Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          iiE8pqM81gAtU6WQ2Vsz1SKfIQzAmEQSHGNz3l9U0/8=
Subject key identifier:   CB:CD:72:7E:6D:8C:5F:8C:DB:A1:E7:D6:3D:85:4B:B3:F9:B3:1A:F6
Certificate issuer:       /CN=19AD45DFBA69DF12C77C5A5DC9AE9962D686D775
Certificate serial:       14721D93FF94207E669D0FC6871CC9A0021F4DE7
Authority key identifier: 19:AD:45:DF:BA:69:DF:12:C7:7C:5A:5D:C9:AE:99:62:D6:86:D7:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Tue 26 Nov 2024 01:36:55 +0000
ROA not before:           Tue 26 Nov 2024 01:31:55 +0000
ROA not after:            Tue 25 Nov 2025 01:36:55 +0000
asID:                     272581
IP address blocks:        2804:8578:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:72:1d:93:ff:94:20:7e:66:9d:0f:c6:87:1c:c9:a0:02:1f:4d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AD45DFBA69DF12C77C5A5DC9AE9962D686D775
        Validity
            Not Before: Nov 26 01:31:55 2024 GMT
            Not After : Nov 25 01:36:55 2025 GMT
        Subject: CN=CBCD727E6D8C5F8CDBA1E7D63D854BB3F9B31AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:85:46:4f:d2:33:2f:7b:b9:dc:76:06:94:
                    2a:99:95:11:01:ff:14:a9:78:ac:6c:ec:e9:d9:d9:
                    cf:3b:dc:9d:26:04:c1:25:f8:91:5f:b6:2d:ed:51:
                    fd:38:a9:2e:c0:65:c2:c6:1b:2a:15:2d:d2:28:88:
                    af:ca:03:97:f2:fc:52:22:e2:5f:ba:df:62:b0:01:
                    3d:bf:ac:53:44:ff:3f:9e:f8:fa:0a:52:81:54:5d:
                    bb:c8:ca:71:69:4c:1e:47:d7:fb:d0:1c:93:b2:8a:
                    e3:62:3b:df:36:12:22:a3:eb:0f:48:02:a5:2f:b7:
                    24:d6:e2:e9:1b:aa:ea:98:fd:04:3b:54:cb:c0:d2:
                    ac:88:99:45:2a:5d:0d:38:a7:ca:ed:d1:e7:4e:cd:
                    c5:d1:1a:ce:78:f1:80:2e:32:67:65:16:ab:82:b1:
                    8b:81:77:52:fc:77:94:73:4f:37:c9:91:ce:a5:61:
                    73:ea:01:a7:08:3d:03:1f:1c:25:27:ab:79:9c:99:
                    95:14:1e:77:7f:d9:76:99:64:4d:48:48:1c:9f:bd:
                    55:56:b2:9e:55:60:43:68:9a:d8:62:cd:c4:64:07:
                    f0:da:c1:d1:79:b8:2a:5c:ba:a9:ea:2c:5e:9d:e0:
                    3e:e7:7e:41:66:68:50:4f:24:ec:b3:48:53:6c:24:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:72:7E:6D:8C:5F:8C:DB:A1:E7:D6:3D:85:4B:B3:F9:B3:1A:F6
            X509v3 Authority Key Identifier:
                keyid:19:AD:45:DF:BA:69:DF:12:C7:7C:5A:5D:C9:AE:99:62:D6:86:D7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:5f:ab:07:74:4a:4c:af:a1:8c:ba:2c:2f:3b:46:51:33:29:
