Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa
File:                     323830343a363230633a3a2f33322d3334203d3e203238323235.roa (raw, json)
Hash identifier:          +bGp07U35hU38wYIR0ka6U60l1Zlfy396GvgUme4i4Q=
Subject key identifier:   4A:25:C2:F3:FC:8F:03:96:AF:3E:AF:10:DE:D3:99:05:AB:89:04:C1
Certificate issuer:       /CN=172700DF78A10A273AC686AAA03666D561510746
Certificate serial:       756C179C0E249E095BCF81424F8EF54B92E08C04
Authority key identifier: 17:27:00:DF:78:A1:0A:27:3A:C6:86:AA:A0:36:66:D5:61:51:07:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/172700DF78A10A273AC686AAA03666D561510746.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa
Signing time:             Wed 02 Oct 2024 19:02:45 +0000
ROA not before:           Wed 02 Oct 2024 18:57:45 +0000
ROA not after:            Wed 01 Oct 2025 19:02:45 +0000
asID:                     28225
IP address blocks:        2804:620c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/172700DF78A10A273AC686AAA03666D561510746.crl
                          rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/172700DF78A10A273AC686AAA03666D561510746.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/172700DF78A10A273AC686AAA03666D561510746.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6c:17:9c:0e:24:9e:09:5b:cf:81:42:4f:8e:f5:4b:92:e0:8c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172700DF78A10A273AC686AAA03666D561510746
        Validity
            Not Before: Oct  2 18:57:45 2024 GMT
            Not After : Oct  1 19:02:45 2025 GMT
        Subject: CN=4A25C2F3FC8F0396AF3EAF10DED39905AB8904C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:b5:73:e2:ab:af:34:d5:aa:9f:8a:26:fa:
                    b9:31:51:1d:1b:8d:b9:ca:14:5e:82:f6:f2:7c:34:
                    1e:ee:8f:ef:7a:a2:65:13:1c:f6:f7:ed:5b:ab:c9:
                    c5:8c:c5:61:94:bf:4b:d2:7a:46:cc:1c:b8:aa:ac:
                    3b:17:65:5c:46:53:5e:1b:e8:23:15:2b:16:0f:6c:
                    3d:4b:c9:3f:99:cc:23:b3:5e:df:da:e5:a0:23:94:
                    a3:bc:73:61:8f:95:45:45:47:b9:d7:fc:42:55:2b:
                    ef:28:85:0f:a9:d2:ec:a6:8c:59:d6:b4:29:ef:c6:
                    1c:af:20:cc:dc:0a:63:49:4f:21:ed:89:3a:cb:f9:
                    42:c0:eb:7e:ca:3e:f5:81:ce:ee:98:74:d9:f1:f7:
                    95:b0:f2:85:8f:cc:e1:ef:dd:ec:f7:88:2f:30:7b:
                    ab:8d:74:d2:6f:eb:db:3a:35:b3:85:4c:fa:fc:b9:
                    b8:c7:af:49:89:31:a9:27:ea:18:5d:e7:50:5e:35:
                    65:ae:5f:01:14:7a:e9:70:de:0a:50:a0:ba:c1:c0:
                    10:08:1a:18:8c:96:57:cd:ca:f4:71:7a:94:33:06:
                    20:65:bc:bc:9a:3d:4c:10:c6:a0:1c:32:3e:f9:a3:
                    fb:db:eb:88:59:c5:5c:96:02:d6:60:44:86:c7:81:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:C2:F3:FC:8F:03:96:AF:3E:AF:10:DE:D3:99:05:AB:89:04:C1
            X509v3 Authority Key Identifier:
