Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a3a2f33322d3438203d3e20323637303736.roa
File:                     323830343a343763383a3a2f33322d3438203d3e20323637303736.roa (raw, json)
Hash identifier:          SJFxE6A1iaY38E5EcmjSHCepucdbFpTVFH66fVWoe9E=
Subject key identifier:   76:7F:90:AB:42:AF:43:F1:91:D2:BB:62:CB:8A:B2:FF:DF:9C:0A:FF
Certificate issuer:       /CN=1CC741EDBBA21BD03B4790A7C9503F54CA161D7D
Certificate serial:       7C642F919905DA77364EAEF16E09872352D9B4DC
Authority key identifier: 1C:C7:41:ED:BB:A2:1B:D0:3B:47:90:A7:C9:50:3F:54:CA:16:1D:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a3a2f33322d3438203d3e20323637303736.roa
Signing time:             Wed 28 Aug 2024 13:27:55 +0000
ROA not before:           Wed 28 Aug 2024 13:22:55 +0000
ROA not after:            Wed 27 Aug 2025 13:27:55 +0000
asID:                     267076
IP address blocks:        2804:47c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.crl
                          rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:64:2f:91:99:05:da:77:36:4e:ae:f1:6e:09:87:23:52:d9:b4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC741EDBBA21BD03B4790A7C9503F54CA161D7D
        Validity
            Not Before: Aug 28 13:22:55 2024 GMT
            Not After : Aug 27 13:27:55 2025 GMT
        Subject: CN=767F90AB42AF43F191D2BB62CB8AB2FFDF9C0AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:30:26:b5:8d:c5:50:46:18:75:3e:f6:0c:
                    b8:0f:24:73:d0:58:3d:24:9a:46:b4:fc:b9:8c:5f:
                    ff:46:a6:c9:8b:2e:09:48:18:ae:52:c8:8e:43:dd:
                    ec:a7:16:87:91:22:80:7e:5e:ec:c2:df:d2:0c:23:
                    e8:d1:3d:83:c2:be:10:0f:6a:20:84:c4:5a:19:ed:
                    9f:ea:0a:ac:6d:85:98:d6:fa:a2:4b:51:ed:0b:96:
                    63:c5:65:5a:1c:fa:63:df:5f:9b:de:2d:1a:5c:a8:
                    f5:d6:99:97:01:c8:61:a4:78:9b:2c:64:1d:6d:7e:
                    cd:b2:ff:b6:8a:fd:3c:fe:60:be:cb:14:a9:31:ad:
                    87:6d:a6:2d:75:5c:6c:7b:a1:f3:bb:e8:31:10:88:
                    7d:36:bb:8b:57:70:1c:98:62:fc:e3:af:3a:77:8b:
                    7f:43:2a:47:4e:47:08:94:d8:9d:5a:84:bd:fa:01:
                    23:3b:5a:e9:f8:28:b5:1c:83:a0:bb:e3:16:79:b1:
                    44:f7:b0:9d:5d:fb:58:b4:08:6e:c5:df:3e:bd:1a:
                    3c:75:6f:f5:12:fd:f9:ba:4d:d3:85:1b:42:bb:12:
                    a0:49:db:4e:e2:e5:20:08:cf:2e:88:2c:a8:20:80:
                    f2:f5:7a:c7:c6:37:47:bf:0e:43:b9:3d:93:18:80:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7F:90:AB:42:AF:43:F1:91:D2:BB:62:CB:8A:B2:FF:DF:9C:0A:FF
            X509v3 Authority Key Identifier:
                keyid:1C:C7:41:ED:BB:A2:1B:D0:3B:47:90:A7:C9:50:3F:54:CA:16:1D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a3a2f33322d3438203d3e20323637303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:0e:1f:44:a2:b3:94:26:dc:4f:6c:6f:8f:d6:4e:0e:f0:
         64:02:d5:a5:2e:70:98:a0:47:42:a4:07:24:91:c7:10:b1:5d:
         fa:b3:33:85:e9:b0:e0:ee:08:4d:a2:a0:6f:54:1a:3b:4a:ae:
         e6:5e:ab:e8:6f:91:4e:05:21:ad:e5:c9:b8:5c:1a:0e:cf:09:
         36:70:8f:ce:ef:38:bf:2b:a4:dd:97:b4:8a:9e:ce:a3:e0:d7:
         4e:32:a2:0c:df:60:1a:85:4b:f4:1f:d5:98:ea:92:3e:41:e5:
         72:8f:c6:6c:5b:e2:42:5c:51:43:f5:8c:51:50:f0:75:fc:47:
         1d:e7:c5:4a:5a:c1:eb:ed:a7:47:27:74:ad:e0:90:d8:6e:e0:
         fa:11:d0:f7:c3:da:9d:8f:28:59:15:e7:b1:9c:0b:16:01:09:
         dc:97:3d:45:ce:fc:5d:86:68:86:4c:70:14:25:18:dc:ec:ce:
         3b:e5:00:d9:81:75:5a:b1:c9:71:5a:71:5c:e6:90:9d:ef:3d:
         96:68:65:79:2f:1e:c7:e8:25:ae:a3:8b:c6:f8:6d:a8:ed:25:
         86:7f:35:53:e4:cc:99:14:4d:59:cb:fd:81:5f:28:07:5f:8c:
         26:51:92:4e:84:10:3e:14:ec:56:82:52:fa:bd:0a:d8:64:47:
         21:94:04:4c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfGQvkZkF2nc2Tq7xbgmHI1LZtNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNDNzQxRURCQkEyMUJEMDNCNDc5MEE3Qzk1MDNGNTRD
QTE2MUQ3RDAeFw0yNDA4MjgxMzIyNTVaFw0yNTA4MjcxMzI3NTVaMDMxMTAvBgNV
BAMTKDc2N0Y5MEFCNDJBRjQzRjE5MUQyQkI2MkNCOEFCMkZGREY5QzBBRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsjAmtY3FUEYYdT72DLgPJHPQ
WD0kmka0/LmMX/9GpsmLLglIGK5SyI5D3eynFoeRIoB+XuzC39IMI+jRPYPCvhAP
aiCExFoZ7Z/qCqxthZjW+qJLUe0LlmPFZVoc+mPfX5veLRpcqPXWmZcByGGkeJss
ZB1tfs2y/7aK/Tz+YL7LFKkxrYdtpi11XGx7ofO76DEQiH02u4tXcByYYvzjrzp3
i39DKkdORwiU2J1ahL36ASM7Wun4KLUcg6C74xZ5sUT3sJ1d+1i0CG7F3z69Gjx1
b/US/fm6TdOFG0K7EqBJ207i5SAIzy6ILKgggPL1esfGN0e/DkO5PZMYgKpTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdn+Qq0KvQ/GR0rtiy4qy/9+cCv8wHwYDVR0j
BBgwFoAUHMdB7buiG9A7R5CnyVA/VMoWHX0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhBZHluRlVXdG82eDFnZnltTlZSNndqYk0xcGR2Mkdvb3R3SEVzVWRT
ZTYvMS8xQ0M3NDFFREJCQTIxQkQwM0I0NzkwQTdDOTUwM0Y1NENBMTYxRDdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQzc0MUVEQkJBMjFCRDAz
QjQ3OTBBN0M5NTAzRjU0Q0ExNjFEN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIQWR5bkZVV3RvNngxZ2Z5bU5WUjZ3amJNMXBkdjJHb290d0hFc1VkU2U2LzEv
MzIzODMwMzQzYTM0Mzc2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzAzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHyDANBgkqhkiG9w0BAQsFAAOCAQEAmsAOH0Si
s5Qm3E9sb4/WTg7wZALVpS5wmKBHQqQHJJHHELFd+rMzhemw4O4ITaKgb1QaO0qu
5l6r6G+RTgUhreXJuFwaDs8JNnCPzu84vyuk3Ze0ip7Oo+DXTjKiDN9gGoVL9B/V
mOqSPkHlco/GbFviQlxRQ/WMUVDwdfxHHefFSlrB6+2nRyd0reCQ2G7g+hHQ98Pa
nY8oWRXnsZwLFgEJ3Jc9Rc78XYZohkxwFCUY3OzOO+UA2YF1WrHJcVpxXOaQne89
lmhleS8ex+glrqOLxvhtqO0lhn81U+TMmRRNWcv9gV8oB1+MJlGSToQQPhTsVoJS
+r0K2GRHIZQETA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org