Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f34302d3430203d3e20323633333437.roa
File:                     323830343a313462633a3a2f34302d3430203d3e20323633333437.roa (raw, json)
Hash identifier:          F/bG4CKBDkOAm/Nhr6QBrsYUrjrvg092CkdoIppiRc8=
Subject key identifier:   56:72:C7:EC:C9:2E:0F:FB:0F:93:26:5D:35:E7:23:50:89:3C:0C:0E
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       1EE0DEAD2906A5BAFA57F5629416BB59B8B0579F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f34302d3430203d3e20323633333437.roa
Signing time:             Sat 09 Nov 2024 13:42:28 +0000
ROA not before:           Sat 09 Nov 2024 13:37:28 +0000
ROA not after:            Sat 08 Nov 2025 13:42:28 +0000
asID:                     263347
IP address blocks:        2804:14bc::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e0:de:ad:29:06:a5:ba:fa:57:f5:62:94:16:bb:59:b8:b0:57:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  9 13:37:28 2024 GMT
            Not After : Nov  8 13:42:28 2025 GMT
        Subject: CN=5672C7ECC92E0FFB0F93265D35E72350893C0C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:50:68:e4:22:d6:fd:6b:fc:bc:01:dd:a9:
                    58:f2:7e:58:1e:f1:64:f5:ab:e8:09:98:15:92:b2:
                    fb:00:12:79:78:e8:ac:f6:5b:c5:0c:79:32:0e:2e:
                    29:95:10:72:0d:ba:e3:d4:91:e4:6d:42:f3:7a:74:
                    40:40:8f:d7:81:fd:29:6a:97:56:3f:6e:5f:9b:ec:
                    3a:66:b3:c9:01:1c:0c:e5:0f:db:ec:b4:27:6b:b3:
                    f6:e0:3e:7a:39:f1:25:c6:f9:c4:4a:a7:af:28:ed:
                    39:5c:1c:63:0c:52:77:f9:0d:c9:3d:67:bc:e4:e0:
                    08:3e:4d:8e:f4:1f:4f:b0:2d:af:98:79:4e:1e:a6:
                    ea:92:5f:81:09:72:4e:e9:18:78:ca:55:f8:73:5b:
                    f3:19:8d:f0:f9:0e:d7:bb:94:d3:dd:ed:54:c5:58:
                    c5:03:fb:57:31:77:e9:55:50:e1:06:3f:bc:c0:3a:
                    ee:2b:67:0f:56:e3:1b:b9:d9:70:f4:c9:b2:1c:41:
                    68:30:26:d0:e1:03:bd:f2:f4:94:b6:4c:62:dd:84:
                    6c:82:e0:25:31:98:56:4b:f8:a4:2c:b3:61:a9:b3:
                    ad:6e:22:c5:0f:c2:4f:df:b0:8b:a4:17:28:5e:dc:
                    0e:45:72:49:8a:f3:c5:f1:11:f7:a7:31:aa:3c:f8:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:C7:EC:C9:2E:0F:FB:0F:93:26:5D:35:E7:23:50:89:3C:0C:0E
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f34302d3430203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:b0:ae:e1:a2:da:f7:de:38:a1:51:5d:4b:8c:41:cc:e2:de:
         99:9c:69:37:3a:24:67:fc:25:16:38:c5:66:79:7f:9e:b4:3e:
         7d:64:0d:1c:ef:00:af:ce:fc:b9:6c:7f:c3:a4:4e:e1:53:50:
         e9:07:2b:a9:81:69:4a:c3:dc:27:a8:d8:47:23:e4:c3:0d:c0:
         cc:6c:61:48:03:4f:04:40:2e:69:28:36:3a:0d:0b:d3:70:e4:
         69:bf:ed:4f:1f:19:c0:e3:66:d8:fd:59:33:f2:5d:e9:50:16:
         08:b1:de:2b:9a:e6:a1:c5:23:f6:15:a8:2d:54:b6:d1:69:58:
         8e:71:3a:d7:5f:36:76:21:53:fb:de:d9:6f:e1:8d:f8:87:48:
         68:51:a8:68:d7:f8:28:92:c7:60:b8:4e:2b:f2:53:59:46:15:
         33:6c:41:60:fe:37:f6:fe:bc:2b:b4:32:ee:b1:5b:3f:91:36:
         b7:3c:f6:3b:3c:41:5e:b7:02:af:20:4a:b8:16:5c:b8:a0:b7:
         0f:14:75:59:23:d8:ed:26:6c:0c:1e:03:26:38:98:59:a9:71:
         ae:3e:e8:4b:f6:7c:40:fa:ea:33:bd:2b:b6:a2:86:12:f5:69:
         c6:5c:5b:63:7c:e2:e3:91:e4:d3:fe:ac:02:49:9e:2c:a9:37:
         61:04:67:33
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHuDerSkGpbr6V/VilBa7WbiwV58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDExMDkxMzM3MjhaFw0yNTExMDgxMzQyMjhaMDMxMTAvBgNV
BAMTKDU2NzJDN0VDQzkyRTBGRkIwRjkzMjY1RDM1RTcyMzUwODkzQzBDMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIulBo5CLW/Wv8vAHdqVjyflge
8WT1q+gJmBWSsvsAEnl46Kz2W8UMeTIOLimVEHINuuPUkeRtQvN6dEBAj9eB/Slq
l1Y/bl+b7Dpms8kBHAzlD9vstCdrs/bgPno58SXG+cRKp68o7TlcHGMMUnf5Dck9
Z7zk4Ag+TY70H0+wLa+YeU4epuqSX4EJck7pGHjKVfhzW/MZjfD5Dte7lNPd7VTF
WMUD+1cxd+lVUOEGP7zAOu4rZw9W4xu52XD0ybIcQWgwJtDhA73y9JS2TGLdhGyC
4CUxmFZL+KQss2Gps61uIsUPwk/fsIukFyhe3A5FckmK88XxEfenMao8+Di3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVnLH7MkuD/sPkyZdNecjUIk8DA4wHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzIzODMwMzQzYTMxMzQ2MjYzM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYAKAQUvAAwDQYJKoZIhvcNAQELBQADggEBAD2wruGi
2vfeOKFRXUuMQczi3pmcaTc6JGf8JRY4xWZ5f560Pn1kDRzvAK/O/Llsf8OkTuFT
UOkHK6mBaUrD3Ceo2Ecj5MMNwMxsYUgDTwRALmkoNjoNC9Nw5Gm/7U8fGcDjZtj9
WTPyXelQFgix3iua5qHFI/YVqC1UttFpWI5xOtdfNnYhU/ve2W/hjfiHSGhRqGjX
+CiSx2C4TivyU1lGFTNsQWD+N/b+vCu0Mu6xWz+RNrc89js8QV63Aq8gSrgWXLig
tw8UdVkj2O0mbAweAyY4mFmpca4+6Ev2fED66jO9K7aihhL1acZcW2N84uOR5NP+
rAJJniypN2EEZzM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org