Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33342d3334203d3e20323637343536.roa
File:                     323830343a343163383a383030303a3a2f33342d3334203d3e20323637343536.roa (raw, json)
Hash identifier:          H5qc4vjhlB5SIxoanw9Lpv95DtPQQpK8V4/+L90nRw8=
Subject key identifier:   F5:AC:91:A8:20:54:AA:7B:4C:EA:74:64:C4:C5:37:80:21:9C:9A:32
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       7588FC3C87A4074834BB47CD59F890C3F8939078
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33342d3334203d3e20323637343536.roa
Signing time:             Thu 14 Nov 2024 02:55:24 +0000
ROA not before:           Thu 14 Nov 2024 02:50:24 +0000
ROA not after:            Thu 13 Nov 2025 02:55:24 +0000
asID:                     267456
IP address blocks:        2804:41c8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:88:fc:3c:87:a4:07:48:34:bb:47:cd:59:f8:90:c3:f8:93:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Nov 14 02:50:24 2024 GMT
            Not After : Nov 13 02:55:24 2025 GMT
        Subject: CN=F5AC91A82054AA7B4CEA7464C4C53780219C9A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:33:bd:73:b8:4f:d0:dd:7c:d2:5c:11:d4:
                    66:ff:97:90:36:d7:58:b5:fd:3b:72:bd:d8:7a:4b:
                    a3:e6:66:c2:22:dc:c2:8d:6a:51:fc:f4:fa:ca:c7:
                    b4:bb:85:4f:fa:a3:37:75:68:60:04:a3:2d:77:f6:
                    00:a6:a9:9e:8d:20:89:38:9b:42:17:86:41:8e:b7:
                    d1:1a:17:8f:9b:68:c8:3f:74:54:19:39:10:40:3c:
                    d9:a0:45:ac:6a:83:42:74:e3:4d:84:54:c5:f9:74:
                    f9:78:40:e3:0c:92:7c:32:09:c0:c6:a8:d2:4b:af:
                    1c:6b:48:06:43:92:d8:07:16:92:32:0a:89:2b:d5:
                    ab:c6:4f:e4:8b:7a:86:29:76:f1:da:bd:90:d7:37:
                    57:b0:01:81:08:e4:d4:31:2a:7a:79:c6:ed:7e:7b:
                    fe:fd:78:00:23:59:7e:9b:b6:d4:f8:a6:f1:82:b2:
                    a8:3e:17:58:ac:70:c5:b8:1d:b4:7e:cd:4b:5c:8c:
                    c5:4b:f5:27:02:b2:41:c6:75:c8:a4:da:cb:91:88:
                    d6:75:e5:c8:97:37:16:8c:83:fc:5f:49:1c:a8:e6:
                    59:43:85:6d:5f:ea:ce:70:5e:e9:af:b5:09:fe:1e:
                    9a:07:44:5d:6b:50:a4:42:13:a0:39:7a:e3:da:68:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:91:A8:20:54:AA:7B:4C:EA:74:64:C4:C5:37:80:21:9C:9A:32
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33342d3334203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:57:58:99:fd:91:82:b8:be:b2:1b:ca:33:14:bd:11:92:db:
         6c:96:2d:fa:6c:0a:bc:35:0c:b6:4f:07:c0:b7:6e:a7:80:b7:
         ce:cb:2a:ed:a8:53:a8:3b:8d:cc:7e:5e:80:eb:1c:43:ee:20:
         81:32:4a:88:52:e8:3a:3d:fe:42:68:53:7d:02:4a:08:a3:a3:
         02:ac:b5:ef:b7:c7:13:0a:2f:74:c7:76:2d:5e:f2:83:2b:c2:
         56:1d:4d:d4:7a:37:50:66:c7:b8:ae:f4:ee:92:27:19:72:5a:
         5e:ea:ae:55:45:88:d1:59:3a:d1:35:57:6b:65:e9:ea:0c:bb:
         f1:a0:4c:41:74:1f:1f:b4:5c:37:7a:75:9e:eb:b1:1a:ed:a2:
         cb:ac:39:de:f3:5f:69:45:3b:16:9b:f5:32:4e:7a:f1:c6:55:
         d6:49:af:24:ea:11:2e:0b:21:e5:c9:7f:09:e6:30:59:1c:48:
         49:f1:b2:13:51:32:ba:d5:c2:a0:f6:3f:5e:f5:a9:ee:92:02:
         2e:2d:49:52:12:7b:f8:00:97:a0:20:16:09:9c:2e:c3:24:88:
         01:d3:b9:2f:c5:5d:5b:92:26:ec:94:ce:62:86:3a:0b:59:2c:
         0c:9c:6b:af:83:8d:d1:ab:0b:c9:57:4d:9b:70:6a:4e:7a:b9:
         12:79:94:d3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdYj8PIekB0g0u0fNWfiQw/iTkHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFMTg0OENEQTU3MkIzN0ZDRjVEOUZDMkYzMjA3MkJB
QjkwNzJCMjAeFw0yNDExMTQwMjUwMjRaFw0yNTExMTMwMjU1MjRaMDMxMTAvBgNV
BAMTKEY1QUM5MUE4MjA1NEFBN0I0Q0VBNzQ2NEM0QzUzNzgwMjE5QzlBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WzO9c7hP0N180lwR1Gb/l5A2
11i1/Ttyvdh6S6PmZsIi3MKNalH89PrKx7S7hU/6ozd1aGAEoy139gCmqZ6NIIk4
m0IXhkGOt9EaF4+baMg/dFQZORBAPNmgRaxqg0J0402EVMX5dPl4QOMMknwyCcDG
qNJLrxxrSAZDktgHFpIyCokr1avGT+SLeoYpdvHavZDXN1ewAYEI5NQxKnp5xu1+
e/79eAAjWX6bttT4pvGCsqg+F1iscMW4HbR+zUtcjMVL9ScCskHGdcik2suRiNZ1
5ciXNxaMg/xfSRyo5llDhW1f6s5wXumvtQn+HpoHRF1rUKRCE6A5euPaaJC3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9ayRqCBUqntM6nRkxMU3gCGcmjIwHwYDVR0j
BBgwFoAUduGEjNpXKzf89dn8LzIHK6uQcrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXVCZGI1eDhFYWpRVDlMTmExeUd4MUpmNWszbjZ2emI1blBZOW93cDFz
ZUIvMC83NkUxODQ4Q0RBNTcyQjM3RkNGNUQ5RkMyRjMyMDcyQkFCOTA3MkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RTE4NDhDREE1NzJCMzdG
Q0Y1RDlGQzJGMzIwNzJCQUI5MDcyQjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1QmRiNXg4RWFqUVQ5TE5hMXlHeDFKZjVrM242dnpiNW5QWTlvd3Axc2VCLzAv
MzIzODMwMzQzYTM0MzE2MzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQciAMA0GCSqGSIb3DQEBCwUA
A4IBAQAVV1iZ/ZGCuL6yG8ozFL0Rkttsli36bAq8NQy2TwfAt26ngLfOyyrtqFOo
O43Mfl6A6xxD7iCBMkqIUug6Pf5CaFN9AkoIo6MCrLXvt8cTCi90x3YtXvKDK8JW
HU3UejdQZse4rvTukicZclpe6q5VRYjRWTrRNVdrZenqDLvxoExBdB8ftFw3enWe
67Ea7aLLrDne819pRTsWm/UyTnrxxlXWSa8k6hEuCyHlyX8J5jBZHEhJ8bITUTK6
1cKg9j9e9anukgIuLUlSEnv4AJegIBYJnC7DJIgB07kvxV1bkibslM5ihjoLWSwM
nGuvg43RqwvJV02bcGpOerkSeZTT
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:34 2024 by rpki-client on console-ams.rpki-client.org