Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/323830343a383033383a3a2f33322d3430203d3e20323731373337.roa
File:                     323830343a383033383a3a2f33322d3430203d3e20323731373337.roa (raw, json)
Hash identifier:          BLYB1qAjt3JNbKSiwOjyu2LQO1g0eezlyIgAfJbI010=
Subject key identifier:   7A:18:F3:4F:DD:A3:8C:67:96:77:9A:0C:8C:A2:EA:39:E3:3D:46:EF
Certificate issuer:       /CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
Certificate serial:       1B3421F7160BEFB035D97EC5D7700DF5DE46AF09
Authority key identifier: 92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/323830343a383033383a3a2f33322d3430203d3e20323731373337.roa
Signing time:             Mon 09 Sep 2024 19:20:05 +0000
ROA not before:           Mon 09 Sep 2024 19:15:05 +0000
ROA not after:            Mon 08 Sep 2025 19:20:05 +0000
asID:                     271737
IP address blocks:        2804:8038::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl
                          rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:34:21:f7:16:0b:ef:b0:35:d9:7e:c5:d7:70:0d:f5:de:46:af:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
        Validity
            Not Before: Sep  9 19:15:05 2024 GMT
            Not After : Sep  8 19:20:05 2025 GMT
        Subject: CN=7A18F34FDDA38C6796779A0C8CA2EA39E33D46EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:60:ee:50:37:56:03:7e:08:c2:6b:7e:9f:
                    5c:92:11:11:95:f0:36:4a:82:48:37:2d:b9:a4:18:
                    19:f4:e5:8a:6a:68:c3:b3:1a:d0:6c:3c:dc:56:de:
                    9e:d4:7f:3c:63:fa:e8:85:c4:b8:55:1d:5e:b1:6a:
                    02:7e:42:4d:2d:90:0f:d3:34:71:9a:30:e9:d1:10:
                    96:c4:5b:fe:21:7a:96:45:23:0e:a8:1f:42:be:90:
                    c0:e6:2c:c8:91:63:c3:e9:a1:89:ef:7f:3b:35:65:
                    20:99:20:20:e0:4f:6c:f2:bc:b1:e8:45:2b:23:7d:
                    c5:a5:15:c9:0d:3b:67:bd:59:31:09:aa:b6:03:f8:
                    d1:e8:da:fe:36:4e:0c:66:4d:31:f8:63:44:24:d4:
                    9f:ac:37:ca:48:8e:1d:30:7c:64:d2:3a:65:08:f2:
                    a1:15:51:3d:b3:4b:95:72:07:6e:34:16:3b:95:31:
                    30:71:8e:8d:da:6b:e7:e6:69:40:f0:5d:5a:d4:45:
                    3b:a9:98:95:5d:d8:8c:9b:23:f9:d0:21:af:8b:ee:
                    f4:c7:ec:ed:e0:7c:62:40:d7:2c:5c:7a:13:66:11:
                    d9:14:f0:54:e5:89:b6:c0:78:7b:b7:e2:52:a6:14:
                    23:94:68:d8:05:10:80:3e:10:2c:c2:5b:29:32:e5:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:18:F3:4F:DD:A3:8C:67:96:77:9A:0C:8C:A2:EA:39:E3:3D:46:EF
            X509v3 Authority Key Identifier:
                keyid:92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/323830343a383033383a3a2f33322d3430203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8038::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:66:30:ad:a3:8b:7f:c1:54:f7:05:dd:e5:4d:64:d1:ae:38:
