Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa
File:                     323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (raw, json)
Hash identifier:          oI1d5Os1ZUZofwWJfPhmknmMnpa/nfJlK8fnABFd/B0=
Subject key identifier:   EC:D5:B8:B4:B2:A5:8F:ED:5E:87:97:40:69:9F:F2:3C:BA:11:3A:D0
Certificate issuer:       /CN=8D7DCCD29109454497F31238029B042DB589C3D6
Certificate serial:       01FAE27C01667D715103A0AAE8857064AC01FB63
Authority key identifier: 8D:7D:CC:D2:91:09:45:44:97:F3:12:38:02:9B:04:2D:B5:89:C3:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7DCCD29109454497F31238029B042DB589C3D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa
Signing time:             Thu 07 Nov 2024 13:09:00 +0000
ROA not before:           Thu 07 Nov 2024 13:04:00 +0000
ROA not after:            Thu 06 Nov 2025 13:09:00 +0000
asID:                     269671
IP address blocks:        2804:6824::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/8D7DCCD29109454497F31238029B042DB589C3D6.crl
                          rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/8D7DCCD29109454497F31238029B042DB589C3D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7DCCD29109454497F31238029B042DB589C3D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fa:e2:7c:01:66:7d:71:51:03:a0:aa:e8:85:70:64:ac:01:fb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D7DCCD29109454497F31238029B042DB589C3D6
        Validity
            Not Before: Nov  7 13:04:00 2024 GMT
            Not After : Nov  6 13:09:00 2025 GMT
        Subject: CN=ECD5B8B4B2A58FED5E879740699FF23CBA113AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:33:6f:25:e8:a7:1e:70:1a:bb:5b:0b:8b:
                    e4:18:78:61:35:67:f7:be:90:58:f0:a4:f2:06:21:
                    71:bd:5e:6f:9e:92:f0:af:b6:cc:98:9b:18:04:ee:
                    08:27:fb:28:23:72:6f:30:0e:99:4e:7b:24:84:94:
                    3b:9e:b3:bb:9f:7e:26:74:f5:1c:91:60:80:c2:7b:
                    3e:17:89:31:93:d2:f5:a2:55:26:97:19:cd:91:36:
                    bf:9f:c9:f9:a6:f9:bd:c6:52:04:25:a4:a8:f8:88:
                    1f:39:42:d9:96:e1:3f:02:5e:62:2a:98:43:89:12:
                    0c:1b:ad:5e:8d:53:73:3d:be:28:40:1d:af:91:64:
                    aa:e5:b8:8e:ec:21:6e:18:ed:41:ff:8d:6f:71:03:
                    18:6d:af:dc:4d:6c:af:0f:7a:bf:8c:a3:5f:4b:6d:
                    09:a0:33:d7:44:7e:82:c1:d1:5d:b2:05:ec:c8:82:
                    16:13:56:e9:9a:c3:11:2f:75:c2:50:1a:a6:ea:75:
                    ed:7b:26:ab:28:0b:db:f0:3c:4c:63:92:e2:fc:63:
                    c9:fd:1d:5f:de:b3:bc:a2:6f:71:b1:3b:69:a4:4f:
                    47:1a:1b:a3:cc:c2:bd:21:d8:3d:44:85:99:60:43:
                    ff:21:3d:85:ad:45:8c:f7:d0:59:d1:71:79:42:e3:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D5:B8:B4:B2:A5:8F:ED:5E:87:97:40:69:9F:F2:3C:BA:11:3A:D0
            X509v3 Authority Key Identifier:
                keyid:8D:7D:CC:D2:91:09:45:44:97:F3:12:38:02:9B:04:2D:B5:89:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/8D7DCCD29109454497F31238029B042DB589C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7DCCD29109454497F31238029B042DB589C3D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6824::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:a8:18:30:7f:84:60:58:ba:39:13:12:d1:12:7e:09:68:05:
         ec:6a:e1:21:1c:8b:27:e7:2e:30:0d:22:4a:e8:91:08:a2:29:
         c6:db:7e:f9:11:31:a0:af:ac:9a:43:11:eb:57:f2:20:ed:2f:
         38:3c:7d:e8:29:e0:96:d3:b0:c0:ad:c9:d2:48:49:9b:bf:8c:
         30:fa:4b:de:02:94:cb:7f:44:22:54:a9:e7:53:c9:1d:9e:9a:
         d0:5a:dc:cc:04:d1:5d:cc:0f:cf:9b:4c:fb:42:6a:b3:d4:72:
         46:0d:dc:1c:26:b0:5f:9e:94:30:0d:06:3d:4f:1c:41:16:70:
         bf:85:ba:ae:a7:3e:e8:f0:35:96:3a:0d:1a:55:21:ab:66:70:
         b8:b7:b7:ed:21:c3:17:b6:d8:35:d0:77:71:ae:d5:e8:6d:f2:
         4d:c0:c3:19:7f:59:9f:bf:d5:e7:ff:8d:6a:60:da:5d:4e:88:
         92:80:63:51:cb:bf:33:13:9d:a0:5f:2c:95:55:8b:33:26:08:
         2a:96:8b:f5:15:fe:35:33:7b:b1:49:25:48:9e:03:91:78:ca:
         7a:78:ad:dd:45:f1:88:eb:22:45:50:91:04:2f:b8:a6:f2:43:
         2e:39:9e:78:66:e3:3e:77:78:e4:3a:84:8b:3a:c1:3d:dc:96:
         28:76:0f:5c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUAfrifAFmfXFRA6Cq6IVwZKwB+2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ3RENDRDI5MTA5NDU0NDk3RjMxMjM4MDI5QjA0MkRC
NTg5QzNENjAeFw0yNDExMDcxMzA0MDBaFw0yNTExMDYxMzA5MDBaMDMxMTAvBgNV
BAMTKEVDRDVCOEI0QjJBNThGRUQ1RTg3OTc0MDY5OUZGMjNDQkExMTNBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BDNvJeinHnAau1sLi+QYeGE1
Z/e+kFjwpPIGIXG9Xm+ekvCvtsyYmxgE7ggn+ygjcm8wDplOeySElDues7uffiZ0
9RyRYIDCez4XiTGT0vWiVSaXGc2RNr+fyfmm+b3GUgQlpKj4iB85QtmW4T8CXmIq
mEOJEgwbrV6NU3M9vihAHa+RZKrluI7sIW4Y7UH/jW9xAxhtr9xNbK8Per+Mo19L
bQmgM9dEfoLB0V2yBezIghYTVumawxEvdcJQGqbqde17JqsoC9vwPExjkuL8Y8n9
HV/es7yib3GxO2mkT0caG6PMwr0h2D1EhZlgQ/8hPYWtRYz30FnRcXlC4yWVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7NW4tLKlj+1eh5dAaZ/yPLoROtAwHwYDVR0j
BBgwFoAUjX3M0pEJRUSX8xI4ApsELbWJw9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD
TFkvMC84RDdEQ0NEMjkxMDk0NTQ0OTdGMzEyMzgwMjlCMDQyREI1ODlDM0Q2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEN0RDQ0QyOTEwOTQ1NDQ5
N0YzMTIzODAyOUIwNDJEQjU4OUMzRDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZSllSY1JUa2NOQmlDRGpBNDJOblNUZzQzbnBFclc0aFdCWmtvcGlpQ0xZLzAv
MzIzODMwMzQzYTM2MzgzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGgkMA0GCSqGSIb3DQEBCwUAA4IBAQC3qBgw
f4RgWLo5ExLREn4JaAXsauEhHIsn5y4wDSJK6JEIoinG2375ETGgr6yaQxHrV/Ig
7S84PH3oKeCW07DArcnSSEmbv4ww+kveApTLf0QiVKnnU8kdnprQWtzMBNFdzA/P
m0z7Qmqz1HJGDdwcJrBfnpQwDQY9TxxBFnC/hbqupz7o8DWWOg0aVSGrZnC4t7ft
IcMXttg10HdxrtXobfJNwMMZf1mfv9Xn/41qYNpdToiSgGNRy78zE52gXyyVVYsz
Jggqlov1Ff41M3uxSSVIngOReMp6eK3dRfGI6yJFUJEEL7im8kMuOZ54ZuM+d3jk
OoSLOsE93JYodg9c
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:56 2024 by rpki-client on console-ams.rpki-client.org