Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          gMYN5rEt19rXOX9NsH2jDifYTUPPoEfLABSghM8zOss=
Subject key identifier:   5C:56:63:0D:13:D1:33:F3:BC:38:0F:A1:1A:2A:B0:2E:8A:D5:07:33
Certificate issuer:       /CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Certificate serial:       14DAA22974B81AEEEACAB12B565DF529ACC2E397
Authority key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Mon 02 Sep 2024 12:52:33 +0000
ROA not before:           Mon 02 Sep 2024 12:47:33 +0000
ROA not after:            Mon 01 Sep 2025 12:52:33 +0000
asID:                     263541
IP address blocks:        2804:1398:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:da:a2:29:74:b8:1a:ee:ea:ca:b1:2b:56:5d:f5:29:ac:c2:e3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
        Validity
            Not Before: Sep  2 12:47:33 2024 GMT
            Not After : Sep  1 12:52:33 2025 GMT
        Subject: CN=5C56630D13D133F3BC380FA11A2AB02E8AD50733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:99:21:d9:06:c2:d6:09:f5:04:ff:99:a2:04:
                    f4:aa:60:27:22:0d:26:b1:3e:5f:3e:95:b3:6e:ec:
                    2b:69:7c:17:49:ab:ba:d7:c2:ea:68:bb:4b:aa:bf:
                    7b:bf:b1:97:f5:98:ed:5e:28:06:19:41:f2:16:6d:
                    30:4c:14:1c:14:ec:60:7b:51:bc:1c:46:0d:35:17:
                    c1:94:7c:e4:d8:64:d5:30:14:d4:2d:3b:fd:b9:ba:
                    a2:0a:cf:9d:24:f8:79:54:ae:7a:2e:57:2a:de:c1:
                    18:fe:3e:ab:cd:46:06:f7:d9:00:e8:54:92:f2:f5:
                    e3:e0:e4:55:c0:2d:8a:4d:1c:eb:48:07:8f:66:68:
                    0d:36:28:01:81:76:be:c3:62:9c:a0:b3:9c:dd:87:
                    30:86:0b:1a:90:7a:a2:e3:54:09:5c:b2:63:bb:eb:
                    ae:7f:c1:c9:0d:7c:2e:c9:59:32:47:9e:bb:76:63:
                    32:7a:d0:5f:df:12:28:6b:29:ee:7f:9f:84:2a:8b:
                    20:72:d0:99:ac:ea:68:5b:79:b6:2c:7e:74:80:bd:
                    55:d7:61:a1:73:8f:46:70:57:0d:a0:e6:26:a9:72:
                    e7:b6:fe:d0:14:9e:29:5a:f4:d6:02:ee:30:1b:1e:
                    c1:7b:d0:fd:3e:a4:3c:f2:03:df:d0:a6:9a:88:85:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:56:63:0D:13:D1:33:F3:BC:38:0F:A1:1A:2A:B0:2E:8A:D5:07:33
            X509v3 Authority Key Identifier:
                keyid:27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130303a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:33:19:dc:19:ea:22:3d:3b:3c:c6:11:7a:68:2e:35:58:27:
         3a:29:60:17:62:b1:60:b9:5f:a3:59:af:ab:10:c7:fc:0f:60:
         53:66:6e:af:42:ed:f2:29:66:77:46:67:34:d7:67:f5:ac:fb:
         00:c2:82:62:eb:31:17:bc:b2:bf:59:3e:72:a0:cd:a0:bb:84:
         38:ab:53:0d:2a:39:c4:12:ec:ee:58:c0:22:f8:3e:51:b1:b9:
         d9:41:05:d7:79:bf:97:1c:7c:c3:5b:6b:c1:09:2f:88:f0:a4:
         4f:86:7d:30:cd:de:84:63:78:c6:c2:d4:f2:31:c7:44:9f:1f:
         ff:ab:4c:d6:c1:de:1d:72:e4:20:fa:15:f5:ed:6f:f6:00:dc:
         26:35:ff:19:40:cc:36:7a:d6:82:cf:49:99:f9:63:4f:3e:18:
         d2:33:ab:b9:f1:78:33:da:ea:a3:d0:a3:a7:79:0b:cf:80:74:
         cb:ec:a3:8b:f7:ce:7c:d4:8f:4e:f8:5a:cf:6d:36:b9:1f:4b:
         58:30:cd:8e:88:a3:9b:e3:5f:e2:67:27:a4:97:20:ec:c2:9f:
         fd:e5:9e:59:97:aa:b5:18:5c:e5:8e:75:7d:b4:9c:b0:cb:b1:
         dd:28:12:64:35:4a:78:4d:39:ac:f5:83:3b:e2:f6:78:7e:0d:
         c1:00:fc:ca
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUFNqiKXS4Gu7qyrErVl31KazC45cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1MTVDNUU5QkM2MjIzRjI3MzMyRkJFMTYxNkNFNTc3
MTVFOUNBRjAeFw0yNDA5MDIxMjQ3MzNaFw0yNTA5MDExMjUyMzNaMDMxMTAvBgNV
BAMTKDVDNTY2MzBEMTNEMTMzRjNCQzM4MEZBMTFBMkFCMDJFOEFENTA3MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDymSHZBsLWCfUE/5miBPSqYCci
DSaxPl8+lbNu7CtpfBdJq7rXwupou0uqv3u/sZf1mO1eKAYZQfIWbTBMFBwU7GB7
UbwcRg01F8GUfOTYZNUwFNQtO/25uqIKz50k+HlUrnouVyrewRj+PqvNRgb32QDo
VJLy9ePg5FXALYpNHOtIB49maA02KAGBdr7DYpygs5zdhzCGCxqQeqLjVAlcsmO7
665/wckNfC7JWTJHnrt2YzJ60F/fEihrKe5/n4QqiyBy0Jms6mhbebYsfnSAvVXX
YaFzj0ZwVw2g5iapcue2/tAUnila9NYC7jAbHsF70P0+pDzyA9/QppqIhdYjAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUXFZjDRPRM/O8OA+hGiqwLorVBzMwHwYDVR0j
BBgwFoAUJ1FcXpvGIj8nMy++FhbOV3FenK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC8yNzUxNUM1RTlCQzYyMjNGMjczMzJGQkUxNjE2Q0U1NzcxNUU5Q0FGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NTE1QzVFOUJDNjIyM0Yy
NzMzMkZCRTE2MTZDRTU3NzE1RTlDQUYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzIzODMwMzQzYTMxMzMzOTM4M2EzMTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzMzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBOYAQAwDQYJKoZIhvcNAQELBQAD
ggEBAEYzGdwZ6iI9OzzGEXpoLjVYJzopYBdisWC5X6NZr6sQx/wPYFNmbq9C7fIp
ZndGZzTXZ/Ws+wDCgmLrMRe8sr9ZPnKgzaC7hDirUw0qOcQS7O5YwCL4PlGxudlB
Bdd5v5ccfMNba8EJL4jwpE+GfTDN3oRjeMbC1PIxx0SfH/+rTNbB3h1y5CD6FfXt
b/YA3CY1/xlAzDZ61oLPSZn5Y08+GNIzq7nxeDPa6qPQo6d5C8+AdMvso4v3znzU
j074Ws9tNrkfS1gwzY6Io5vjX+JnJ6SXIOzCn/3lnlmXqrUYXOWOdX20nLDLsd0o
EmQ1SnhNOaz1gzvi9nh+DcEA/Mo=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:38 2024 by rpki-client on console-ams.rpki-client.org