Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          b7MvlepqVUC1oKXzjhFYoBPUE/JeHQH02ZldkGxriGk=
Subject key identifier:   2D:E8:2E:B6:38:07:95:98:66:47:C5:FC:B0:A3:0D:43:11:30:15:01
Certificate issuer:       /CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
Certificate serial:       719754B2D85B1C71989E4B40F17A52657666DA06
Authority key identifier: 99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Thu 12 Sep 2024 15:10:09 +0000
ROA not before:           Thu 12 Sep 2024 15:05:09 +0000
ROA not after:            Thu 11 Sep 2025 15:10:09 +0000
asID:                     271478
IP address blocks:        2804:7c24::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:97:54:b2:d8:5b:1c:71:98:9e:4b:40:f1:7a:52:65:76:66:da:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
        Validity
            Not Before: Sep 12 15:05:09 2024 GMT
            Not After : Sep 11 15:10:09 2025 GMT
        Subject: CN=2DE82EB6380795986647C5FCB0A30D4311301501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:3d:27:85:a7:75:ca:20:2b:58:a1:ce:d7:
                    d6:8b:77:61:f0:a2:a1:e9:b4:16:af:c3:59:b3:de:
                    bc:ee:85:dc:aa:ba:9a:d4:b5:8b:8b:a5:a0:f2:26:
                    6f:52:57:c2:23:da:f5:63:7b:ba:17:fc:ae:29:ce:
                    b3:83:8e:47:7a:bd:61:4b:b8:7e:ed:61:eb:23:f1:
                    8b:8f:93:3c:da:3e:32:c9:20:9b:0f:91:2c:97:83:
                    cb:b9:a8:40:92:cb:e6:69:f5:dc:53:c6:1a:50:ad:
                    f2:a5:8a:fd:dd:aa:08:9e:29:92:16:f2:d8:e4:48:
                    a4:b6:9a:9d:e4:95:1f:33:02:be:5a:ae:5d:cb:2e:
                    b0:7b:62:b4:1c:72:2d:a3:4b:bc:59:b5:7d:fe:1f:
                    5f:de:b3:50:b3:be:7e:39:27:17:d1:dd:04:e2:9d:
                    4b:ea:06:86:b2:e2:62:1c:07:a1:f0:f8:ce:34:73:
                    8a:de:fb:0f:7d:21:ff:4b:d3:39:d2:20:8e:97:fa:
                    3a:9e:e8:06:ac:9a:76:33:ff:4b:e1:89:c5:ef:63:
                    00:68:3c:99:75:bd:22:4e:12:e0:ad:9b:0b:ba:64:
                    66:fc:3f:9a:01:cd:44:d1:fe:ad:06:9b:e5:3b:92:
                    c7:e2:6e:5a:02:99:f4:bc:19:9b:fc:46:29:4d:7f:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E8:2E:B6:38:07:95:98:66:47:C5:FC:B0:A3:0D:43:11:30:15:01
            X509v3 Authority Key Identifier:
                keyid:99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:0f:2c:3e:f8:e9:cf:e9:03:02:a1:11:df:03:ba:7f:5e:e0:
         fc:44:eb:bd:6e:bd:8d:db:6e:2b:36:50:f8:f8:1b:33:88:62:
         eb:6c:72:9d:96:4f:fd:74:b5:8c:1b:13:9e:b4:1c:be:94:1a:
         43:bc:0d:3c:4c:5c:e7:90:56:c4:e7:56:e3:5e:08:8d:c9:39:
         03:11:03:f0:84:ac:f4:28:cf:55:8a:f7:d4:af:95:86:16:c9:
         98:a7:1a:0b:82:b6:77:35:2c:8c:2c:e2:c0:13:66:81:82:bc:
         b4:7d:15:73:13:f1:b7:16:42:d4:53:f3:2c:e8:03:9c:01:d7:
         60:ff:f1:b8:ed:9a:5b:82:25:73:a8:62:7f:27:30:c4:d6:85:
         7a:6f:67:92:a2:01:14:bd:a4:aa:fc:99:4f:d8:39:e5:1b:33:
         96:bc:56:60:1c:7e:f4:37:89:6b:bd:4d:bd:c6:4a:67:04:fc:
         12:d9:c0:38:1a:e7:6d:52:bf:d7:7f:8a:40:1c:e1:15:66:90:
         8d:5c:3a:6e:00:a6:c3:b5:1a:ad:f7:3d:e1:71:d9:79:c8:79:
         6d:52:ba:93:80:d5:20:c5:03:95:28:e3:61:81:cf:93:54:71:
         72:fb:9d:2f:81:ef:5b:98:e7:e0:4b:2c:5c:7d:27:7e:fb:c1:
         da:f2:42:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcZdUsthbHHGYnktA8XpSZXZm2gYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk2QjRBQ0YxOUNDNjgyRjFCNkU0NTQ5QTlBM0EwMDRC
QzAzMTM3RDAeFw0yNDA5MTIxNTA1MDlaFw0yNTA5MTExNTEwMDlaMDMxMTAvBgNV
BAMTKDJERTgyRUI2MzgwNzk1OTg2NjQ3QzVGQ0IwQTMwRDQzMTEzMDE1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcOD0nhad1yiArWKHO19aLd2Hw
oqHptBavw1mz3rzuhdyquprUtYuLpaDyJm9SV8Ij2vVje7oX/K4pzrODjkd6vWFL
uH7tYesj8YuPkzzaPjLJIJsPkSyXg8u5qECSy+Zp9dxTxhpQrfKliv3dqgieKZIW
8tjkSKS2mp3klR8zAr5arl3LLrB7YrQcci2jS7xZtX3+H1/es1Czvn45JxfR3QTi
nUvqBoay4mIcB6Hw+M40c4re+w99If9L0znSII6X+jqe6AasmnYz/0vhicXvYwBo
PJl1vSJOEuCtmwu6ZGb8P5oBzUTR/q0Gm+U7ksfibloCmfS8GZv8RilNf6OPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULegutjgHlZhmR8X8sKMNQxEwFQEwHwYDVR0j
BBgwFoAUmWtKzxnMaC8bbkVJqaOgBLwDE30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZS
UHcvMC85OTZCNEFDRjE5Q0M2ODJGMUI2RTQ1NDlBOUEzQTAwNEJDMDMxMzdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NkI0QUNGMTlDQzY4MkYx
QjZFNDU0OUE5QTNBMDA0QkMwMzEzN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvRDR6MWtRS0ZyQzltZGlrWFZuU0xrbXZjQlozdW1uOUwzZmdRQ3BmUlB3LzAv
MzIzODMwMzQzYTM3NjMzMjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR8JAAwDQYJKoZIhvcNAQELBQADggEBAKYPLD74
6c/pAwKhEd8Dun9e4PxE671uvY3bbis2UPj4GzOIYutscp2WT/10tYwbE560HL6U
GkO8DTxMXOeQVsTnVuNeCI3JOQMRA/CErPQoz1WK99SvlYYWyZinGguCtnc1LIws
4sATZoGCvLR9FXMT8bcWQtRT8yzoA5wB12D/8bjtmluCJXOoYn8nMMTWhXpvZ5Ki
ARS9pKr8mU/YOeUbM5a8VmAcfvQ3iWu9Tb3GSmcE/BLZwDga521Sv9d/ikAc4RVm
kI1cOm4ApsO1Gq33PeFx2XnIeW1SupOA1SDFA5Uo42GBz5NUcXL7nS+B71uY5+BL
LFx9J377wdryQuQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:10 2024 by rpki-client on console-fra.rpki-client.org