Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/323830343a376235303a3a2f33322d3438203d3e20323731343234.roa
File:                     323830343a376235303a3a2f33322d3438203d3e20323731343234.roa (raw, json)
Hash identifier:          p0woTYmz5aabPEFEVM1hya3flbjVx9nmq1baEUTpb9M=
Subject key identifier:   26:8E:56:91:9E:64:AB:89:11:F3:EB:F6:0A:88:EA:B3:1D:EB:C9:9B
Certificate issuer:       /CN=2887539E3355747F47C7CA2F86A1FFEF1A17FE08
Certificate serial:       249A9D5C5000C99ACEC491DDF9A2652AC4385C9C
Authority key identifier: 28:87:53:9E:33:55:74:7F:47:C7:CA:2F:86:A1:FF:EF:1A:17:FE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/323830343a376235303a3a2f33322d3438203d3e20323731343234.roa
Signing time:             Wed 03 Apr 2024 18:31:04 +0000
ROA not before:           Wed 03 Apr 2024 18:26:04 +0000
ROA not after:            Wed 02 Apr 2025 18:31:04 +0000
asID:                     271424
IP address blocks:        2804:7b50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.crl
                          rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9a:9d:5c:50:00:c9:9a:ce:c4:91:dd:f9:a2:65:2a:c4:38:5c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2887539E3355747F47C7CA2F86A1FFEF1A17FE08
        Validity
            Not Before: Apr  3 18:26:04 2024 GMT
            Not After : Apr  2 18:31:04 2025 GMT
        Subject: CN=268E56919E64AB8911F3EBF60A88EAB31DEBC99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:60:9e:fc:0e:1f:1b:90:23:4d:88:57:22:f6:
                    bc:f7:a5:42:42:8c:d9:d6:c7:7f:09:8c:cd:84:71:
                    a6:c1:b6:5f:d6:ce:3d:a5:89:81:4f:3e:ad:00:70:
                    83:2c:f9:38:23:3b:f3:fc:22:a2:79:54:35:13:66:
                    bb:44:89:ae:0a:65:38:11:1a:06:4d:da:54:7b:0b:
                    dd:0c:63:3a:a9:e5:d0:4a:f5:4f:0e:c1:9a:99:5a:
                    44:1c:7d:6b:01:b1:7b:8b:84:b4:51:20:9b:7e:81:
                    81:db:0e:4e:78:6f:35:32:1a:4e:e5:d3:36:d9:ff:
                    a2:21:90:c0:5e:32:34:1f:f8:d5:58:3f:8f:bc:0a:
                    d8:38:31:b5:36:90:64:47:a2:a2:26:36:f9:84:c7:
                    01:7a:fe:c7:6d:61:53:6d:5e:68:eb:83:3e:b8:1b:
                    48:b7:1a:73:1f:44:c3:61:9d:89:fe:f9:a6:73:ed:
                    78:c2:1d:e0:9c:06:8e:98:42:8e:22:31:2a:e7:30:
                    25:5e:13:dd:08:b2:dc:b2:9a:0b:80:28:ee:f4:1e:
                    97:d2:9b:c8:70:08:a9:57:06:1c:98:5f:5a:fa:f8:
                    2c:89:77:c2:c9:67:bf:07:72:7c:91:37:4a:d9:f1:
                    9c:9f:99:dd:a8:80:bf:17:7e:5c:8a:0f:a1:32:d5:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8E:56:91:9E:64:AB:89:11:F3:EB:F6:0A:88:EA:B3:1D:EB:C9:9B
            X509v3 Authority Key Identifier:
