Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa
File:                     323830343a353932633a3a2f33332d3333203d3e20323638313733.roa (raw, json)
Hash identifier:          xtWRPgPLIUgMNN/QmbkF4VZIf6cHMJpzHj57TsHj2Wc=
Subject key identifier:   EB:C4:36:A4:45:7C:20:DA:F1:A6:B9:44:5C:31:1B:79:F6:36:D7:24
Certificate issuer:       /CN=99A78712ED297A370E4987A326F3177259C4BC40
Certificate serial:       47780CD48F217F4836B5B648C5FCA95A1FCA30FC
Authority key identifier: 99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa
Signing time:             Wed 03 Apr 2024 18:33:07 +0000
ROA not before:           Wed 03 Apr 2024 18:28:07 +0000
ROA not after:            Wed 02 Apr 2025 18:33:07 +0000
asID:                     268173
IP address blocks:        2804:592c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:78:0c:d4:8f:21:7f:48:36:b5:b6:48:c5:fc:a9:5a:1f:ca:30:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A78712ED297A370E4987A326F3177259C4BC40
        Validity
            Not Before: Apr  3 18:28:07 2024 GMT
            Not After : Apr  2 18:33:07 2025 GMT
        Subject: CN=EBC436A4457C20DAF1A6B9445C311B79F636D724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:42:d4:96:4f:4e:63:a6:d8:8d:16:9c:75:
                    f7:eb:cf:68:df:f0:ae:a2:d1:81:9b:62:e1:e6:6f:
                    e7:d4:47:0e:a8:51:b7:58:a0:30:ea:ab:e1:e5:6e:
                    e0:30:e8:2d:2e:16:ba:84:e4:1a:57:2a:00:b6:ab:
                    4f:d7:32:bb:99:0e:d6:b0:44:30:47:f4:05:6f:8a:
                    e1:4b:ec:d5:6d:e2:94:8b:dc:6d:d2:1b:ca:99:b0:
                    64:36:65:5a:9e:68:eb:44:c4:0e:18:1a:5c:f3:dc:
                    6c:22:2a:0c:3a:06:c4:5b:db:6f:db:93:21:50:3b:
                    8d:2f:cf:57:78:12:41:8c:c3:2a:78:16:ff:9c:bc:
                    5d:8e:09:f7:7a:81:8d:3c:7d:b7:ab:7e:85:72:c7:
                    a9:27:e7:46:e5:56:e4:0b:13:74:88:a7:72:24:78:
                    33:86:5b:72:cf:33:c3:f1:a7:8e:49:30:8d:b1:7d:
                    a7:ea:3c:e0:67:aa:fd:df:58:58:a6:1f:74:01:9b:
                    a7:b8:e8:84:64:cf:cb:d9:de:06:59:8e:3e:7e:b8:
                    d4:7b:5e:64:d8:bb:e7:7e:6f:0f:ba:67:7c:68:e2:
                    0c:ac:11:3a:47:c6:c7:ed:b1:26:ab:f5:44:24:fb:
                    8e:1a:22:17:b2:14:81:3d:e9:10:bc:14:2b:97:7f:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:36:A4:45:7C:20:DA:F1:A6:B9:44:5C:31:1B:79:F6:36:D7:24
            X509v3 Authority Key Identifier:
                keyid:99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:592c::/33

    Signature Algorithm: sha256WithRSAEncryption
         82:94:52:a0:8b:44:1f:bf:1d:6b:e5:02:35:44:d7:72:a2:99:
         23:3f:ee:30:4a:10:13:e9:4b:68:93:44:ae:76:94:40:3d:8f:
         bd:0c:c6:11:2b:11:d1:9d:02:cd:5b:db:61:65:0c:8c:f3:dc:
         55:f7:3c:d6:e9:f3:a8:5a:1a:5e:b1:9a:11:37:44:a4:aa:ae:
         d8:13:b2:53:16:d5:e4:22:f0:2a:28:ba:a5:e7:57:7a:ef:eb:
         ac:ce:56:7a:f3:25:08:93:c0:f2:1b:18:0f:b0:54:26:c3:2a:
         27:82:5e:31:7f:a9:47:73:af:a7:65:9d:21:e9:9f:45:f0:ef:
         ed:cf:40:42:60:42:8f:ba:14:74:4d:de:5b:22:b3:86:18:29:
         d4:e5:28:f1:8d:06:d3:7b:d8:9b:af:28:9b:67:0d:d3:7f:bb:
         b4:fd:1c:f6:56:77:7f:00:66:a0:46:39:cf:53:46:0b:5b:66:
         78:b6:83:5f:51:29:de:fb:d2:72:90:ee:66:d0:2e:cf:bf:9d:
         52:27:59:78:29:5f:49:ce:d3:1e:c0:25:1e:99:3f:e4:02:15:
         22:a7:5d:8d:41:10:61:bd:e3:4d:af:85:b9:34:96:4e:e8:21:
         26:8c:ae:1e:fc:e2:07:72:82:1a:01:7d:63:75:ff:d6:75:b7:
         d7:3d:6c:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR3gM1I8hf0g2tbZIxfypWh/KMPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBNzg3MTJFRDI5N0EzNzBFNDk4N0EzMjZGMzE3NzI1
OUM0QkM0MDAeFw0yNDA0MDMxODI4MDdaFw0yNTA0MDIxODMzMDdaMDMxMTAvBgNV
BAMTKEVCQzQzNkE0NDU3QzIwREFGMUE2Qjk0NDVDMzExQjc5RjYzNkQ3MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVaULUlk9OY6bYjRacdffrz2jf
8K6i0YGbYuHmb+fURw6oUbdYoDDqq+HlbuAw6C0uFrqE5BpXKgC2q0/XMruZDtaw
RDBH9AVviuFL7NVt4pSL3G3SG8qZsGQ2ZVqeaOtExA4YGlzz3GwiKgw6BsRb22/b
kyFQO40vz1d4EkGMwyp4Fv+cvF2OCfd6gY08fberfoVyx6kn50blVuQLE3SIp3Ik
eDOGW3LPM8Pxp45JMI2xfafqPOBnqv3fWFimH3QBm6e46IRkz8vZ3gZZjj5+uNR7
XmTYu+d+bw+6Z3xo4gysETpHxsftsSar9UQk+44aIheyFIE96RC8FCuXfwKnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU68Q2pEV8INrxprlEXDEbefY21yQwHwYDVR0j
BBgwFoAUmaeHEu0pejcOSYejJvMXclnEvEAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFCVnlpY25xNzE1aExmOUFla1dTWWNjUmFpbWZRTHhiSHBQWkt3QVVG
OFIvMS85OUE3ODcxMkVEMjk3QTM3MEU0OTg3QTMyNkYzMTc3MjU5QzRCQzQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QTc4NzEyRUQyOTdBMzcw
RTQ5ODdBMzI2RjMxNzcyNTlDNEJDNDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhQlZ5aWNucTcxNWhMZjlBZWtXU1ljY1JhaW1mUUx4YkhwUFpLd0FVRjhSLzEv
MzIzODMwMzQzYTM1MzkzMjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzEzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARZLAAwDQYJKoZIhvcNAQELBQADggEBAIKUUqCL
RB+/HWvlAjVE13KimSM/7jBKEBPpS2iTRK52lEA9j70MxhErEdGdAs1b22FlDIzz
3FX3PNbp86haGl6xmhE3RKSqrtgTslMW1eQi8CoouqXnV3rv66zOVnrzJQiTwPIb
GA+wVCbDKieCXjF/qUdzr6dlnSHpn0Xw7+3PQEJgQo+6FHRN3lsis4YYKdTlKPGN
BtN72JuvKJtnDdN/u7T9HPZWd38AZqBGOc9TRgtbZni2g19RKd770nKQ7mbQLs+/
nVInWXgpX0nO0x7AJR6ZP+QCFSKnXY1BEGG9402vhbk0lk7oISaMrh784gdyghoB
fWN1/9Z1t9c9bJA=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org