         ff:3d:cf:6b:70:ce:0c:5e:de:11:30:85:81:32:1f:65:6a:8e:
         4d:84:94:29:e4:0b:c2:57:f3:bc:c9:ce:0d:61:33:bf:ff:9a:
         5b:1e:8b:8a:7d:cb:45:47:44:8c:e7:5d:bd:87:c2:42:ea:61:
         ae:7f:bf:d7:64:db:78:2a:fd:c0:27:c5:b3:bd:84:67:b2:5e:
         64:ab:c2:49:4c:a4:b5:aa:ec:45:bc:7d:96:f8:b9:66:28:7c:
         f5:3f:cf:9f:be:d3:00:5c:8a:c2:b6:d8:8e:58:41:60:43:bf:
         f0:6b:bc:a0:6d:06:26:c4:27:b0:e2:9b:3a:f2:7e:3f:69:3c:
         6f:e6:7d:da:97:98:7b:fc:7d:16:5d:b3:56:7f:f0:fd:0e:e3:
         5f:b1:bc:1d:33:a4:9b:6f:28:43:8c:2b:96:7d:57:9a:78:70:
         65:32:78:65:7c:d0:ec:1c:fc:9b:7d:5f:8d:1e:fa:21:b4:82:
         a6:6f:d7:f2:c0:30:d6:05:7d:ec:8d:51:63:c8:54:03:5e:c0:
         6f:a0:05:25:02:3e:c9:b7:e6:a6:ac:f8:da:a8:a5:26:70:b1:
         c6:94:63:f2:28:df:e6:f4:67:d2:23:94:62:1d:24:11:b9:b1:
         8a:95:80:14
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFHIdk/+UIH5mnQ/GhxzJoAIfTecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBRDQ1REZCQTY5REYxMkM3N0M1QTVEQzlBRTk5NjJE
Njg2RDc3NTAeFw0yNDExMjYwMTMxNTVaFw0yNTExMjUwMTM2NTVaMDMxMTAvBgNV
BAMTKENCQ0Q3MjdFNkQ4QzVGOENEQkExRTdENjNEODU0QkIzRjlCMzFBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknIVGT9IzL3u53HYGlCqZlREB
/xSpeKxs7OnZ2c873J0mBMEl+JFfti3tUf04qS7AZcLGGyoVLdIoiK/KA5fy/FIi
4l+632KwAT2/rFNE/z+e+PoKUoFUXbvIynFpTB5H1/vQHJOyiuNiO982EiKj6w9I
AqUvtyTW4ukbquqY/QQ7VMvA0qyImUUqXQ04p8rt0edOzcXRGs548YAuMmdlFquC
sYuBd1L8d5RzTzfJkc6lYXPqAacIPQMfHCUnq3mcmZUUHnd/2XaZZE1ISByfvVVW
sp5VYENomthizcRkB/DawdF5uCpcuqnqLF6d4D7nfkFmaFBPJOyzSFNsJAxHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUy81yfm2MX4zboefWPYVLs/mzGvYwHwYDVR0j
BBgwFoAUGa1F37pp3xLHfFpdya6ZYtaG13UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMS8xOUFENDVERkJBNjlERjEyQzc3QzVBNURDOUFFOTk2MkQ2ODZENzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5QUQ0NURGQkE2OURGMTJD
NzdDNUE1REM5QUU5OTYyRDY4NkQ3NzUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzEv
MzIzODMwMzQzYTM4MzUzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhXiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAlX6sHdEpMr6GMuiwvO0ZRMyn/Pc9rcM4MXt4RMIWBMh9lao5NhJQp5AvC
V/O8yc4NYTO//5pbHouKfctFR0SM5129h8JC6mGuf7/XZNt4Kv3AJ8WzvYRnsl5k
q8JJTKS1quxFvH2W+LlmKHz1P8+fvtMAXIrCttiOWEFgQ7/wa7ygbQYmxCew4ps6
8n4/aTxv5n3al5h7/H0WXbNWf/D9DuNfsbwdM6SbbyhDjCuWfVeaeHBlMnhlfNDs
HPybfV+NHvohtIKmb9fywDDWBX3sjVFjyFQDXsBvoAUlAj7Jt+amrPjaqKUmcLHG
lGPyKN/m9GfSI5RiHSQRubGKlYAU
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:48 2024 by rpki-client on console-fra.rpki-client.org