Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33332d3333203d3e20323632383237.roa
File:                     323830343a6363633a3a2f33332d3333203d3e20323632383237.roa (raw, json)
Hash identifier:          2WaQ0nihX3q635WH4AirqWZ1VhfMpkyz1k8wx0XGLUY=
Subject key identifier:   80:BA:B1:60:BE:FB:06:1D:75:26:CE:E3:9E:13:26:0D:77:A0:73:A6
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       34D429B289C3CA8C69AACB4C582CF2DAB4F6485F
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33332d3333203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:18 +0000
ROA not before:           Fri 23 Aug 2024 19:56:18 +0000
ROA not after:            Fri 22 Aug 2025 20:01:18 +0000
asID:                     262827
IP address blocks:        2804:ccc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d4:29:b2:89:c3:ca:8c:69:aa:cb:4c:58:2c:f2:da:b4:f6:48:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:18 2024 GMT
            Not After : Aug 22 20:01:18 2025 GMT
        Subject: CN=80BAB160BEFB061D7526CEE39E13260D77A073A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:5e:61:41:b5:02:1c:ed:ca:07:34:ad:93:
                    35:d3:81:6b:1c:0a:8b:7e:fb:76:7c:52:79:a5:af:
                    78:35:2a:5c:bd:a7:00:8c:1c:0b:37:59:cd:89:20:
                    6d:fe:61:98:4e:49:31:0e:99:7b:e1:5e:f3:cc:9f:
                    fe:56:7a:0b:78:b1:c7:93:0c:c6:49:4d:3e:ec:02:
                    90:6e:9f:54:84:16:dc:ca:a4:55:3d:7b:1d:f6:c0:
                    be:da:37:64:47:e3:98:75:89:8f:0e:90:81:98:91:
                    2b:91:90:0e:85:d9:37:9d:fa:93:27:c9:e1:ff:fb:
                    9d:b5:76:07:10:fc:1d:06:41:dd:a8:ce:2e:b0:ab:
                    2f:c6:d2:17:67:3a:42:9f:c4:f3:51:ee:a7:ab:ce:
                    50:32:af:61:5e:83:aa:4d:ab:4e:ef:17:67:b9:3d:
                    9f:45:5e:d8:57:b1:38:4d:80:4d:01:5c:c8:98:cb:
                    b8:36:50:4a:c9:bd:28:a1:57:89:cc:ff:1a:06:eb:
                    81:03:86:5d:6d:81:ac:34:7a:f3:94:f9:a9:24:6f:
                    ef:79:24:49:a2:8a:67:08:cd:b7:3d:a5:be:92:36:
                    b6:0c:71:3b:9b:02:27:86:ee:0d:b5:2d:16:34:7e:
                    ca:cc:64:2d:46:8a:6a:b0:63:53:4d:99:cc:5f:18:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BA:B1:60:BE:FB:06:1D:75:26:CE:E3:9E:13:26:0D:77:A0:73:A6
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33332d3333203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:6a:88:0e:7d:31:64:05:4c:18:89:ad:a6:9f:10:8f:35:
         6d:4b:03:f2:48:8a:55:22:62:b0:74:b7:9f:30:75:e1:fa:4b:
         61:7c:58:5c:75:7f:b7:26:a9:07:47:e9:b2:4f:cd:ad:20:a2:
         a3:b7:0d:59:85:41:b2:f4:8d:6a:d3:3c:79:47:99:68:50:f3:
         08:ba:62:ad:35:9a:80:f1:c3:a0:15:d6:ca:9c:80:d9:c2:d4:
         c6:87:71:51:dd:3f:3b:79:7f:a2:5d:4b:85:7f:d0:d9:a1:dc:
         ac:59:84:d9:ea:e0:17:7c:8e:be:98:1e:6b:5f:9e:bc:95:9f:
         ff:aa:9f:fa:9d:34:02:9e:11:a0:82:78:2f:35:b4:cd:fd:ff:
         ea:93:26:31:3c:a6:01:2d:fe:19:0e:6b:64:9b:a8:67:ec:cd:
         56:0c:a8:0f:3e:c6:11:6f:a6:64:de:21:cd:0a:77:30:29:6c:
         ea:ec:58:b7:09:8d:27:f8:d5:c6:c8:b1:7c:33:2c:b3:08:72:
         4c:5c:51:0f:4c:53:43:45:6d:e9:67:54:65:80:5c:a3:6c:f3:
         e8:ec:b4:d2:ae:32:15:34:f9:fe:78:96:cf:6e:16:75:55:74:
         af:a1:a1:2b:33:1c:07:70:bc:59:3e:31:04:e6:34:79:2c:57:
         a8:df:34:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNNQpsonDyoxpqstMWCzy2rT2SF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJEM0ZFNkU5MDg0OTA3RThBQzVFNzRBRTNERDVEMURF
N0ZGRTRFQjAeFw0yNDA4MjMxOTU2MThaFw0yNTA4MjIyMDAxMThaMDMxMTAvBgNV
BAMTKDgwQkFCMTYwQkVGQjA2MUQ3NTI2Q0VFMzlFMTMyNjBENzdBMDczQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsV5hQbUCHO3KBzStkzXTgWsc
Cot++3Z8Unmlr3g1Kly9pwCMHAs3Wc2JIG3+YZhOSTEOmXvhXvPMn/5Wegt4sceT
DMZJTT7sApBun1SEFtzKpFU9ex32wL7aN2RH45h1iY8OkIGYkSuRkA6F2Ted+pMn
yeH/+521dgcQ/B0GQd2ozi6wqy/G0hdnOkKfxPNR7qerzlAyr2Feg6pNq07vF2e5
PZ9FXthXsThNgE0BXMiYy7g2UErJvSihV4nM/xoG64EDhl1tgaw0evOU+akkb+95
JEmiimcIzbc9pb6SNrYMcTubAieG7g21LRY0fsrMZC1GimqwY1NNmcxfGNX9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgLqxYL77Bh11Js7jnhMmDXegc6YwHwYDVR0j
BBgwFoAUK9P+bpCEkH6KxedK491dHef/5OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1pu
M2MvMC8yQkQzRkU2RTkwODQ5MDdFOEFDNUU3NEFFM0RENUQxREU3RkZFNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDNGRTZFOTA4NDkwN0U4
QUM1RTc0QUUzREQ1RDFERTdGRkU0RUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBVVFZc0NEWTVzUmZmZ2I5anRxTWRrQmNHdktSQVVScEtjQm9jZmdabjNjLzAv
MzIzODMwMzQzYTYzNjM2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjM4
MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEDMwAMA0GCSqGSIb3DQEBCwUAA4IBAQBOp2qIDn0x
ZAVMGImtpp8QjzVtSwPySIpVImKwdLefMHXh+kthfFhcdX+3JqkHR+myT82tIKKj
tw1ZhUGy9I1q0zx5R5loUPMIumKtNZqA8cOgFdbKnIDZwtTGh3FR3T87eX+iXUuF
f9DZodysWYTZ6uAXfI6+mB5rX568lZ//qp/6nTQCnhGggngvNbTN/f/qkyYxPKYB
Lf4ZDmtkm6hn7M1WDKgPPsYRb6Zk3iHNCncwKWzq7Fi3CY0n+NXGyLF8MyyzCHJM
XFEPTFNDRW3pZ1RlgFyjbPPo7LTSrjIVNPn+eJbPbhZ1VXSvoaErMxwHcLxZPjEE
5jR5LFeo3zTy
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org