                keyid:28:87:53:9E:33:55:74:7F:47:C7:CA:2F:86:A1:FF:EF:1A:17:FE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/323830343a376235303a3a2f33322d3438203d3e20323731343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:08:7b:38:42:91:f4:41:19:bc:28:bf:86:99:ba:f8:fc:cf:
         c6:75:76:d6:40:e3:a6:c7:3c:8d:d4:84:35:bd:d7:e5:bf:09:
         e0:5a:1e:0f:ee:88:2d:ab:ed:d8:12:a1:40:4a:8d:d7:70:81:
         70:db:74:12:b7:e8:31:9c:c6:e2:5a:66:26:4c:47:69:d7:3b:
         4b:91:16:79:6e:f2:9e:e9:24:64:e4:85:70:cd:0f:ed:8d:ec:
         a9:9f:25:77:78:d8:ad:b8:4b:32:5c:8b:af:6d:04:a7:94:45:
         32:10:1d:0e:e4:27:35:ad:86:d9:f0:5e:5e:e0:e9:bc:d1:38:
         10:53:ba:f7:96:7d:5c:2a:67:82:28:39:fe:32:8b:4c:ca:8f:
         dd:33:af:af:06:31:8d:1c:40:bc:ac:9d:3c:b7:90:71:a9:04:
         f1:a1:8a:57:03:36:b7:c6:68:b9:e1:07:57:8a:63:b6:56:67:
         91:e5:e6:84:3b:7d:03:3b:13:97:5b:83:ee:35:bc:2c:27:bd:
         81:bb:0b:46:ec:f0:dc:0f:e2:20:96:23:5b:a1:f3:e5:fd:fb:
         db:c6:21:0d:e6:c9:e6:ad:83:97:9e:2c:85:8d:4f:a2:56:67:
         72:e6:87:17:5a:df:18:4f:45:9f:c9:90:79:ff:9d:21:d5:0a:
         6c:46:73:62
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJJqdXFAAyZrOxJHd+aJlKsQ4XJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg4NzUzOUUzMzU1NzQ3RjQ3QzdDQTJGODZBMUZGRUYx
QTE3RkUwODAeFw0yNDA0MDMxODI2MDRaFw0yNTA0MDIxODMxMDRaMDMxMTAvBgNV
BAMTKDI2OEU1NjkxOUU2NEFCODkxMUYzRUJGNjBBODhFQUIzMURFQkM5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfYJ78Dh8bkCNNiFci9rz3pUJC
jNnWx38JjM2EcabBtl/Wzj2liYFPPq0AcIMs+TgjO/P8IqJ5VDUTZrtEia4KZTgR
GgZN2lR7C90MYzqp5dBK9U8OwZqZWkQcfWsBsXuLhLRRIJt+gYHbDk54bzUyGk7l
0zbZ/6IhkMBeMjQf+NVYP4+8Ctg4MbU2kGRHoqImNvmExwF6/sdtYVNtXmjrgz64
G0i3GnMfRMNhnYn++aZz7XjCHeCcBo6YQo4iMSrnMCVeE90IstyymguAKO70HpfS
m8hwCKlXBhyYX1r6+CyJd8LJZ78HcnyRN0rZ8Zyfmd2ogL8XflyKD6Ey1ZL/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJo5WkZ5kq4kR8+v2Cojqsx3ryZswHwYDVR0j
BBgwFoAUKIdTnjNVdH9Hx8ovhqH/7xoX/ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0F2VlJEdUVYN0tmZjh0OENXbWtEbnk5V3k5V3B4QkRFOU54Y1VTQktY
QlYvMS8yODg3NTM5RTMzNTU3NDdGNDdDN0NBMkY4NkExRkZFRjFBMTdGRTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4ODc1MzlFMzM1NTc0N0Y0
N0M3Q0EyRjg2QTFGRkVGMUExN0ZFMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBdlZSRHVFWDdLZmY4dDhDV21rRG55OVd5OVdweEJERTlOeGNVU0JLWEJWLzEv
MzIzODMwMzQzYTM3NjIzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR7UDANBgkqhkiG9w0BAQsFAAOCAQEAAQh7OEKR
9EEZvCi/hpm6+PzPxnV21kDjpsc8jdSENb3X5b8J4FoeD+6ILavt2BKhQEqN13CB
cNt0ErfoMZzG4lpmJkxHadc7S5EWeW7ynukkZOSFcM0P7Y3sqZ8ld3jYrbhLMlyL
r20Ep5RFMhAdDuQnNa2G2fBeXuDpvNE4EFO695Z9XCpngig5/jKLTMqP3TOvrwYx
jRxAvKydPLeQcakE8aGKVwM2t8ZoueEHV4pjtlZnkeXmhDt9AzsTl1uD7jW8LCe9
gbsLRuzw3A/iIJYjW6Hz5f3728YhDebJ5q2Dl54shY1PolZncuaHF1rfGE9Fn8mQ
ef+dIdUKbEZzYg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org