Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d313238203d3e20323730383130.roa
File:                     323830343a373163343a3a2f33322d313238203d3e20323730383130.roa (raw, json)
Hash identifier:          DRTsdlJuAjo+t4uccOUV4V8PpUdRI1ezzNfPmYRdS9U=
Subject key identifier:   19:18:AD:95:50:F8:94:35:88:F5:7E:FE:11:68:28:45:0D:96:91:C2
Certificate issuer:       /CN=97DFDD537889039A6F50A7A04D31597E88D020DB
Certificate serial:       7F2D7F62E6DDC32071A7913F9FF673B36CC66330
Authority key identifier: 97:DF:DD:53:78:89:03:9A:6F:50:A7:A0:4D:31:59:7E:88:D0:20:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFDD537889039A6F50A7A04D31597E88D020DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d313238203d3e20323730383130.roa
Signing time:             Mon 05 Aug 2024 14:45:34 +0000
ROA not before:           Mon 05 Aug 2024 14:40:34 +0000
ROA not after:            Mon 04 Aug 2025 14:45:34 +0000
asID:                     270810
IP address blocks:        2804:71c4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/97DFDD537889039A6F50A7A04D31597E88D020DB.crl
                          rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/97DFDD537889039A6F50A7A04D31597E88D020DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFDD537889039A6F50A7A04D31597E88D020DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 18:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2d:7f:62:e6:dd:c3:20:71:a7:91:3f:9f:f6:73:b3:6c:c6:63:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFDD537889039A6F50A7A04D31597E88D020DB
        Validity
            Not Before: Aug  5 14:40:34 2024 GMT
            Not After : Aug  4 14:45:34 2025 GMT
        Subject: CN=1918AD9550F8943588F57EFE116828450D9691C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:0d:a9:3d:80:a0:54:7f:95:4b:55:4d:76:
                    b4:02:3b:78:1d:d4:b2:69:94:af:d3:69:35:5a:df:
                    c6:2d:0c:65:d1:73:5f:a2:34:28:c9:df:5c:13:5d:
                    2e:80:3b:97:31:a0:0a:c4:fa:d7:f1:4b:a9:0f:ef:
                    68:0e:b8:e5:d7:0a:13:39:52:c1:19:e9:7e:1c:a2:
                    5c:7c:ae:ba:f0:a6:eb:50:08:59:b4:57:bc:1a:a8:
                    ae:c2:a9:e1:01:68:2c:64:e4:50:2d:e7:a1:0e:13:
                    9b:9f:a7:bc:51:f7:13:99:81:66:7d:4a:03:00:ab:
                    34:7c:5c:69:11:b5:ad:56:53:92:33:39:32:94:ad:
                    39:d1:ab:97:83:81:1a:9f:99:e6:54:04:61:6e:62:
                    2e:df:8e:90:ec:12:2b:a7:ef:2d:4f:22:c7:9a:29:
                    50:21:3b:63:c2:0a:10:5f:90:80:26:31:26:aa:ff:
                    d8:66:e3:5c:53:22:3a:18:af:32:fd:cd:e7:a7:f1:
                    f5:3c:42:67:55:b1:ed:ec:9e:cb:c5:bd:f0:0d:e9:
                    b5:ac:62:7f:03:a5:54:c9:6b:71:f0:2d:2e:c9:4c:
                    98:1f:38:69:ab:98:e9:79:a5:53:f4:14:08:2f:13:
                    0c:9b:2f:ba:60:ba:6b:7e:95:e2:0d:9b:5b:ca:3e:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:AD:95:50:F8:94:35:88:F5:7E:FE:11:68:28:45:0D:96:91:C2
            X509v3 Authority Key Identifier:
                keyid:97:DF:DD:53:78:89:03:9A:6F:50:A7:A0:4D:31:59:7E:88:D0:20:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/97DFDD537889039A6F50A7A04D31597E88D020DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFDD537889039A6F50A7A04D31597E88D020DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d313238203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:ad:a9:ea:92:3d:da:68:84:8c:25:7f:b2:0a:bc:8e:86:cb:
         d3:93:ed:d5:a9:bf:bc:3a:2b:8a:2f:5a:1f:25:ab:fa:eb:06:
         7e:59:68:be:27:db:90:b7:c4:08:54:7e:25:19:c6:64:c4:e5:
         a9:75:fd:58:8d:56:e3:1d:84:49:6a:7e:9d:c0:41:84:a5:be:
         5d:22:27:bc:a4:81:a7:2f:11:aa:8e:6f:27:3d:41:3f:1f:02:
         5b:4d:bf:16:92:47:fb:fd:36:b0:d8:0b:c1:2e:64:b9:ed:5d:
         36:d4:40:f2:b2:b0:68:7b:06:2b:84:22:36:bc:a0:e9:10:02:
         26:01:70:43:4a:9f:8c:9f:0d:3a:6f:55:ef:d2:88:8e:7c:35:
         74:43:fa:d8:53:46:5d:91:08:9b:b2:26:4a:1e:66:a4:37:83:
         31:98:76:62:2c:1c:4b:76:df:fb:47:aa:b1:f5:c7:fe:71:2c:
         81:28:26:cb:79:3b:2d:23:bf:a9:41:1a:b2:96:da:5f:eb:bc:
         48:83:d0:c4:73:fc:1f:47:70:1c:76:68:78:2f:d0:42:7d:11:
         2a:3a:64:5c:77:a0:98:99:3a:bc:9d:95:48:2f:ea:a1:32:84:
         1b:61:24:19:37:92:38:c6:bc:ff:fe:70:cb:07:e4:50:9f:8e:
         aa:f8:7c:14
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUfy1/YubdwyBxp5E/n/Zzs2zGYzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdERkRENTM3ODg5MDM5QTZGNTBBN0EwNEQzMTU5N0U4
OEQwMjBEQjAeFw0yNDA4MDUxNDQwMzRaFw0yNTA4MDQxNDQ1MzRaMDMxMTAvBgNV
BAMTKDE5MThBRDk1NTBGODk0MzU4OEY1N0VGRTExNjgyODQ1MEQ5NjkxQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTw2pPYCgVH+VS1VNdrQCO3gd
1LJplK/TaTVa38YtDGXRc1+iNCjJ31wTXS6AO5cxoArE+tfxS6kP72gOuOXXChM5
UsEZ6X4colx8rrrwputQCFm0V7waqK7CqeEBaCxk5FAt56EOE5ufp7xR9xOZgWZ9
SgMAqzR8XGkRta1WU5IzOTKUrTnRq5eDgRqfmeZUBGFuYi7fjpDsEiun7y1PIsea
KVAhO2PCChBfkIAmMSaq/9hm41xTIjoYrzL9zeen8fU8QmdVse3snsvFvfAN6bWs
Yn8DpVTJa3HwLS7JTJgfOGmrmOl5pVP0FAgvEwybL7pgumt+leINm1vKPltDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUGRitlVD4lDWI9X7+EWgoRQ2WkcIwHwYDVR0j
BBgwFoAUl9/dU3iJA5pvUKegTTFZfojQINswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZuZVRuRmRDWFR5Z2Zjam9lQThvY05OTlR2Z1lzY2N0eEpNcHhLRFg1
dVQvMC85N0RGREQ1Mzc4ODkwMzlBNkY1MEE3QTA0RDMxNTk3RTg4RDAyMERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3REZERDUzNzg4OTAzOUE2
RjUwQTdBMDREMzE1OTdFODhEMDIwREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWbmVUbkZkQ1hUeWdmY2pvZUE4b2NOTk5UdmdZc2NjdHhKTXB4S0RYNXVULzAv
MzIzODMwMzQzYTM3MzE2MzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzODMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHHEMA0GCSqGSIb3DQEBCwUAA4IBAQCqranq
kj3aaISMJX+yCryOhsvTk+3Vqb+8OiuKL1ofJav66wZ+WWi+J9uQt8QIVH4lGcZk
xOWpdf1YjVbjHYRJan6dwEGEpb5dIie8pIGnLxGqjm8nPUE/HwJbTb8Wkkf7/Taw
2AvBLmS57V021EDysrBoewYrhCI2vKDpEAImAXBDSp+Mnw06b1Xv0oiOfDV0Q/rY
U0ZdkQibsiZKHmakN4MxmHZiLBxLdt/7R6qx9cf+cSyBKCbLeTstI7+pQRqyltpf
67xIg9DEc/wfR3Acdmh4L9BCfREqOmRcd6CYmTq8nZVIL+qhMoQbYSQZN5I4xrz/
/nDLB+RQn46q+HwU
-----END CERTIFICATE-----
Generated at Fri Sep 27 18:56:39 2024 by rpki-client on console-ams.rpki-client.org