Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a383030303a3a2f33342d3334203d3e20323637333935.roa
File:                     323830343a346364343a383030303a3a2f33342d3334203d3e20323637333935.roa (raw, json)
Hash identifier:          N+LW/XozGlWjrmCKSS2wE+5kQbqqmWvKUK/kjF8WDsM=
Subject key identifier:   9A:E0:BD:17:4C:18:91:63:E9:40:66:66:73:1A:46:73:11:97:70:CE
Certificate issuer:       /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial:       4F4B2B0D5D79D83AB36416128731CBFDDD125078
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a383030303a3a2f33342d3334203d3e20323637333935.roa
Signing time:             Fri 23 Aug 2024 19:56:50 +0000
ROA not before:           Fri 23 Aug 2024 19:51:50 +0000
ROA not after:            Fri 22 Aug 2025 19:56:50 +0000
asID:                     267395
IP address blocks:        2804:4cd4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl
                          rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4b:2b:0d:5d:79:d8:3a:b3:64:16:12:87:31:cb:fd:dd:12:50:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
        Validity
            Not Before: Aug 23 19:51:50 2024 GMT
            Not After : Aug 22 19:56:50 2025 GMT
        Subject: CN=9AE0BD174C189163E9406666731A4673119770CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:0f:eb:93:4c:fd:10:37:7f:74:62:b3:b3:
                    c1:07:c4:6e:14:39:8b:a6:7d:39:af:6e:75:4f:58:
                    36:7a:c4:19:58:0f:ab:46:68:fd:73:3d:57:9e:8a:
                    9d:e1:4e:2c:da:0f:55:1c:b8:0d:78:2a:40:db:ca:
                    a4:95:4b:16:18:b5:7a:d0:c3:ca:f9:97:57:40:29:
                    3c:8e:64:39:09:87:90:6c:d4:b6:b0:ff:a7:8e:0c:
                    19:74:f1:b0:45:c4:ba:5a:03:72:d6:80:38:14:5d:
                    b6:0b:80:e6:ca:15:22:f9:c4:ab:2c:f9:eb:a1:b2:
                    76:c2:a2:d0:95:38:be:e0:49:f2:69:9e:ca:90:ff:
                    91:c0:42:74:e8:3b:b7:c5:42:b8:97:fb:11:d4:a3:
                    6e:04:fb:1a:29:d1:c1:14:75:a8:8e:59:46:cd:27:
                    c0:bf:ea:6a:ae:36:85:ab:c1:69:dd:c9:6a:86:4c:
                    75:ce:bb:98:b1:09:cf:be:cf:c0:a8:e9:55:c3:75:
                    45:80:93:20:bd:8a:22:66:d8:30:6d:5a:0d:a1:4d:
                    3c:9a:35:e2:fe:4e:70:c8:fb:1a:f2:cc:c1:4d:74:
                    07:a7:6c:89:73:b8:fb:41:cf:fd:26:6d:30:54:31:
                    6c:a8:7c:5d:79:84:d4:e2:8a:b8:9b:9f:8c:31:63:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:BD:17:4C:18:91:63:E9:40:66:66:73:1A:46:73:11:97:70:CE
            X509v3 Authority Key Identifier:
                keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a383030303a3a2f33342d3334203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:5f:70:66:b2:26:d4:92:ca:3e:86:ba:9b:50:3f:d8:89:a2:
         8e:43:22:9d:5a:a3:77:ac:c9:e1:9e:8b:de:b5:b7:78:92:4a:
         2a:87:4d:17:38:e0:de:10:28:fa:58:0f:8f:20:b2:38:9c:1c:
         37:2f:e7:0d:60:bf:d2:35:31:89:93:7e:61:31:a1:bf:4c:0a:
         ec:0c:ed:57:ac:ec:14:1b:fe:02:b7:c5:9d:ac:50:cc:c3:85:
         e5:37:95:c2:c7:ed:47:82:6c:06:c8:f9:16:46:c9:b5:a9:13:
         2c:c5:ec:d0:7c:b7:98:cb:01:a4:34:15:eb:cf:01:90:dc:30:
         a9:c6:89:34:f3:0d:f7:59:69:ae:ad:c3:8a:8e:03:f7:a0:0a:
         2a:4e:58:72:d4:3d:c4:6b:23:68:39:0c:dc:b9:40:3c:88:3e:
         7a:07:b1:95:71:f9:2f:f3:40:1b:bb:c7:14:ec:7d:e8:0c:2e:
         8b:61:02:0d:99:df:a2:80:05:71:10:f8:30:af:bf:b6:27:8f:
         87:6c:08:46:ca:3a:89:70:8c:01:34:83:fc:57:98:44:96:29:
         1c:44:56:ed:a5:58:f8:6c:36:5a:ae:25:1a:b8:f9:fa:e1:ac:
         27:e8:b7:c8:3f:64:b1:9c:b0:ad:13:21:c9:ae:14:41:c6:31:
         a7:c1:6f:6a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUT0srDV152DqzZBYShzHL/d0SUHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkxRjc3MTBBMTQ5MDM1QkUyQzEzRUFBNDU2OTdCN0JD
MjlCMEUzNjAeFw0yNDA4MjMxOTUxNTBaFw0yNTA4MjIxOTU2NTBaMDMxMTAvBgNV
BAMTKDlBRTBCRDE3NEMxODkxNjNFOTQwNjY2NjczMUE0NjczMTE5NzcwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4A/rk0z9EDd/dGKzs8EHxG4U
OYumfTmvbnVPWDZ6xBlYD6tGaP1zPVeeip3hTizaD1UcuA14KkDbyqSVSxYYtXrQ
w8r5l1dAKTyOZDkJh5Bs1Law/6eODBl08bBFxLpaA3LWgDgUXbYLgObKFSL5xKss
+euhsnbCotCVOL7gSfJpnsqQ/5HAQnToO7fFQriX+xHUo24E+xop0cEUdaiOWUbN
J8C/6mquNoWrwWndyWqGTHXOu5ixCc++z8Co6VXDdUWAkyC9iiJm2DBtWg2hTTya
NeL+TnDI+xryzMFNdAenbIlzuPtBz/0mbTBUMWyofF15hNTiiribn4wxYxlfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUmuC9F0wYkWPpQGZmcxpGcxGXcM4wHwYDVR0j
BBgwFoAUiR93EKFJA1viwT6qRWl7e8KbDjYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjUGY2QXM4eVNwU2pXNW5lSHpkeUF3aXVyYVFRNlgza2Y2eWExVE1W
am0vMC84OTFGNzcxMEExNDkwMzVCRTJDMTNFQUE0NTY5N0I3QkMyOUIwRTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MUY3NzEwQTE0OTAzNUJF
MkMxM0VBQTQ1Njk3QjdCQzI5QjBFMzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1BmNkFzOHlTcFNqVzVuZUh6ZHlBd2l1cmFRUTZYM2tmNnlhMVRNVmptLzAv
MzIzODMwMzQzYTM0NjM2NDM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigETNSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAwX3BmsibUkso+hrqbUD/YiaKOQyKdWqN3rMnhnovetbd4kkoqh00XOODe
ECj6WA+PILI4nBw3L+cNYL/SNTGJk35hMaG/TArsDO1XrOwUG/4Ct8WdrFDMw4Xl
N5XCx+1HgmwGyPkWRsm1qRMsxezQfLeYywGkNBXrzwGQ3DCpxok08w33WWmurcOK
jgP3oAoqTlhy1D3EayNoOQzcuUA8iD56B7GVcfkv80Abu8cU7H3oDC6LYQINmd+i
gAVxEPgwr7+2J4+HbAhGyjqJcIwBNIP8V5hElikcRFbtpVj4bDZariUauPn64awn
6LfIP2SxnLCtEyHJrhRBxjGnwW9q
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org