Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa
File:                     323830343a353936633a3a2f33322d3438203d3e20323638373031.roa (raw, json)
Hash identifier:          mBZexhhUKk9KLg+hc0rXaJFvnoP4ESkWpRN4sU3SubI=
Subject key identifier:   DD:49:2E:7F:D9:A2:73:76:A8:02:53:9C:3B:7C:73:D9:F3:74:E5:D5
Certificate issuer:       /CN=7DC1C2AA899276F04E4330B1E4471D510486417F
Certificate serial:       30F6F4DAB05867A75A99684A696A5204D66B0398
Authority key identifier: 7D:C1:C2:AA:89:92:76:F0:4E:43:30:B1:E4:47:1D:51:04:86:41:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa
Signing time:             Wed 03 Apr 2024 23:42:29 +0000
ROA not before:           Wed 03 Apr 2024 23:37:29 +0000
ROA not after:            Wed 02 Apr 2025 23:42:29 +0000
asID:                     268701
IP address blocks:        2804:596c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.crl
                          rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:f4:da:b0:58:67:a7:5a:99:68:4a:69:6a:52:04:d6:6b:03:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DC1C2AA899276F04E4330B1E4471D510486417F
        Validity
            Not Before: Apr  3 23:37:29 2024 GMT
            Not After : Apr  2 23:42:29 2025 GMT
        Subject: CN=DD492E7FD9A27376A802539C3B7C73D9F374E5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:ac:16:8f:91:3e:73:3e:6c:8f:1e:73:28:
                    d5:71:6e:8f:16:38:57:c6:e7:7e:b5:d9:53:fb:7c:
                    ee:eb:f5:a3:79:5f:b7:3c:63:ca:fa:bb:67:a2:48:
                    0e:5b:b0:b0:8b:52:ba:58:17:a6:b1:b2:61:a5:97:
                    3a:43:85:f8:a2:77:41:c9:ea:47:52:d0:80:13:b6:
                    e9:6b:ee:21:e8:ea:c9:04:95:1c:37:58:54:aa:6b:
                    d7:22:79:15:29:10:77:8e:4d:c3:0f:2c:89:63:71:
                    b1:11:f3:68:55:08:bb:35:d9:0b:b7:9c:e4:b9:67:
                    27:aa:a0:c3:a2:f5:e8:45:1c:22:f6:2f:4a:01:b0:
                    9c:ab:3d:7c:44:35:2b:a2:f8:d1:b4:ac:34:1e:41:
                    da:cc:2e:2b:59:a0:61:28:c5:4c:8f:54:dd:b0:46:
                    84:59:f6:ca:a5:13:86:00:c4:14:a6:d0:7a:ad:64:
                    ee:cb:10:f7:17:ef:a4:7e:fc:dd:31:55:4a:bf:ca:
                    66:7f:9d:f8:8a:bd:83:18:29:32:6c:d5:2d:e9:60:
                    b3:92:c1:0f:b7:7b:a4:96:77:31:6a:ff:23:5c:fc:
                    05:92:9e:29:64:0a:dd:6f:9c:08:1c:a6:f1:25:e1:
                    e7:29:4f:11:97:32:02:d1:3c:22:14:b1:9a:66:d7:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:2E:7F:D9:A2:73:76:A8:02:53:9C:3B:7C:73:D9:F3:74:E5:D5
            X509v3 Authority Key Identifier:
                keyid:7D:C1:C2:AA:89:92:76:F0:4E:43:30:B1:E4:47:1D:51:04:86:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:596c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:f1:16:26:d1:66:e3:05:85:94:a0:ef:af:b7:ce:64:30:ad:
