Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/323830343a323562343a383030303a3a2f33342d3334203d3e20323634323937.roa
File:                     323830343a323562343a383030303a3a2f33342d3334203d3e20323634323937.roa (raw, json)
Hash identifier:          KkL//71cEv9qi8FGVpw/WE2v9O4qy59YkqBEDHK76BU=
Subject key identifier:   1D:77:35:3F:E5:E8:78:75:08:E4:5C:9A:84:2C:8C:05:EC:BE:20:91
Certificate issuer:       /CN=576022C32332943F262A8514FECDA1C77D7023B7
Certificate serial:       6EF257A3CD4162B687ADDD83DA6876E13B9927B1
Authority key identifier: 57:60:22:C3:23:32:94:3F:26:2A:85:14:FE:CD:A1:C7:7D:70:23:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576022C32332943F262A8514FECDA1C77D7023B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/323830343a323562343a383030303a3a2f33342d3334203d3e20323634323937.roa
Signing time:             Wed 03 Apr 2024 19:28:30 +0000
ROA not before:           Wed 03 Apr 2024 19:23:30 +0000
ROA not after:            Wed 02 Apr 2025 19:28:30 +0000
asID:                     264297
IP address blocks:        2804:25b4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/576022C32332943F262A8514FECDA1C77D7023B7.crl
                          rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/576022C32332943F262A8514FECDA1C77D7023B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576022C32332943F262A8514FECDA1C77D7023B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f2:57:a3:cd:41:62:b6:87:ad:dd:83:da:68:76:e1:3b:99:27:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576022C32332943F262A8514FECDA1C77D7023B7
        Validity
            Not Before: Apr  3 19:23:30 2024 GMT
            Not After : Apr  2 19:28:30 2025 GMT
        Subject: CN=1D77353FE5E8787508E45C9A842C8C05ECBE2091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:77:65:c3:52:98:66:a3:11:65:e3:f7:75:
                    c3:9e:2d:7f:d7:f3:91:cf:28:ca:1a:dc:de:c3:a3:
                    70:0e:b3:ef:bd:3c:41:eb:ee:a4:7c:b4:cb:c3:f3:
                    48:fe:79:ac:ed:8f:b4:13:4c:e3:1e:a9:00:ef:bb:
                    41:d2:24:49:92:9a:07:ab:52:d0:93:33:9b:72:e6:
                    67:d5:d5:63:b7:1c:37:80:0a:7b:6e:14:6b:ab:39:
                    f0:e6:48:c0:8b:2b:56:ed:19:12:7e:60:4f:4b:7a:
                    f7:81:1c:74:4b:50:e5:3a:a0:09:b2:21:09:d7:0e:
                    dd:6f:8e:86:de:63:25:d1:10:5b:ff:e5:b9:d7:86:
                    d2:8d:0c:ab:15:56:39:f9:a8:5c:53:a9:f3:0a:0d:
                    93:49:09:f8:7a:79:73:fb:48:d7:85:cf:30:64:46:
                    70:70:00:fc:ca:50:4c:dc:8d:06:6b:93:d4:4f:6f:
                    60:7d:a7:4b:f7:b1:40:27:15:0a:ba:a7:2e:69:66:
                    8b:bf:1c:86:1c:58:cb:bf:d7:48:bc:4c:3b:3e:6d:
                    6a:d9:94:d0:a8:84:ec:f7:42:18:aa:78:f8:77:62:
                    b2:c4:76:47:7d:c7:6a:a2:90:23:5e:7c:b2:76:94:
                    47:b8:35:25:b5:6b:54:fc:36:66:a7:57:da:1a:5a:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:77:35:3F:E5:E8:78:75:08:E4:5C:9A:84:2C:8C:05:EC:BE:20:91
            X509v3 Authority Key Identifier:
