Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa
File:                     323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa (raw, json)
Hash identifier:          MvqIWc6bepq6T35s3RaVQgFw1UTY8IST3iEkjiv03g0=
Subject key identifier:   88:08:08:D8:68:2C:D1:62:21:44:A8:69:31:C4:E2:A1:83:BD:AA:A0
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       60498AEC6D86A6439ED93BBBA63A4B7784CE6543
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:23 +0000
ROA not before:           Mon 15 Jul 2024 13:37:23 +0000
ROA not after:            Mon 14 Jul 2025 13:42:23 +0000
asID:                     262729
IP address blocks:        2804:16d8:4800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:49:8a:ec:6d:86:a6:43:9e:d9:3b:bb:a6:3a:4b:77:84:ce:65:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:23 2024 GMT
            Not After : Jul 14 13:42:23 2025 GMT
        Subject: CN=880808D8682CD1622144A86931C4E2A183BDAAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:0a:65:3e:ae:fb:3c:77:38:de:e8:59:67:
                    2b:17:7c:c1:67:92:f4:c2:54:a0:0b:9b:06:f1:fc:
                    d8:5f:30:bd:d2:6f:df:cc:80:6e:c2:4b:9b:76:06:
                    8a:f1:e0:86:5a:22:27:42:0a:58:16:0f:01:9f:67:
                    f8:a9:0b:f1:84:f9:35:08:79:65:be:b8:b7:de:ef:
                    4f:25:29:e3:8b:6c:1b:d1:69:23:3c:6a:fd:3b:07:
                    94:f8:a0:7a:fa:f6:af:8c:17:13:11:49:77:df:62:
                    64:9e:56:67:c0:e7:63:ff:cb:af:be:29:a0:cc:29:
                    08:e5:6e:14:00:50:5a:ae:16:5a:be:45:51:07:75:
                    28:96:f9:4b:6f:a5:cd:fe:1f:ff:4c:7e:7b:a5:ba:
                    4a:37:50:9f:30:23:11:81:c1:56:57:27:b0:b0:dc:
                    ad:90:8a:5f:2d:dc:dd:83:7b:53:10:bb:e3:43:06:
                    80:51:01:95:e1:f3:4e:8a:ba:98:bc:7e:66:be:d7:
                    9f:b7:96:54:9e:5b:1f:7f:62:8e:e9:07:ee:da:3b:
                    a7:e9:55:37:f9:6f:d5:92:a8:4c:42:19:c7:29:9f:
                    ee:67:bd:1f:5b:bf:d5:b7:0c:55:3a:a9:b4:ae:8e:
                    68:29:c3:cf:a2:78:0c:5e:bb:9d:30:cc:1b:6e:0b:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:08:08:D8:68:2C:D1:62:21:44:A8:69:31:C4:E2:A1:83:BD:AA:A0
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:fa:2a:83:e8:fe:bd:ab:b1:1b:85:c1:26:74:51:38:f7:
         d1:fa:05:2d:25:27:9c:9c:6f:f9:c5:32:a4:1b:d7:33:f9:25:
         65:57:a3:52:f1:44:03:3e:6b:e5:99:e6:57:51:82:61:c6:5b:
         61:aa:f2:2a:00:94:3f:5e:dd:46:62:11:3b:ae:48:d1:19:df:
         f7:32:c7:96:9c:d1:3a:7d:0b:39:b8:fa:01:2b:5f:74:d2:d8:
         9a:77:46:ca:9e:d3:4e:12:f7:e3:8b:01:54:0e:43:5c:f3:b0:
         8b:b7:a7:05:12:08:45:9a:75:b6:ee:c8:b3:27:c6:6a:15:c0:
         e0:3a:4f:40:b1:51:a9:3b:3b:c3:cc:19:bc:ad:70:41:c3:1a:
         39:02:9a:02:d4:45:f8:eb:5a:b7:2a:36:41:b8:37:4b:d6:f8:
         b9:be:94:4e:5f:8c:68:15:62:9b:d0:f3:14:7c:72:f5:c9:3f:
         9e:f1:2d:f8:db:a9:3b:5e:73:9f:84:4a:03:7f:c0:76:2a:9f:
         4d:91:1a:b0:38:0d:50:6d:27:e4:15:23:d0:bd:1e:a4:a2:61:
         e9:8c:fb:eb:36:8d:6d:a8:79:42:94:20:31:11:0b:22:72:51:
         e4:17:c8:31:a8:41:21:e6:2b:31:72:50:02:cc:0b:1e:86:20:
         d6:6e:18:d4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYEmK7G2GpkOe2Tu7pjpLd4TOZUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjNaFw0yNTA3MTQxMzQyMjNaMDMxMTAvBgNV
BAMTKDg4MDgwOEQ4NjgyQ0QxNjIyMTQ0QTg2OTMxQzRFMkExODNCREFBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYQplPq77PHc43uhZZysXfMFn
kvTCVKALmwbx/NhfML3Sb9/MgG7CS5t2Borx4IZaIidCClgWDwGfZ/ipC/GE+TUI
eWW+uLfe708lKeOLbBvRaSM8av07B5T4oHr69q+MFxMRSXffYmSeVmfA52P/y6++
KaDMKQjlbhQAUFquFlq+RVEHdSiW+Utvpc3+H/9Mfnuluko3UJ8wIxGBwVZXJ7Cw
3K2Qil8t3N2De1MQu+NDBoBRAZXh806Kupi8fma+15+3llSeWx9/Yo7pB+7aO6fp
VTf5b9WSqExCGccpn+5nvR9bv9W3DFU6qbSujmgpw8+ieAxeu50wzBtuC7WrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUiAgI2Ggs0WIhRKhpMcTioYO9qqAwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzNDM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFthIMA0GCSqGSIb3DQEBCwUA
A4IBAQAWevoqg+j+vauxG4XBJnRROPfR+gUtJSecnG/5xTKkG9cz+SVlV6NS8UQD
PmvlmeZXUYJhxlthqvIqAJQ/Xt1GYhE7rkjRGd/3MseWnNE6fQs5uPoBK1900tia
d0bKntNOEvfjiwFUDkNc87CLt6cFEghFmnW27sizJ8ZqFcDgOk9AsVGpOzvDzBm8
rXBBwxo5ApoC1EX461q3KjZBuDdL1vi5vpROX4xoFWKb0PMUfHL1yT+e8S3426k7
XnOfhEoDf8B2Kp9NkRqwOA1QbSfkFSPQvR6komHpjPvrNo1tqHlClCAxEQsiclHk
F8gxqEEh5isxclACzAsehiDWbhjU
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org