Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33322d3332203d3e20323639353134.roa
File:                     323830343a363563383a3a2f33322d3332203d3e20323639353134.roa (raw, json)
Hash identifier:          sfwjMnqtO+nf5RdOADFgNJB2tLV9rzX5Hb3CLncoa2k=
Subject key identifier:   C8:4E:F0:90:DF:EC:26:D0:FB:E6:3F:16:F3:F6:E5:CB:6A:0A:A0:40
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       30599FD7853A96D8ADEB1E8E13A7D410FB0F8882
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33322d3332203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:37 +0000
ROA not before:           Fri 08 Nov 2024 01:17:37 +0000
ROA not after:            Fri 07 Nov 2025 01:22:37 +0000
asID:                     269514
IP address blocks:        2804:65c8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:59:9f:d7:85:3a:96:d8:ad:eb:1e:8e:13:a7:d4:10:fb:0f:88:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:37 2024 GMT
            Not After : Nov  7 01:22:37 2025 GMT
        Subject: CN=C84EF090DFEC26D0FBE63F16F3F6E5CB6A0AA040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:93:03:8b:9a:89:31:9e:48:b6:5c:f9:a3:
                    56:51:66:67:c2:2d:59:15:d7:3e:7e:de:b8:e5:57:
                    9b:ce:3e:c4:34:bb:de:27:ab:0b:dd:f9:3e:0c:3c:
                    33:9b:04:1a:fd:5e:f1:d5:7d:84:05:db:7c:10:95:
                    4a:80:63:bc:bd:ff:66:71:26:36:e5:24:f7:f1:63:
                    54:7c:95:bb:13:e4:c2:43:f2:8f:2c:73:e1:6d:57:
                    13:03:78:6c:32:75:b4:67:bc:97:1e:83:fb:39:93:
                    f8:1c:ec:c1:36:65:b9:29:ac:c5:26:27:b0:e2:9d:
                    9c:9b:bb:61:95:0a:b2:ea:76:46:cf:c6:f9:e2:7e:
                    08:66:01:0d:88:1f:27:10:d1:c0:7c:1c:2a:9f:35:
                    86:17:e1:82:d1:6a:c3:7b:48:0a:1b:87:b5:0c:fd:
                    d4:3d:47:9c:5b:4e:84:7c:86:12:18:57:ec:ae:12:
                    55:d3:49:47:22:ba:b8:e8:7a:ee:11:b2:b3:91:17:
                    33:28:55:6e:ea:b5:77:6c:e7:f9:fc:ab:36:b9:74:
                    ba:f9:c6:bc:90:90:cc:dc:bc:10:3e:78:a6:b8:f6:
                    0e:72:71:3f:64:1f:29:52:19:58:12:31:94:c4:f2:
                    a1:83:21:0a:a8:dd:4a:b2:a7:6c:1c:af:d6:ba:db:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:F0:90:DF:EC:26:D0:FB:E6:3F:16:F3:F6:E5:CB:6A:0A:A0:40
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33322d3332203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:8e:16:08:f9:8c:14:e0:97:7f:ac:08:e3:01:9c:ea:ae:
         23:b8:6c:52:4a:cd:e4:8e:17:76:f8:6f:7d:3e:ac:22:86:79:
         fb:77:1f:bb:0b:fe:d9:12:9b:b1:cd:91:90:a8:1e:ee:0f:ca:
         01:ef:ae:56:39:69:08:56:6e:54:49:18:ff:23:77:5c:81:92:
         ca:6c:17:a3:25:64:8e:11:2a:78:e9:c1:a8:6a:ef:21:e4:aa:
         68:f5:67:15:ea:03:71:3c:eb:75:e5:14:d9:93:88:2e:e6:4c:
         53:32:3e:14:ff:23:af:45:45:32:09:20:bf:ac:24:6f:65:f7:
         a3:66:43:70:41:4c:7f:6b:07:ef:a0:d2:f8:66:5c:be:f5:53:
         d4:4f:50:3d:cb:a0:24:de:57:19:6b:fd:81:70:d1:20:8c:95:
         5c:85:b7:f4:a8:32:8d:26:ce:91:9f:e8:8a:ce:99:14:16:58:
         01:13:ed:e3:85:9b:7f:55:54:be:cb:ef:d5:c8:3a:0e:49:52:
         c6:ff:79:5f:26:c5:d2:21:75:4a:84:86:a8:9f:ef:73:60:db:
         4a:86:27:bb:8a:c1:1d:11:0c:2a:f1:1b:52:49:11:58:9a:54:
         fd:0b:1b:49:c8:6b:c4:a2:d3:87:45:ff:3f:7c:49:11:73:f7:
         26:7c:48:60
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMFmf14U6ltit6x6OE6fUEPsPiIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVBODVGRkMyRTYwQzMxMTdCQThCOUVDQzVEQ0RFRTg5
MTM3REY5NjAeFw0yNDExMDgwMTE3MzdaFw0yNTExMDcwMTIyMzdaMDMxMTAvBgNV
BAMTKEM4NEVGMDkwREZFQzI2RDBGQkU2M0YxNkYzRjZFNUNCNkEwQUEwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFJMDi5qJMZ5Itlz5o1ZRZmfC
LVkV1z5+3rjlV5vOPsQ0u94nqwvd+T4MPDObBBr9XvHVfYQF23wQlUqAY7y9/2Zx
JjblJPfxY1R8lbsT5MJD8o8sc+FtVxMDeGwydbRnvJceg/s5k/gc7ME2ZbkprMUm
J7DinZybu2GVCrLqdkbPxvnifghmAQ2IHycQ0cB8HCqfNYYX4YLRasN7SAobh7UM
/dQ9R5xbToR8hhIYV+yuElXTSUciurjoeu4RsrORFzMoVW7qtXds5/n8qza5dLr5
xryQkMzcvBA+eKa49g5ycT9kHylSGVgSMZTE8qGDIQqo3Uqyp2wcr9a620GLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyE7wkN/sJtD75j8W8/bly2oKoEAwHwYDVR0j
BBgwFoAUBahf/C5gwxF7qLnsxdze6JE335YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJGZkV0TlBoanNyZ29KQUFwNzRBejU5QkZ2TWJHYWE4enl1RTRjbjRp
M1ovMC8wNUE4NUZGQzJFNjBDMzExN0JBOEI5RUNDNURDREVFODkxMzdERjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1QTg1RkZDMkU2MEMzMTE3
QkE4QjlFQ0M1RENERUU4OTEzN0RGOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyRmZFdE5QaGpzcmdvSkFBcDc0QXo1OUJGdk1iR2FhOHp5dUU0Y240aTNaLzAv
MzIzODMwMzQzYTM2MzU2MzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARlyDANBgkqhkiG9w0BAQsFAAOCAQEACNaOFgj5
jBTgl3+sCOMBnOquI7hsUkrN5I4XdvhvfT6sIoZ5+3cfuwv+2RKbsc2RkKge7g/K
Ae+uVjlpCFZuVEkY/yN3XIGSymwXoyVkjhEqeOnBqGrvIeSqaPVnFeoDcTzrdeUU
2ZOILuZMUzI+FP8jr0VFMgkgv6wkb2X3o2ZDcEFMf2sH76DS+GZcvvVT1E9QPcug
JN5XGWv9gXDRIIyVXIW39KgyjSbOkZ/ois6ZFBZYARPt44Wbf1VUvsvv1cg6DklS
xv95XybF0iF1SoSGqJ/vc2DbSoYnu4rBHREMKvEbUkkRWJpU/QsbSchrxKLTh0X/
P3xJEXP3JnxIYA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:15 2024 by rpki-client on console-ams.rpki-client.org