                keyid:17:27:00:DF:78:A1:0A:27:3A:C6:86:AA:A0:36:66:D5:61:51:07:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/172700DF78A10A273AC686AAA03666D561510746.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/172700DF78A10A273AC686AAA03666D561510746.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:22:c7:b3:e8:bd:46:6d:79:b2:3a:08:f6:9c:9f:3a:a8:f4:
         23:23:b1:f3:34:fc:99:77:3f:e7:77:71:e1:f6:4d:55:a8:01:
         54:8e:71:79:3a:78:0e:8d:d9:cd:fa:ac:f1:35:e9:28:91:72:
         20:87:59:f8:03:df:96:4a:0e:f8:9c:85:8a:19:d5:1d:b7:cf:
         bb:e5:a5:b0:4a:6f:1d:e0:f2:5b:f8:71:9a:4a:74:78:f2:8c:
         1e:60:f9:3d:11:06:5d:09:81:0e:c6:8f:70:65:f8:72:13:3e:
         6d:c0:47:6f:ed:14:f2:ad:90:79:14:d2:a4:68:52:90:dd:c6:
         54:23:c3:93:c2:ba:83:32:ef:80:f6:37:6e:86:b0:8f:73:b2:
         8a:bf:f1:a6:2f:50:3a:5b:12:c5:79:a5:e4:ec:ae:a3:70:f9:
         6b:99:67:6c:01:56:c4:73:94:86:38:d9:95:32:2b:bc:1f:dc:
         3b:0c:00:89:fc:7a:20:c4:e4:26:a6:a4:e5:97:25:99:6b:0f:
         16:ad:6c:3f:3f:d2:83:bf:58:2f:6f:fb:59:fe:63:7a:58:42:
         33:75:50:9f:97:e8:c6:65:2b:cc:12:36:ba:63:ee:f6:06:96:
         a2:59:5c:fd:a3:d9:bb:66:23:b7:43:25:80:81:42:5f:e1:22:
         de:c5:76:e7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdWwXnA4knglbz4FCT471S5LgjAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcyNzAwREY3OEExMEEyNzNBQzY4NkFBQTAzNjY2RDU2
MTUxMDc0NjAeFw0yNDEwMDIxODU3NDVaFw0yNTEwMDExOTAyNDVaMDMxMTAvBgNV
BAMTKDRBMjVDMkYzRkM4RjAzOTZBRjNFQUYxMERFRDM5OTA1QUI4OTA0QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLLVz4quvNNWqn4om+rkxUR0b
jbnKFF6C9vJ8NB7uj+96omUTHPb37VurycWMxWGUv0vSekbMHLiqrDsXZVxGU14b
6CMVKxYPbD1LyT+ZzCOzXt/a5aAjlKO8c2GPlUVFR7nX/EJVK+8ohQ+p0uymjFnW
tCnvxhyvIMzcCmNJTyHtiTrL+ULA637KPvWBzu6YdNnx95Ww8oWPzOHv3ez3iC8w
e6uNdNJv69s6NbOFTPr8ubjHr0mJMakn6hhd51BeNWWuXwEUeulw3gpQoLrBwBAI
GhiMllfNyvRxepQzBiBlvLyaPUwQxqAcMj75o/vb64hZxVyWAtZgRIbHgTsJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUSiXC8/yPA5avPq8Q3tOZBauJBMEwHwYDVR0j
BBgwFoAUFycA33ihCic6xoaqoDZm1WFRB0YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY
akgvMC8xNzI3MDBERjc4QTEwQTI3M0FDNjg2QUFBMDM2NjZENTYxNTEwNzQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MjcwMERGNzhBMTBBMjcz
QUM2ODZBQUEwMzY2NkQ1NjE1MTA3NDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzAv
MzIzODMwMzQzYTM2MzIzMDYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzODMy
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEYgwwDQYJKoZIhvcNAQELBQADggEBAC0ix7PovUZt
ebI6CPacnzqo9CMjsfM0/Jl3P+d3ceH2TVWoAVSOcXk6eA6N2c36rPE16SiRciCH
WfgD35ZKDvichYoZ1R23z7vlpbBKbx3g8lv4cZpKdHjyjB5g+T0RBl0JgQ7Gj3Bl
+HITPm3AR2/tFPKtkHkU0qRoUpDdxlQjw5PCuoMy74D2N26GsI9zsoq/8aYvUDpb
EsV5peTsrqNw+WuZZ2wBVsRzlIY42ZUyK7wf3DsMAIn8eiDE5CampOWXJZlrDxat
bD8/0oO/WC9v+1n+Y3pYQjN1UJ+X6MZlK8wSNrpj7vYGlqJZXP2j2btmI7dDJYCB
Ql/hIt7Fduc=
-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:31 2024 by rpki-client on console-fra.rpki-client.org