Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a633030303a3a2f33342d3334203d3e20323633383535.roa
File:                     323830343a323663343a633030303a3a2f33342d3334203d3e20323633383535.roa (raw, json)
Hash identifier:          HRca8yjYk7o76E/ppRWF6AgThmJMDsUfawGgurLK8AI=
Subject key identifier:   4B:B5:77:9D:76:EE:0B:64:6A:CE:42:A8:E4:E3:56:A2:E3:4C:C8:56
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       51DBADDB0FAC85E8CD4132F3D699A0D2B1FF05E4
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a633030303a3a2f33342d3334203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:23 +0000
ROA not before:           Tue 26 Nov 2024 18:49:23 +0000
ROA not after:            Tue 25 Nov 2025 18:54:23 +0000
asID:                     263855
IP address blocks:        2804:26c4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl
                          rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:db:ad:db:0f:ac:85:e8:cd:41:32:f3:d6:99:a0:d2:b1:ff:05:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:23 2024 GMT
            Not After : Nov 25 18:54:23 2025 GMT
        Subject: CN=4BB5779D76EE0B646ACE42A8E4E356A2E34CC856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:80:d9:ea:53:f2:3d:f8:ef:27:54:ad:44:
                    cb:77:60:09:3b:75:e8:93:d1:c8:cb:16:fb:05:4c:
                    14:cf:99:6a:28:89:ec:9f:fc:65:f9:35:1e:23:79:
                    bc:35:14:6c:de:3d:3c:58:45:5d:f5:b7:f6:9c:2e:
                    ee:7f:12:cf:92:e2:af:78:60:85:32:0f:18:ad:6e:
                    6b:58:54:80:bf:6d:36:fa:dd:3a:98:a4:7d:c3:4d:
                    dd:e8:b8:32:24:1e:71:33:95:da:ed:56:cc:1b:84:
                    6c:b5:84:57:01:2d:49:5b:5c:74:49:51:6e:1c:e7:
                    57:1f:74:d6:9a:e4:92:8c:7f:f1:e5:29:70:76:9c:
                    41:ae:f3:7a:15:06:0e:ba:15:22:f5:af:60:18:ee:
                    00:92:ea:db:b6:af:76:c5:9f:54:10:b4:02:de:41:
                    a4:b0:bb:d3:b1:c1:dd:03:8b:3d:af:de:1d:e5:56:
                    33:01:c4:fd:a7:b5:91:8e:f9:54:bc:e9:e5:07:eb:
                    4f:3e:cd:c3:41:46:76:bb:90:c0:f7:1a:9e:83:34:
                    97:40:7d:b0:db:e2:31:19:ec:d1:ef:da:86:ca:67:
                    9d:7d:2b:0b:c4:de:0c:14:bd:39:97:85:db:0e:4f:
                    09:11:12:91:23:9f:2e:eb:23:67:28:85:12:91:06:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B5:77:9D:76:EE:0B:64:6A:CE:42:A8:E4:E3:56:A2:E3:4C:C8:56
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a633030303a3a2f33342d3334203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:ec:da:fb:a0:4c:94:e8:a0:04:68:d6:53:0d:b0:6f:e1:43:
         74:99:ae:64:09:a9:69:a6:19:0b:de:2d:60:04:c3:8e:b3:c7:
