Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3730303a3a2f34302d3430203d3e20323732373130.roa
File:                     323830343a383737343a3730303a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier:          mMIKF6rz/SbCUOSPOtamA6xQ40lq5oVuK1NutIRBYHE=
Subject key identifier:   68:C3:24:0F:F3:D1:35:A2:18:AE:82:7A:B3:E3:86:83:B0:3F:15:FE
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       759EDEAB7E589BDD30017E148425213744BF42CC
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3730303a3a2f34302d3430203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:37 +0000
ROA not before:           Fri 30 Aug 2024 14:21:37 +0000
ROA not after:            Fri 29 Aug 2025 14:26:37 +0000
asID:                     272710
IP address blocks:        2804:8774:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9e:de:ab:7e:58:9b:dd:30:01:7e:14:84:25:21:37:44:bf:42:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:37 2024 GMT
            Not After : Aug 29 14:26:37 2025 GMT
        Subject: CN=68C3240FF3D135A218AE827AB3E38683B03F15FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:7e:ab:3e:77:2d:48:ff:31:34:23:c9:0c:
                    93:c3:05:5a:ec:1e:e6:1d:60:7e:fc:87:52:e4:75:
                    29:92:c5:81:d6:cb:c4:90:25:3a:9d:76:60:a2:6a:
                    49:17:91:4b:0f:b0:40:4c:66:43:55:83:2b:7e:17:
                    69:19:65:b0:e3:be:54:7b:24:0e:05:97:a9:9b:4d:
                    42:a4:70:91:24:f9:f7:21:c9:ec:f5:f2:34:9a:71:
                    6e:e1:94:45:03:e3:27:c4:b2:c7:67:7c:55:67:d7:
                    3d:98:43:90:0e:14:7b:96:b2:56:ec:22:2c:b9:f7:
                    1f:95:be:44:e3:32:51:3a:29:e4:a8:c9:3a:b4:f3:
                    91:a6:a3:45:6c:59:86:58:e7:1e:b1:52:f8:4b:0d:
                    11:5f:22:0d:4a:0c:e0:b4:3f:e8:5d:9c:c9:5c:f6:
                    a4:bf:4c:51:12:96:5f:f5:34:6c:5f:49:8c:40:fc:
                    2e:b0:10:8f:ed:46:49:00:08:ff:b9:e4:5b:e5:3b:
                    7d:f0:c3:24:16:ef:b7:2c:c0:5a:e9:c9:4a:88:12:
                    d3:62:eb:62:b4:b4:03:04:4c:f1:de:08:8c:31:dd:
                    9b:36:4e:88:cb:5d:e4:9c:49:e5:48:27:9e:2a:92:
                    5f:59:13:2c:09:7e:82:28:aa:2b:38:71:10:93:b7:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C3:24:0F:F3:D1:35:A2:18:AE:82:7A:B3:E3:86:83:B0:3F:15:FE
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3730303a3a2f34302d3430203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:35:f9:87:71:4d:22:c4:cb:a9:93:29:01:ee:a4:b9:e6:2b:
         eb:57:e2:1a:6e:80:91:1f:9a:cf:38:39:a0:f6:28:33:91:13:
         60:30:28:16:ca:15:a3:81:bf:33:9f:65:ab:92:e2:19:15:5c:
         ff:7a:20:d9:21:50:70:12:30:5a:8f:3b:e6:18:80:e0:be:1f:
         d0:2c:5e:b3:18:d0:44:84:40:ab:8f:30:de:a9:3a:28:ad:99:
         cb:2f:a4:a1:ab:77:02:1b:75:c6:26:2f:19:c4:69:f3:b2:74:
         e3:c7:9b:83:23:9a:f4:79:ad:f0:50:14:9e:a2:19:fa:41:32:
         f5:c9:4a:13:b3:6d:02:ed:3e:cb:6a:94:26:89:ee:48:eb:e4:
         a0:72:de:5b:6c:0c:48:a0:45:c0:53:45:87:ab:76:2a:48:37:
         2a:af:85:7e:f1:e6:8a:7c:93:b2:6f:d6:d2:81:0b:70:83:55:
         b5:22:ab:76:0c:5c:f2:c3:f1:42:cf:26:39:33:bc:31:8e:e3:
         f4:b9:39:4e:71:0f:04:a8:1d:3d:c3:ca:78:8b:d8:6e:bf:65:
         44:d4:25:bf:63:73:ff:4a:04:02:47:2b:ad:bf:46:77:a5:26:
         06:b9:20:cb:c9:e0:f4:e3:78:69:d9:dd:5b:58:d3:fd:69:03:
         f9:bd:ff:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdZ7eq35Ym90wAX4UhCUhN0S/QswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzdaFw0yNTA4MjkxNDI2MzdaMDMxMTAvBgNV
BAMTKDY4QzMyNDBGRjNEMTM1QTIxOEFFODI3QUIzRTM4NjgzQjAzRjE1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6H6rPnctSP8xNCPJDJPDBVrs
HuYdYH78h1LkdSmSxYHWy8SQJTqddmCiakkXkUsPsEBMZkNVgyt+F2kZZbDjvlR7
JA4Fl6mbTUKkcJEk+fchyez18jSacW7hlEUD4yfEssdnfFVn1z2YQ5AOFHuWslbs
Iiy59x+VvkTjMlE6KeSoyTq085Gmo0VsWYZY5x6xUvhLDRFfIg1KDOC0P+hdnMlc
9qS/TFESll/1NGxfSYxA/C6wEI/tRkkACP+55FvlO33wwyQW77cswFrpyUqIEtNi
62K0tAMETPHeCIwx3Zs2TojLXeScSeVIJ54qkl9ZEywJfoIoqis4cRCTt4uRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaMMkD/PRNaIYroJ6s+OGg7A/Ff4wHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzNzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBId0BzANBgkqhkiG9w0BAQsFAAOC
AQEAlDX5h3FNIsTLqZMpAe6kueYr61fiGm6AkR+azzg5oPYoM5ETYDAoFsoVo4G/
M59lq5LiGRVc/3og2SFQcBIwWo875hiA4L4f0CxesxjQRIRAq48w3qk6KK2Zyy+k
oat3Aht1xiYvGcRp87J048ebgyOa9Hmt8FAUnqIZ+kEy9clKE7NtAu0+y2qUJonu
SOvkoHLeW2wMSKBFwFNFh6t2Kkg3Kq+FfvHminyTsm/W0oELcINVtSKrdgxc8sPx
Qs8mOTO8MY7j9Lk5TnEPBKgdPcPKeIvYbr9lRNQlv2Nz/0oEAkcrrb9Gd6UmBrkg
y8ng9ON4adndW1jT/WkD+b3/SA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org