Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa
File:                     323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (raw, json)
Hash identifier:          +Fw2Ip3QC474PGH79rF8oKrDNCMyWPMoaQhdwpBOVbM=
Subject key identifier:   95:10:BC:AA:9A:88:46:CA:BD:C6:45:DF:6C:BD:12:F5:1B:CF:FF:C0
Certificate issuer:       /CN=8F8A7FF47CDD103EC352E1196652B4116F6D1128
Certificate serial:       60B30B2459A20EFFE13CE25962D8F42BEE5A58DC
Authority key identifier: 8F:8A:7F:F4:7C:DD:10:3E:C3:52:E1:19:66:52:B4:11:6F:6D:11:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F8A7FF47CDD103EC352E1196652B4116F6D1128.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa
Signing time:             Mon 28 Oct 2024 17:47:24 +0000
ROA not before:           Mon 28 Oct 2024 17:42:24 +0000
ROA not after:            Mon 27 Oct 2025 17:47:24 +0000
asID:                     271007
IP address blocks:        2804:74d8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/8F8A7FF47CDD103EC352E1196652B4116F6D1128.crl
                          rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/8F8A7FF47CDD103EC352E1196652B4116F6D1128.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F8A7FF47CDD103EC352E1196652B4116F6D1128.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b3:0b:24:59:a2:0e:ff:e1:3c:e2:59:62:d8:f4:2b:ee:5a:58:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F8A7FF47CDD103EC352E1196652B4116F6D1128
        Validity
            Not Before: Oct 28 17:42:24 2024 GMT
            Not After : Oct 27 17:47:24 2025 GMT
        Subject: CN=9510BCAA9A8846CABDC645DF6CBD12F51BCFFFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:83:bb:bc:e6:c3:7f:f2:ea:40:25:91:54:
                    44:29:b6:59:cc:29:58:f4:13:81:f3:72:cd:56:83:
                    4f:03:70:be:de:da:0a:9e:22:a0:33:51:76:e0:31:
                    d7:12:76:13:0e:6a:5e:88:9c:d7:f6:ba:72:59:5c:
                    f8:c2:10:5e:a1:6a:8a:e1:4a:2e:8a:70:a5:ce:44:
                    c0:df:7c:f4:29:b6:89:ab:54:64:0f:9a:81:e2:67:
                    20:98:92:12:8d:40:8a:df:e2:a9:3c:68:51:0e:9d:
                    6d:a7:8b:3a:40:f4:c7:74:20:5d:ac:8e:b9:15:99:
                    b1:05:4e:08:27:43:8d:81:d5:0c:c9:36:17:a7:4e:
                    9b:3d:d8:d4:49:7c:77:3d:29:c5:80:f4:fa:e1:ac:
                    79:da:d2:1c:64:9d:4a:74:c9:6d:01:1b:84:b7:8b:
                    64:be:de:8e:5a:66:5a:8d:81:d8:55:80:ed:98:59:
                    af:6d:7f:92:f0:85:f8:8a:24:e1:fa:f6:4b:db:41:
                    5d:a6:12:fe:be:0e:26:db:09:36:10:68:2f:d7:e1:
                    a1:58:4d:27:35:f1:6f:cb:47:ba:6c:3e:f0:a9:97:
                    e8:b3:8d:ba:94:18:f7:f1:58:04:ce:d7:76:fa:d8:
                    bb:d9:a1:e0:43:bc:1f:74:bf:2c:2b:db:8a:d2:21:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:BC:AA:9A:88:46:CA:BD:C6:45:DF:6C:BD:12:F5:1B:CF:FF:C0
            X509v3 Authority Key Identifier:
                keyid:8F:8A:7F:F4:7C:DD:10:3E:C3:52:E1:19:66:52:B4:11:6F:6D:11:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/8F8A7FF47CDD103EC352E1196652B4116F6D1128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F8A7FF47CDD103EC352E1196652B4116F6D1128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:79:52:24:20:8b:a5:76:34:1b:bd:67:08:89:e1:ac:c8:
         c9:e5:32:8f:c8:b9:e8:50:cb:f8:a5:9e:f0:9b:36:58:25:5f:
         01:38:09:9d:e7:3a:90:c7:b4:df:f6:5a:85:cb:d5:c6:d2:79:
         70:a7:bc:72:a2:4f:1b:95:eb:05:5d:18:a5:a8:6b:2e:be:a3:
         47:38:11:7d:64:0e:fb:82:f4:22:2f:ef:64:93:57:0e:0c:8a:
         51:8a:9e:7c:52:ad:be:dc:f7:29:d4:71:fc:8c:7c:05:ad:2b:
         34:02:a6:f3:78:9f:45:d7:60:bd:bb:91:07:af:fc:3e:29:f1:
         3e:e4:7b:f1:b6:1a:56:2c:c8:65:a9:12:65:2e:24:b3:d7:9d:
         e2:03:6c:f9:c8:36:f8:d6:d6:26:79:3c:e6:84:d4:fe:27:d4:
         f7:44:d1:27:52:50:be:24:97:db:12:9d:7a:19:f0:fc:c2:42:
         10:56:b5:c9:33:ca:e9:ef:1d:84:9c:fc:f5:a1:3a:4e:1d:25:
         88:18:7e:7e:f6:36:eb:71:24:1e:d4:e6:72:aa:7d:eb:56:84:
         8d:b8:75:61:34:eb:bc:06:05:37:2c:25:5d:5e:4f:e1:e5:68:
         f1:73:ed:ca:13:c0:95:16:83:9e:91:e1:cb:4a:e6:90:f7:f4:
         2d:a7:e8:82
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYLMLJFmiDv/hPOJZYtj0K+5aWNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4QTdGRjQ3Q0REMTAzRUMzNTJFMTE5NjY1MkI0MTE2
RjZEMTEyODAeFw0yNDEwMjgxNzQyMjRaFw0yNTEwMjcxNzQ3MjRaMDMxMTAvBgNV
BAMTKDk1MTBCQ0FBOUE4ODQ2Q0FCREM2NDVERjZDQkQxMkY1MUJDRkZGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHYO7vObDf/LqQCWRVEQptlnM
KVj0E4Hzcs1Wg08DcL7e2gqeIqAzUXbgMdcSdhMOal6InNf2unJZXPjCEF6haorh
Si6KcKXORMDffPQptomrVGQPmoHiZyCYkhKNQIrf4qk8aFEOnW2nizpA9Md0IF2s
jrkVmbEFTggnQ42B1QzJNhenTps92NRJfHc9KcWA9PrhrHna0hxknUp0yW0BG4S3
i2S+3o5aZlqNgdhVgO2YWa9tf5LwhfiKJOH69kvbQV2mEv6+DibbCTYQaC/X4aFY
TSc18W/LR7psPvCpl+izjbqUGPfxWATO13b62LvZoeBDvB90vywr24rSIdghAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUlRC8qpqIRsq9xkXfbL0S9RvP/8AwHwYDVR0j
BBgwFoAUj4p/9HzdED7DUuEZZlK0EW9tESgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdG
dzMvMC84RjhBN0ZGNDdDREQxMDNFQzM1MkUxMTk2NjUyQjQxMTZGNkQxMTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGOEE3RkY0N0NERDEwM0VD
MzUyRTExOTY2NTJCNDExNkY2RDExMjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrUXNQWjl2ZHAyQU5XUm9mN05mMmt3bXBKcXJoSFh2U0N5dWJMUmU3RnczLzAv
MzIzODMwMzQzYTM3MzQ2NDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMDMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHTYMA0GCSqGSIb3DQEBCwUAA4IBAQBLpXlS
JCCLpXY0G71nCInhrMjJ5TKPyLnoUMv4pZ7wmzZYJV8BOAmd5zqQx7Tf9lqFy9XG
0nlwp7xyok8blesFXRilqGsuvqNHOBF9ZA77gvQiL+9kk1cODIpRip58Uq2+3Pcp
1HH8jHwFrSs0AqbzeJ9F12C9u5EHr/w+KfE+5HvxthpWLMhlqRJlLiSz153iA2z5
yDb41tYmeTzmhNT+J9T3RNEnUlC+JJfbEp16GfD8wkIQVrXJM8rp7x2EnPz1oTpO
HSWIGH5+9jbrcSQe1OZyqn3rVoSNuHVhNOu8BgU3LCVdXk/h5Wjxc+3KE8CVFoOe
keHLSuaQ9/Qtp+iC
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:08 2024 by rpki-client on console-fra.rpki-client.org