5:c2:30:dc:f6:fb:f0:fb:15:41:73:66:9d:0d:fc:
                    f8:e1:91:d9:69:65:bc:70:12:90:43:0f:e9:b8:2b:
                    a9:f5:eb:2e:5b:a0:56:c7:cf:96:bb:ed:8b:c5:98:
                    41:f3:75:7e:2d:76:a6:6d:f1:db:5d:3c:ff:a3:23:
                    01:92:f0:19:12:61:ac:56:7f:28:fa:b5:6e:54:8c:
                    29:04:7f:b0:16:d5:c2:b1:39:b6:49:e6:49:48:8f:
                    7f:62:99:ad:e1:5e:87:24:14:cd:7c:fc:9b:94:83:
                    39:52:a4:67:50:22:e2:1d:99:58:25:8d:2c:65:65:
                    b8:64:e6:56:1e:32:28:90:37:d0:60:de:a2:f5:2a:
                    ec:f4:e6:6f:66:25:11:6b:27:61:a5:0f:d0:8d:db:
                    b5:37:ff:7b:44:e6:5f:7e:9d:7b:08:20:82:4f:18:
                    16:40:39:8f:a5:ed:f7:fe:df:55:e7:b0:4d:0c:84:
                    44:72:43:4c:b8:69:ec:54:52:24:3b:36:5d:e3:d4:
                    9f:de:87:77:db:b9:b5:24:90:3b:72:f4:ee:f8:ea:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:7F:44:37:38:A7:12:EA:74:CE:B4:A0:FF:54:CE:F1:78:B0:E0
            X509v3 Authority Key Identifier:
                keyid:C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/323830343a336561633a3a2f33322d3336203d3e20323636363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3eac::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:e5:2f:6c:0b:74:3d:21:fd:0e:2f:57:b4:39:86:b6:2f:5e:
         d2:14:1b:f5:b6:a0:e0:41:f5:09:72:6d:23:2d:de:d0:83:c7:
         55:93:c2:f1:8e:af:71:03:3a:0b:49:ec:73:03:30:94:3a:17:
         83:df:83:3e:f4:f5:ec:a4:a8:82:42:c1:ca:9c:0c:8f:4e:a2:
         11:8e:78:3d:cf:f8:9b:5a:6e:e6:4e:4e:9b:94:eb:35:c5:a4:
         1e:01:d6:d3:21:ef:a5:bc:ff:8f:10:0b:fb:6d:5d:39:82:82:
         b3:30:40:5d:37:89:e0:9f:1c:a4:71:37:99:7e:2a:94:d5:e1:
         2e:db:88:5f:51:10:ac:45:98:4e:de:93:71:98:0e:17:fa:22:
         b4:4c:ca:f0:9e:10:59:75:68:ee:8d:31:dd:68:4a:22:3e:69:
         d3:2f:a7:de:eb:d7:bf:81:ca:00:7d:05:f8:85:21:5f:b0:dd:
         b6:44:3c:18:1b:8d:8e:aa:b9:30:a1:f7:bb:2c:ef:5c:c0:aa:
         b2:90:91:8a:5f:0d:a8:03:83:6f:b1:76:39:46:84:12:95:22:
         d7:56:35:23:3c:9d:35:64:64:21:93:1a:1e:42:80:38:12:bc:
         39:fe:26:47:74:53:70:10:e0:6a:36:32:42:9b:c7:ed:16:bd:
         97:87:fb:bb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUE346uwrMtG0ZyjR2OkoSf8WPSgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdEOEY0QTVFQ0ZFNUIyNTUzRjZBQUYyQTEwNEREQzk3
RjIwNTQ5ODAeFw0yNDEwMzEyMDM1MzZaFw0yNTEwMzAyMDQwMzZaMDMxMTAvBgNV
BAMTKDBENTI3RjQ0MzczOEE3MTJFQTc0Q0VCNEEwRkY1NENFRjE3OEIwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBgiHdkPk5jOw7OVq6QABurogb
Yw13NSV96pJP2VVLCUlNsW265I0tsIYEo+XCMNz2+/D7FUFzZp0N/PjhkdlpZbxw
EpBDD+m4K6n16y5boFbHz5a77YvFmEHzdX4tdqZt8dtdPP+jIwGS8BkSYaxWfyj6
tW5UjCkEf7AW1cKxObZJ5klIj39ima3hXockFM18/JuUgzlSpGdQIuIdmVgljSxl
Zbhk5lYeMiiQN9Bg3qL1Kuz05m9mJRFrJ2GlD9CN27U3/3tE5l9+nXsIIIJPGBZA
OY+l7ff+31XnsE0MhERyQ0y4aexUUiQ7Nl3j1J/eh3fbubUkkDty9O746rQbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDVJ/RDc4pxLqdM60oP9UzvF4sOAwHwYDVR0j
BBgwFoAUx9j0pez+WyVT9qryoQTdyX8gVJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtu
MlkvMC9DN0Q4RjRBNUVDRkU1QjI1NTNGNkFBRjJBMTA0RERDOTdGMjA1NDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3RDhGNEE1RUNGRTVCMjU1
M0Y2QUFGMkExMDREREM5N0YyMDU0OTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhjWmljU2dpdnA0UlZab1ZvclRTTTFtZXJuS3JZeDFZMThReVo5UnBLbjJZLzAv
MzIzODMwMzQzYTMzNjU2MTYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM2
MzYzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+rDANBgkqhkiG9w0BAQsFAAOCAQEAV+UvbAt0
PSH9Di9XtDmGti9e0hQb9bag4EH1CXJtIy3e0IPHVZPC8Y6vcQM6C0nscwMwlDoX
g9+DPvT17KSogkLBypwMj06iEY54Pc/4m1pu5k5Om5TrNcWkHgHW0yHvpbz/jxAL
+21dOYKCszBAXTeJ4J8cpHE3mX4qlNXhLtuIX1EQrEWYTt6TcZgOF/oitEzK8J4Q
WXVo7o0x3WhKIj5p0y+n3uvXv4HKAH0F+IUhX7DdtkQ8GBuNjqq5MKH3uyzvXMCq
spCRil8NqAODb7F2OUaEEpUi11Y1IzydNWRkIZMaHkKAOBK8Of4mR3RTcBDgajYy
QpvH7Ra9l4f7uw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org