Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/323830343a373936633a3a2f33322d313238203d3e20323731333034.roa
File:                     323830343a373936633a3a2f33322d313238203d3e20323731333034.roa (raw, json)
Hash identifier:          1b1OBpwpLy23qwWX4S79s0D72JB/vjaC6hENWjZ7pwU=
Subject key identifier:   85:53:66:DE:49:B4:71:EC:44:B9:4F:EA:7D:0A:93:E4:DB:3A:98:4E
Certificate issuer:       /CN=FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89
Certificate serial:       3F30157D7C62D51540AD8963C84B4874B6B4E356
Authority key identifier: FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/323830343a373936633a3a2f33322d313238203d3e20323731333034.roa
Signing time:             Thu 25 Jul 2024 17:26:47 +0000
ROA not before:           Thu 25 Jul 2024 17:21:47 +0000
ROA not after:            Thu 24 Jul 2025 17:26:47 +0000
asID:                     271304
IP address blocks:        2804:796c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.crl
                          rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:15:7d:7c:62:d5:15:40:ad:89:63:c8:4b:48:74:b6:b4:e3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89
        Validity
            Not Before: Jul 25 17:21:47 2024 GMT
            Not After : Jul 24 17:26:47 2025 GMT
        Subject: CN=855366DE49B471EC44B94FEA7D0A93E4DB3A984E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:25:0b:6e:8c:d2:fa:05:72:11:4d:e5:20:
                    d3:65:5e:08:b5:56:5a:69:bf:8e:a6:3f:4a:db:2c:
                    11:61:2c:10:ff:e7:c2:4f:00:72:00:09:22:4e:90:
                    8a:ec:d6:6d:ba:22:2e:9a:0a:97:bb:f1:8b:ac:af:
                    71:cd:b5:28:67:8f:a2:cc:d6:ff:32:5a:21:9d:1c:
                    ab:b6:14:75:0e:a0:26:d5:ea:8b:55:34:91:bc:98:
                    a9:aa:b8:27:ee:04:14:2f:cb:51:32:75:90:78:53:
                    a3:05:64:68:58:3b:85:3f:14:41:a6:96:dc:6f:4e:
                    22:30:1d:b4:94:db:f2:b7:0b:0d:3b:6c:9b:a6:52:
                    88:5a:b8:42:fc:14:06:eb:4b:6a:37:ce:dc:2f:21:
                    c0:cf:e9:de:ad:e7:c4:05:fb:62:3d:35:7a:73:da:
                    24:2f:f6:3d:2d:7c:0c:41:e6:45:08:b3:45:fc:5b:
                    03:5d:2c:70:81:b6:92:f1:9e:83:4d:1a:fe:8f:10:
                    71:cf:f8:9e:84:a3:56:93:57:ed:dc:0f:bc:6e:b4:
                    14:fd:2b:9d:bf:bf:4a:a1:c3:21:11:82:bb:af:c2:
                    f4:eb:a9:a7:0e:50:28:a2:cb:10:76:1c:aa:18:06:
                    87:67:e7:9d:4e:95:25:53:19:67:1b:89:c4:b0:e7:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:53:66:DE:49:B4:71:EC:44:B9:4F:EA:7D:0A:93:E4:DB:3A:98:4E
            X509v3 Authority Key Identifier:
                keyid:FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/323830343a373936633a3a2f33322d313238203d3e20323731333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:796c::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:17:49:e9:29:85:79:dc:2a:50:88:8f:f5:74:a8:d6:39:f1:
         1b:fa:d4:c8:74:a9:41:24:1d:56:f8:0e:13:62:4b:36:88:d0:
         22:b6:b4:a2:ec:23:50:51:95:25:21:e6:8c:f6:4f:26:51:76:
         e0:e1:98:82:8f:ab:63:c0:5d:fd:61:21:a7:4e:7d:16:c0:c9:
         06:49:c9:77:e8:64:d4:c9:e5:48:88:6d:ec:4c:4d:cb:1b:fd:
         1d:bd:e5:43:7b:bf:ff:06:87:b3:c3:97:72:a1:6f:68:ad:4e:
         f5:e0:68:52:3b:f8:0e:07:40:b0:8a:82:24:d6:57:4d:34:55:
         8a:40:ee:f7:f6:1e:d7:93:c9:5c:4f:26:dd:16:62:ec:03:61:
         80:23:c1:7e:95:8e:8b:2a:96:16:95:fc:c1:b8:14:e2:11:09:
         6b:de:94:ca:08:a6:05:b2:aa:8a:0d:d4:dd:c8:c0:4b:c4:dd:
         19:05:46:ab:f8:6c:d8:89:2f:8c:55:eb:e8:b7:a5:71:18:32:
         83:39:a3:61:a8:fa:c9:9e:fd:03:3d:51:c5:0d:80:e0:82:6f:
         4a:f0:d5:05:95:e9:b4:11:6d:92:77:ae:36:70:87:20:46:fc:
         13:ce:1c:75:82:1a:b8:86:9d:2e:a3:87:a6:bd:f1:18:93:9f:
         f5:fe:72:af
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPzAVfXxi1RVArYljyEtIdLa041YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI2RDcxOTlCRkRGRTkyMjg4RjdCNDlGNjIxRkQwOUQy
RkY5RkU4OTAeFw0yNDA3MjUxNzIxNDdaFw0yNTA3MjQxNzI2NDdaMDMxMTAvBgNV
BAMTKDg1NTM2NkRFNDlCNDcxRUM0NEI5NEZFQTdEMEE5M0U0REIzQTk4NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVTiULbozS+gVyEU3lINNlXgi1
Vlppv46mP0rbLBFhLBD/58JPAHIACSJOkIrs1m26Ii6aCpe78Yusr3HNtShnj6LM
1v8yWiGdHKu2FHUOoCbV6otVNJG8mKmquCfuBBQvy1EydZB4U6MFZGhYO4U/FEGm
ltxvTiIwHbSU2/K3Cw07bJumUohauEL8FAbrS2o3ztwvIcDP6d6t58QF+2I9NXpz
2iQv9j0tfAxB5kUIs0X8WwNdLHCBtpLxnoNNGv6PEHHP+J6Eo1aTV+3cD7xutBT9
K52/v0qhwyERgruvwvTrqacOUCiiyxB2HKoYBodn551OlSVTGWcbicSw5yWTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUhVNm3km0cexEuU/qfQqT5Ns6mE4wHwYDVR0j
BBgwFoAU+21xmb/f6SKI97SfYh/QnS/5/okwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnlxNVBkNVNIb3dtRXdtcWRONGl2QkpUWkJMdjE0eWF6UmtXUnE2Qm16
VmUvMC9GQjZENzE5OUJGREZFOTIyODhGN0I0OUY2MjFGRDA5RDJGRjlGRTg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNkQ3MTk5QkZERkU5MjI4
OEY3QjQ5RjYyMUZEMDlEMkZGOUZFODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z5cTVQZDVTSG93bUV3bXFkTjRpdkJKVFpCTHYxNHlhelJrV1JxNkJtelZlLzAv
MzIzODMwMzQzYTM3MzkzNjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHlsMA0GCSqGSIb3DQEBCwUAA4IBAQADF0np
KYV53CpQiI/1dKjWOfEb+tTIdKlBJB1W+A4TYks2iNAitrSi7CNQUZUlIeaM9k8m
UXbg4ZiCj6tjwF39YSGnTn0WwMkGScl36GTUyeVIiG3sTE3LG/0dveVDe7//Boez
w5dyoW9orU714GhSO/gOB0CwioIk1ldNNFWKQO739h7Xk8lcTybdFmLsA2GAI8F+
lY6LKpYWlfzBuBTiEQlr3pTKCKYFsqqKDdTdyMBLxN0ZBUar+GzYiS+MVevot6Vx
GDKDOaNhqPrJnv0DPVHFDYDggm9K8NUFlem0EW2Sd642cIcgRvwTzhx1ghq4hp0u
o4emvfEYk5/1/nKv
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:44 2024 by rpki-client on console-fra.rpki-client.org