         4b:db:6a:f5:a4:ef:8e:45:a1:25:1d:9e:0f:d3:7c:35:be:a8:
         50:57:c0:13:8c:00:2c:cb:b5:fc:10:9d:1a:40:f9:90:76:63:
         d0:97:2b:f5:6f:20:df:45:71:12:98:77:5e:d0:58:af:4a:5c:
         88:5d:3f:3c:35:13:82:2f:03:b7:c7:e8:fd:36:f4:bf:5a:24:
         f2:c0:15:48:37:12:97:49:4b:56:e3:3f:5a:f5:6b:91:17:73:
         e8:b7:f7:88:94:5d:53:fe:e1:31:8c:a1:c4:de:4a:5b:34:90:
         d8:15:ff:1c:34:84:55:4e:d1:f1:e2:94:0a:02:36:ae:06:44:
         a9:e3:e5:fd:84:f1:76:8f:0e:76:c8:f2:73:85:b1:9b:e3:60:
         e4:86:d7:e1:42:59:65:91:e4:24:a1:98:2e:d7:db:7e:6d:72:
         16:c5:f5:b3:0d:15:e8:94:d1:38:1f:28:ed:f0:a2:67:8a:2c:
         29:fd:1a:28:15:27:0f:73:dd:f5:05:4e:b2:39:06:23:22:12:
         49:dd:0d:16:66:a2:52:93:fc:ea:cb:23:cc:c7:3e:d4:c0:c6:
         70:53:92:70:9e:95:3a:a4:fe:10:f1:9a:13:8b:f1:ab:fe:5c:
         2e:1d:54:45
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMPb02rBYZ6damWhKaWpSBNZrA5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RDMUMyQUE4OTkyNzZGMDRFNDMzMEIxRTQ0NzFENTEw
NDg2NDE3RjAeFw0yNDA0MDMyMzM3MjlaFw0yNTA0MDIyMzQyMjlaMDMxMTAvBgNV
BAMTKERENDkyRTdGRDlBMjczNzZBODAyNTM5QzNCN0M3M0Q5RjM3NEU1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQKwWj5E+cz5sjx5zKNVxbo8W
OFfG53612VP7fO7r9aN5X7c8Y8r6u2eiSA5bsLCLUrpYF6axsmGllzpDhfiid0HJ
6kdS0IATtulr7iHo6skElRw3WFSqa9cieRUpEHeOTcMPLIljcbER82hVCLs12Qu3
nOS5ZyeqoMOi9ehFHCL2L0oBsJyrPXxENSui+NG0rDQeQdrMLitZoGEoxUyPVN2w
RoRZ9sqlE4YAxBSm0HqtZO7LEPcX76R+/N0xVUq/ymZ/nfiKvYMYKTJs1S3pYLOS
wQ+3e6SWdzFq/yNc/AWSnilkCt1vnAgcpvEl4ecpTxGXMgLRPCIUsZpm1yoVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3Ukuf9mic3aoAlOcO3xz2fN05dUwHwYDVR0j
BBgwFoAUfcHCqomSdvBOQzCx5EcdUQSGQX8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHB2YTR0UXpIMzZiTFFtYXVzYmd2dk1vVm5rS1FHc2R0QlB4dVBnVWFk
R0YvMS83REMxQzJBQTg5OTI3NkYwNEU0MzMwQjFFNDQ3MUQ1MTA0ODY0MTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEQzFDMkFBODk5Mjc2RjA0
RTQzMzBCMUU0NDcxRDUxMDQ4NjQxN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwdmE0dFF6SDM2YkxRbWF1c2JndnZNb1Zua0tRR3NkdEJQeHVQZ1VhZEdGLzEv
MzIzODMwMzQzYTM1MzkzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARZbDANBgkqhkiG9w0BAQsFAAOCAQEAtPEWJtFm
4wWFlKDvr7fOZDCtS9tq9aTvjkWhJR2eD9N8Nb6oUFfAE4wALMu1/BCdGkD5kHZj
0Jcr9W8g30VxEph3XtBYr0pciF0/PDUTgi8Dt8fo/Tb0v1ok8sAVSDcSl0lLVuM/
WvVrkRdz6Lf3iJRdU/7hMYyhxN5KWzSQ2BX/HDSEVU7R8eKUCgI2rgZEqePl/YTx
do8Odsjyc4Wxm+Ng5IbX4UJZZZHkJKGYLtfbfm1yFsX1sw0V6JTROB8o7fCiZ4os
Kf0aKBUnD3Pd9QVOsjkGIyISSd0NFmaiUpP86ssjzMc+1MDGcFOScJ6VOqT+EPGa
E4vxq/5cLh1URQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:22 2024 by rpki-client on console-fra.rpki-client.org