         5f:bb:06:1e:10:67:d0:8f:a0:58:da:fd:c6:6f:a9:84:f8:c1:
         c0:a6:2f:ee:6b:d4:73:e0:86:ae:bd:d1:1f:7c:4f:75:f4:a4:
         4e:6a:e7:7e:18:79:17:7e:8e:96:b6:d2:58:3c:85:39:dc:ba:
         14:82:40:dc:c7:1f:22:56:a2:4c:61:a6:30:c5:a8:58:b6:72:
         e6:eb:17:e1:e6:b7:39:38:84:40:42:73:ce:8a:59:8d:d0:eb:
         a8:31:ac:c6:bd:43:7d:9b:48:39:45:25:0a:5b:ba:e2:1f:2a:
         77:97:e8:1d:e1:5a:6a:aa:b1:62:73:ef:97:83:ed:01:cb:f4:
         11:1c:29:f1:c4:60:a3:4d:81:3c:74:96:af:70:e3:6e:b0:30:
         ab:c8:61:a1:6e:5d:41:73:87:8d:f4:bb:0e:26:ca:e0:63:1d:
         5c:02:3f:68:7a:a2:96:93:8e:2a:11:fc:0a:d1:a7:ed:31:c8:
         9d:cb:f0:44:d1:f6:14:39:1a:03:07:16:34:46:0a:38:a7:19:
         6c:f4:84:41:9a:ff:ad:eb:4f:42:af:36:83:98:a1:71:fb:93:
         8f:b0:03:e0:78:cc:32:41:5c:b0:7b:03:1e:23:c3:84:fa:3b:
         e0:0e:6a:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGzQh9xYL77A12X7F13AN9d5GrwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCQTA2NUM4NUI1QzI2NDNFMEZEMjdGMEM0MjA1MUZE
QjM5OUFDNTAeFw0yNDA5MDkxOTE1MDVaFw0yNTA5MDgxOTIwMDVaMDMxMTAvBgNV
BAMTKDdBMThGMzRGRERBMzhDNjc5Njc3OUEwQzhDQTJFQTM5RTMzRDQ2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd82DuUDdWA34Iwmt+n1ySERGV
8DZKgkg3LbmkGBn05YpqaMOzGtBsPNxW3p7Ufzxj+uiFxLhVHV6xagJ+Qk0tkA/T
NHGaMOnREJbEW/4hepZFIw6oH0K+kMDmLMiRY8PpoYnvfzs1ZSCZICDgT2zyvLHo
RSsjfcWlFckNO2e9WTEJqrYD+NHo2v42TgxmTTH4Y0Qk1J+sN8pIjh0wfGTSOmUI
8qEVUT2zS5VyB240FjuVMTBxjo3aa+fmaUDwXVrURTupmJVd2IybI/nQIa+L7vTH
7O3gfGJA1yxcehNmEdkU8FTlibbAeHu34lKmFCOUaNgFEIA+ECzCWyky5S7xAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUehjzT92jjGeWd5oMjKLqOeM9Ru8wHwYDVR0j
BBgwFoAUkroGXIW1wmQ+D9J/DEIFH9s5msUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmZWSnFYaUtHMVFUQTV0aHNqSDV6VkprTHY5cHE0dXNvbm1iV3g1QXNW
QlUvMi85MkJBMDY1Qzg1QjVDMjY0M0UwRkQyN0YwQzQyMDUxRkRCMzk5QUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyQkEwNjVDODVCNUMyNjQz
RTBGRDI3RjBDNDIwNTFGREIzOTlBQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZmVkpxWGlLRzFRVEE1dGhzakg1elZKa0x2OXBxNHVzb25tYld4NUFzVkJVLzIv
MzIzODMwMzQzYTM4MzAzMzM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNzMx
MzczMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASAODANBgkqhkiG9w0BAQsFAAOCAQEAYmYwraOL
f8FU9wXd5U1k0a44X7sGHhBn0I+gWNr9xm+phPjBwKYv7mvUc+CGrr3RH3xPdfSk
Tmrnfhh5F36OlrbSWDyFOdy6FIJA3McfIlaiTGGmMMWoWLZy5usX4ea3OTiEQEJz
zopZjdDrqDGsxr1DfZtIOUUlClu64h8qd5foHeFaaqqxYnPvl4PtAcv0ERwp8cRg
o02BPHSWr3DjbrAwq8hhoW5dQXOHjfS7DibK4GMdXAI/aHqilpOOKhH8CtGn7THI
ncvwRNH2FDkaAwcWNEYKOKcZbPSEQZr/retPQq82g5ihcfuTj7AD4HjMMkFcsHsD
HiPDhPo74A5qaw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:43 2024 by rpki-client on console-ams.rpki-client.org