Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a343030303a3a2f33342d3334203d3e20323731353239.roa
File:                     323830343a376366343a343030303a3a2f33342d3334203d3e20323731353239.roa (raw, json)
Hash identifier:          vxGliKFTOAo4BavoTRfIOPnuvTWA4XsFHHt9v4JPwLc=
Subject key identifier:   F0:6A:5B:87:6D:85:22:66:25:9E:00:19:70:A8:F1:28:0D:19:5B:8C
Certificate issuer:       /CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
Certificate serial:       78F53AC884647CB15B05100B899EF285DFFDA1B0
Authority key identifier: D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a343030303a3a2f33342d3334203d3e20323731353239.roa
Signing time:             Thu 15 Aug 2024 20:01:32 +0000
ROA not before:           Thu 15 Aug 2024 19:56:32 +0000
ROA not after:            Thu 14 Aug 2025 20:01:32 +0000
asID:                     271529
IP address blocks:        2804:7cf4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl
                          rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:3a:c8:84:64:7c:b1:5b:05:10:0b:89:9e:f2:85:df:fd:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
        Validity
            Not Before: Aug 15 19:56:32 2024 GMT
            Not After : Aug 14 20:01:32 2025 GMT
        Subject: CN=F06A5B876D852266259E001970A8F1280D195B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:04:6c:bb:b1:12:d9:87:4b:6f:40:14:f3:
                    70:59:1f:8f:8a:2c:d4:78:4f:01:4d:e4:40:1c:82:
                    6a:30:24:97:93:68:d1:3d:e6:1c:80:77:29:62:1a:
                    c9:a7:ce:be:a6:ae:a9:b2:51:1d:58:de:46:9b:97:
                    24:7c:95:51:c1:b5:96:9b:ce:69:f8:6d:25:cc:55:
                    13:85:89:24:f1:e5:c1:d4:47:a0:9b:4b:dd:33:e9:
                    ab:82:f7:bb:55:d5:32:d7:98:5f:c2:12:b4:5b:15:
                    fa:c5:06:bf:a3:77:7e:c2:e3:2d:b8:d1:e8:da:a5:
                    ad:4f:c0:27:7e:4e:3f:b4:28:d1:96:91:8a:0c:58:
                    e6:b8:d7:b0:6b:42:15:22:57:67:8d:e8:6a:82:21:
                    fe:af:5c:d1:b9:ee:f8:31:31:56:a9:bb:49:be:84:
                    7e:45:2d:51:67:5f:c0:59:65:2a:9e:b6:c5:1b:8c:
                    8d:6c:4d:65:ef:76:a3:f0:06:9a:66:6e:4a:9e:46:
                    86:45:64:cd:0b:2b:2a:d2:09:8b:56:85:07:a1:0e:
                    10:e3:5d:c3:16:ce:08:51:ff:d8:f2:36:37:bc:56:
                    5e:90:f0:c0:f5:ad:9c:42:45:44:14:dc:a5:4e:f5:
                    59:58:be:f0:5a:31:7e:1b:f4:ff:1b:de:2b:b5:d8:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6A:5B:87:6D:85:22:66:25:9E:00:19:70:A8:F1:28:0D:19:5B:8C
            X509v3 Authority Key Identifier:
                keyid:D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a343030303a3a2f33342d3334203d3e20323731353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cf4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:42:73:65:e1:f3:d6:d8:a2:fb:e6:7e:d6:29:ca:9a:d6:
         78:61:f8:ba:30:48:f7:cb:ef:a6:e2:8d:97:81:20:52:8f:ac:
         a1:72:c3:5e:70:7f:84:d6:ab:b9:cd:cf:56:77:46:b7:8d:cc:
         9d:35:d8:2c:9d:43:c1:4e:3f:b2:a9:3d:56:7b:58:77:9e:1c:
         eb:56:ce:c6:b0:6a:5b:b3:ac:c3:bd:8b:0a:1d:34:71:79:ec:
         1a:40:7f:e2:25:6f:c9:ce:23:5a:5f:15:68:01:62:28:55:70:
         fb:b9:de:57:86:f2:95:2b:e8:ec:87:9d:6c:ee:4a:2b:a3:06:
         f5:44:7f:8c:97:bc:33:f5:30:f2:8c:2e:fe:cd:8f:40:6a:35:
         ef:ea:a8:a9:6f:92:9f:35:59:da:c1:57:84:41:05:22:7b:00:
         0a:1a:40:41:e4:6b:de:12:f1:9f:c7:1e:0a:82:3a:1b:0b:f8:
         82:43:83:78:aa:7b:c6:be:7b:04:a8:4b:b4:c8:a5:64:ce:45:
         87:ca:41:ce:5b:3a:b6:ed:d6:91:66:67:b5:71:cc:ec:ba:04:
         a5:63:f5:dd:bd:8f:44:c0:aa:e9:69:9f:f9:d0:fb:fd:88:f7:
         ac:12:58:6a:4e:fd:3c:54:8a:8d:ce:a7:56:b0:e0:01:88:3c:
         9f:40:57:4a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUePU6yIRkfLFbBRALiZ7yhd/9obAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZFNjI5NEQxRDk1MDJGM0M3RjVGODk0QjU5NzgzNzc3
OUI4RDNFMDAeFw0yNDA4MTUxOTU2MzJaFw0yNTA4MTQyMDAxMzJaMDMxMTAvBgNV
BAMTKEYwNkE1Qjg3NkQ4NTIyNjYyNTlFMDAxOTcwQThGMTI4MEQxOTVCOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NgRsu7ES2YdLb0AU83BZH4+K
LNR4TwFN5EAcgmowJJeTaNE95hyAdyliGsmnzr6mrqmyUR1Y3kablyR8lVHBtZab
zmn4bSXMVROFiSTx5cHUR6CbS90z6auC97tV1TLXmF/CErRbFfrFBr+jd37C4y24
0ejapa1PwCd+Tj+0KNGWkYoMWOa417BrQhUiV2eN6GqCIf6vXNG57vgxMVapu0m+
hH5FLVFnX8BZZSqetsUbjI1sTWXvdqPwBppmbkqeRoZFZM0LKyrSCYtWhQehDhDj
XcMWzghR/9jyNje8Vl6Q8MD1rZxCRUQU3KVO9VlYvvBaMX4b9P8b3iu12KCJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8Gpbh22FImYlngAZcKjxKA0ZW4wwHwYDVR0j
BBgwFoAU1uYpTR2VAvPH9fiUtZeDd3m40+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRml5cDVGNVFzek1Zb2ZieFp6OUt3WnZuQlZxU05FZFd0NGdNcVVES2k4
dVIvMC9ENkU2Mjk0RDFEOTUwMkYzQzdGNUY4OTRCNTk3ODM3Nzc5QjhEM0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RTYyOTREMUQ5NTAyRjND
N0Y1Rjg5NEI1OTc4Mzc3NzlCOEQzRTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpeXA1RjVRc3pNWW9mYnhaejlLd1p2bkJWcVNORWRXdDRnTXFVREtpOHVSLzAv
MzIzODMwMzQzYTM3NjM2NjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTM1MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEfPRAMA0GCSqGSIb3DQEBCwUA
A4IBAQBOx0JzZeHz1tii++Z+1inKmtZ4Yfi6MEj3y++m4o2XgSBSj6yhcsNecH+E
1qu5zc9Wd0a3jcydNdgsnUPBTj+yqT1We1h3nhzrVs7GsGpbs6zDvYsKHTRxeewa
QH/iJW/JziNaXxVoAWIoVXD7ud5XhvKVK+jsh51s7korowb1RH+Ml7wz9TDyjC7+
zY9AajXv6qipb5KfNVnawVeEQQUiewAKGkBB5GveEvGfxx4KgjobC/iCQ4N4qnvG
vnsEqEu0yKVkzkWHykHOWzq27daRZme1cczsugSlY/XdvY9EwKrpaZ/50Pv9iPes
ElhqTv08VIqNzqdWsOABiDyfQFdK
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:56 2024 by rpki-client on console-ams.rpki-client.org