         58:5f:c8:c5:1e:4d:2c:6d:d8:ff:b4:b2:e8:3c:16:9f:c9:b7:
         a4:1c:11:c0:c0:37:d1:28:e2:72:8a:54:96:14:e2:ae:f4:39:
         d1:27:a5:1e:95:4b:71:82:e9:1c:45:b6:49:57:06:42:34:53:
         69:f9:82:45:6b:89:a9:fd:30:c8:27:06:a3:97:29:7e:00:00:
         69:69:38:7b:6a:79:6e:66:aa:08:fd:ee:ed:02:6f:2d:36:92:
         c8:df:3e:73:fd:aa:38:f1:f4:c2:86:37:40:41:36:5a:c9:a8:
         3b:cf:90:1f:4e:0e:1d:5d:f9:7f:38:b9:23:a2:66:20:86:70:
         57:51:cc:5a:cd:be:d3:6c:6b:72:b1:7c:bf:15:e6:d1:25:e9:
         c8:80:f4:89:2b:35:aa:b0:3e:29:7a:f4:83:91:e1:d2:ff:a7:
         f7:19:4d:97:50:7d:cf:6b:de:34:c2:d7:f7:ad:3d:92:73:be:
         18:dc:55:ce:e9:86:d6:8c:e0:6b:e2:fb:d7:fc:8b:f1:b9:53:
         02:62:d9:2c:44:8b:ca:49:e7:51:f1:ce:38:89:ea:02:c1:ec:
         5e:18:6c:28
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUdut2w+shejNQTLz1pmg0rH/BeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBQUU5Mzc2QTQ0RTBDMzhCM0IzNDdERTY1MjQzMTg0
QTJDMjI0MjAeFw0yNDExMjYxODQ5MjNaFw0yNTExMjUxODU0MjNaMDMxMTAvBgNV
BAMTKDRCQjU3NzlENzZFRTBCNjQ2QUNFNDJBOEU0RTM1NkEyRTM0Q0M4NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyYDZ6lPyPfjvJ1StRMt3YAk7
deiT0cjLFvsFTBTPmWooieyf/GX5NR4jebw1FGzePTxYRV31t/acLu5/Es+S4q94
YIUyDxitbmtYVIC/bTb63TqYpH3DTd3ouDIkHnEzldrtVswbhGy1hFcBLUlbXHRJ
UW4c51cfdNaa5JKMf/HlKXB2nEGu83oVBg66FSL1r2AY7gCS6tu2r3bFn1QQtALe
QaSwu9Oxwd0Diz2v3h3lVjMBxP2ntZGO+VS86eUH608+zcNBRna7kMD3Gp6DNJdA
fbDb4jEZ7NHv2obKZ519KwvE3gwUvTmXhdsOTwkREpEjny7rI2cohRKRBpnFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUS7V3nXbuC2RqzkKo5ONWouNMyFYwHwYDVR0j
BBgwFoAUKqrpN2pE4MOLOzR95lJDGEosIkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21nZ250dVh5RnhSeVZUOFhBQjZITnFpYm1xYXk2OUR4Z3BMQVg3UlVK
OHUvMC8yQUFBRTkzNzZBNDRFMEMzOEIzQjM0N0RFNjUyNDMxODRBMkMyMjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQUFFOTM3NkE0NEUwQzM4
QjNCMzQ3REU2NTI0MzE4NEEyQzIyNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtZ2dudHVYeUZ4UnlWVDhYQUI2SE5xaWJtcWF5NjlEeGdwTEFYN1JVSjh1LzAv
MzIzODMwMzQzYTMyMzY2MzM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM4MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJsTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBM7Nr7oEyU6KAEaNZTDbBv4UN0ma5kCalpphkL3i1gBMOOs8dYX8jFHk0s
bdj/tLLoPBafybekHBHAwDfRKOJyilSWFOKu9DnRJ6UelUtxgukcRbZJVwZCNFNp
+YJFa4mp/TDIJwajlyl+AABpaTh7anluZqoI/e7tAm8tNpLI3z5z/ao48fTChjdA
QTZayag7z5AfTg4dXfl/OLkjomYghnBXUcxazb7TbGtysXy/FebRJenIgPSJKzWq
sD4pevSDkeHS/6f3GU2XUH3Pa940wtf3rT2Sc74Y3FXO6YbWjOBr4vvX/IvxuVMC
YtksRIvKSedR8c44ieoCwexeGGwo
-----END CERTIFICATE-----
Generated at Tue Nov 26 20:51:27 2024 by rpki-client on console-fra.rpki-client.org