                keyid:57:60:22:C3:23:32:94:3F:26:2A:85:14:FE:CD:A1:C7:7D:70:23:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/576022C32332943F262A8514FECDA1C77D7023B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576022C32332943F262A8514FECDA1C77D7023B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/2/323830343a323562343a383030303a3a2f33342d3334203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25b4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:41:09:d9:5b:b7:9f:11:35:b7:9b:84:5f:ec:26:7e:22:a3:
         b4:d5:76:55:74:0e:eb:20:8f:e5:d4:fa:b0:ac:1d:32:dd:57:
         9c:52:34:34:66:fc:a6:fd:6b:fe:b6:0e:60:d4:84:ca:2b:78:
         f1:cd:9b:fa:07:81:05:db:33:e5:26:1c:ce:1d:6d:6d:b5:07:
         64:1c:be:80:f6:bf:81:c1:1d:27:17:cb:50:2c:21:7b:c0:b4:
         e7:aa:54:32:1b:50:5b:43:c9:36:00:fe:d5:a2:eb:5a:af:40:
         fe:93:87:ab:74:66:96:f6:22:d8:03:b2:20:41:fc:08:8e:36:
         2b:4b:cb:47:b5:47:52:4a:02:a4:a2:14:0a:3a:b6:c3:d4:d4:
         f5:67:85:53:8b:6e:47:4e:ca:da:3b:70:e4:bb:ec:a7:f5:f4:
         cd:e5:ce:64:50:46:51:a8:11:1e:0d:74:74:54:16:f6:cb:18:
         63:64:dc:4c:26:c1:17:7b:4a:63:fc:69:08:b0:8a:75:73:f5:
         ee:00:33:b2:ce:6d:5f:17:93:93:f1:64:d5:7a:80:61:9d:2b:
         85:a0:07:e1:c2:fd:3b:9e:a1:58:c9:7d:8f:e6:a9:31:95:f7:
         39:16:fc:b4:0a:ec:b3:f6:04:83:20:e5:05:c5:b3:d8:1c:5a:
         63:c3:30:4a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbvJXo81BYraHrd2D2mh24TuZJ7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2MDIyQzMyMzMyOTQzRjI2MkE4NTE0RkVDREExQzc3
RDcwMjNCNzAeFw0yNDA0MDMxOTIzMzBaFw0yNTA0MDIxOTI4MzBaMDMxMTAvBgNV
BAMTKDFENzczNTNGRTVFODc4NzUwOEU0NUM5QTg0MkM4QzA1RUNCRTIwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPR3dlw1KYZqMRZeP3dcOeLX/X
85HPKMoa3N7Do3AOs++9PEHr7qR8tMvD80j+eaztj7QTTOMeqQDvu0HSJEmSmger
UtCTM5ty5mfV1WO3HDeACntuFGurOfDmSMCLK1btGRJ+YE9LeveBHHRLUOU6oAmy
IQnXDt1vjobeYyXREFv/5bnXhtKNDKsVVjn5qFxTqfMKDZNJCfh6eXP7SNeFzzBk
RnBwAPzKUEzcjQZrk9RPb2B9p0v3sUAnFQq6py5pZou/HIYcWMu/10i8TDs+bWrZ
lNCohOz3QhiqePh3YrLEdkd9x2qikCNefLJ2lEe4NSW1a1T8NmanV9oaWhwPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUHXc1P+XoeHUI5FyahCyMBey+IJEwHwYDVR0j
BBgwFoAUV2AiwyMylD8mKoUU/s2hx31wI7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn
eHUvMi81NzYwMjJDMzIzMzI5NDNGMjYyQTg1MTRGRUNEQTFDNzdENzAyM0I3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3NjAyMkMzMjMzMjk0M0Yy
NjJBODUxNEZFQ0RBMUM3N0Q3MDIzQjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzIv
MzIzODMwMzQzYTMyMzU2MjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJbSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAmQQnZW7efETW3m4Rf7CZ+IqO01XZVdA7rII/l1PqwrB0y3VecUjQ0Zvym
/Wv+tg5g1ITKK3jxzZv6B4EF2zPlJhzOHW1ttQdkHL6A9r+BwR0nF8tQLCF7wLTn
qlQyG1BbQ8k2AP7Voutar0D+k4erdGaW9iLYA7IgQfwIjjYrS8tHtUdSSgKkohQK
OrbD1NT1Z4VTi25HTsraO3Dku+yn9fTN5c5kUEZRqBEeDXR0VBb2yxhjZNxMJsEX
e0pj/GkIsIp1c/XuADOyzm1fF5OT8WTVeoBhnSuFoAfhwv07nqFYyX2P5qkxlfc5
Fvy0Cuyz9gSDIOUFxbPYHFpjwzBK
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:23 2024 by rpki-client on console-ams.rpki-client.org