Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
File:                     323830343a6162303a3a2f33322d313238203d3e203532393037.roa (raw, json)
Hash identifier:          Az++f7YZkH2ME1bCRTFXTZfamMnpKjGt3XvwJqtk+Xk=
Subject key identifier:   91:C4:E9:7B:C9:83:D5:3D:28:8C:CA:66:DA:22:9F:D8:FC:07:99:4D
Certificate issuer:       /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial:       287D960DBD925554131EBA516F2402E1697F9DD0
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
Signing time:             Thu 04 Apr 2024 03:07:16 +0000
ROA not before:           Thu 04 Apr 2024 03:02:16 +0000
ROA not after:            Thu 03 Apr 2025 03:07:16 +0000
asID:                     52907
IP address blocks:        2804:ab0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
                          rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:96:0d:bd:92:55:54:13:1e:ba:51:6f:24:02:e1:69:7f:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Validity
            Not Before: Apr  4 03:02:16 2024 GMT
            Not After : Apr  3 03:07:16 2025 GMT
        Subject: CN=91C4E97BC983D53D288CCA66DA229FD8FC07994D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:17:6c:49:df:2c:cb:b8:29:6b:0d:c3:b7:
                    89:cd:e4:36:bb:64:c0:39:08:9a:55:92:a0:61:c0:
                    87:1d:32:e4:a9:4b:67:13:25:6f:08:0e:e3:67:cb:
                    90:3f:14:b5:c3:0f:e8:e3:57:79:27:b6:65:7b:af:
                    a3:33:fe:76:10:92:6b:38:8a:72:7b:a1:62:7d:35:
                    7e:9a:e6:fc:84:92:64:51:09:39:13:4c:5b:d8:24:
                    7b:72:6e:41:08:1a:22:02:25:c9:94:ba:f6:67:8b:
                    46:16:70:b7:bd:32:5b:24:37:95:1a:06:72:38:32:
                    92:ce:72:2f:73:9d:9e:7c:c9:89:41:88:1e:a1:48:
                    ba:44:f1:da:f6:99:e0:79:e1:32:bc:d3:06:30:ce:
                    43:e6:a9:10:38:07:92:2a:86:e3:ee:7f:7c:09:46:
                    15:d0:23:c2:10:2a:79:24:4b:cf:56:99:e2:47:1b:
                    e2:a6:a3:9d:99:08:d8:4b:9e:32:1d:bd:34:08:a6:
                    be:cd:02:d7:42:69:4d:4a:a6:71:dd:5d:d1:c9:c4:
                    ba:6b:88:bb:66:b5:a5:29:51:42:87:fc:ba:56:27:
                    a1:96:ef:f7:32:8a:6f:d6:e7:75:fb:02:9b:81:f8:
                    3f:63:ba:f0:17:04:b0:d9:f7:6d:a3:78:de:f9:31:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:E9:7B:C9:83:D5:3D:28:8C:CA:66:DA:22:9F:D8:FC:07:99:4D
            X509v3 Authority Key Identifier:
                keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:69:36:12:69:45:14:d7:9c:e5:1e:72:06:6d:78:8b:5b:0f:
         ba:35:5d:dc:9b:3f:d9:93:21:39:0a:0d:70:a9:65:fc:e6:d0:
         5d:c0:ee:c7:b0:be:20:8d:be:7b:0a:c9:ae:7f:c2:19:e4:77:
         14:3d:d4:b6:4e:4e:02:b2:26:55:f4:e4:95:c8:2f:f2:19:e5:
         07:36:4b:a4:fd:21:ee:a2:c7:ff:a6:33:2c:2e:7b:cd:b6:cd:
         ba:72:6a:92:20:2a:27:f9:06:7a:0e:ff:15:a4:e6:31:6f:36:
         73:41:0e:9e:cf:d7:84:d9:83:f8:b1:4f:93:3e:82:21:ec:48:
         2c:0f:1d:b3:3b:88:f1:83:00:2c:5d:f2:73:aa:79:85:c7:b3:
         ef:bb:00:ed:04:9d:2c:d3:98:f7:0c:29:33:16:4e:42:9e:f6:
         62:bd:f0:1e:56:15:c4:8a:77:66:e1:7c:67:20:cb:3f:18:2b:
         c6:29:be:17:ba:2a:d5:75:f1:d9:d5:f0:48:2d:56:00:80:40:
         bb:ce:68:36:64:b4:b9:30:d3:1a:54:56:f0:1b:0e:9c:43:b9:
         86:25:73:81:24:62:97:67:e6:54:6b:de:f6:73:ec:13:0d:d5:
         a2:ed:b9:79:f2:9c:e0:ab:80:8f:e1:f6:93:f2:db:fd:fc:29:
         04:e7:bb:ce
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUKH2WDb2SVVQTHrpRbyQC4Wl/ndAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0N0QwQzFBODQ3MjVCQ0M4QTA1QjcyNUMyMjI5M0RB
QzQyMEM3OTAeFw0yNDA0MDQwMzAyMTZaFw0yNTA0MDMwMzA3MTZaMDMxMTAvBgNV
BAMTKDkxQzRFOTdCQzk4M0Q1M0QyODhDQ0E2NkRBMjI5RkQ4RkMwNzk5NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXhdsSd8sy7gpaw3Dt4nN5Da7
ZMA5CJpVkqBhwIcdMuSpS2cTJW8IDuNny5A/FLXDD+jjV3kntmV7r6Mz/nYQkms4
inJ7oWJ9NX6a5vyEkmRRCTkTTFvYJHtybkEIGiICJcmUuvZni0YWcLe9MlskN5Ua
BnI4MpLOci9znZ58yYlBiB6hSLpE8dr2meB54TK80wYwzkPmqRA4B5IqhuPuf3wJ
RhXQI8IQKnkkS89WmeJHG+Kmo52ZCNhLnjIdvTQIpr7NAtdCaU1KpnHdXdHJxLpr
iLtmtaUpUUKH/LpWJ6GW7/cyim/W53X7ApuB+D9juvAXBLDZ922jeN75MWFfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUkcTpe8mD1T0ojMpm2iKf2PwHmU0wHwYDVR0j
BBgwFoAUhUfQwahHJbzIoFtyXCIpPaxCDHkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUxuY1JDcmNTUHNMeVFwWE4ybThmQ2l2QndKelRKQ25VQUViRlpvZndY
Tm8vMS84NTQ3RDBDMUE4NDcyNUJDQzhBMDVCNzI1QzIyMjkzREFDNDIwQzc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDdEMEMxQTg0NzI1QkND
OEEwNUI3MjVDMjIyOTNEQUM0MjBDNzkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlMbmNSQ3JjU1BzTHlRcFhOMm04ZkNpdkJ3SnpUSkNuVUFFYkZab2Z3WE5vLzEv
MzIzODMwMzQzYTYxNjIzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM5
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECrAwDQYJKoZIhvcNAQELBQADggEBAAppNhJpRRTX
nOUecgZteItbD7o1XdybP9mTITkKDXCpZfzm0F3A7sewviCNvnsKya5/whnkdxQ9
1LZOTgKyJlX05JXIL/IZ5Qc2S6T9Ie6ix/+mMywue822zbpyapIgKif5BnoO/xWk
5jFvNnNBDp7P14TZg/ixT5M+giHsSCwPHbM7iPGDACxd8nOqeYXHs++7AO0EnSzT
mPcMKTMWTkKe9mK98B5WFcSKd2bhfGcgyz8YK8Ypvhe6KtV18dnV8EgtVgCAQLvO
aDZktLkw0xpUVvAbDpxDuYYlc4EkYpdn5lRr3vZz7BMN1aLtuXnynOCrgI/h9pPy
2/38KQTnu84=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org