Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/323830343a323531303a3a2f33322d3438203d3e20323634323537.roa
File:                     323830343a323531303a3a2f33322d3438203d3e20323634323537.roa (raw, json)
Hash identifier:          7+9JpTlOdX5WWhuoXEU4WpS4Vicz1YrSvaK8YyhDjzk=
Subject key identifier:   24:79:EB:90:1C:80:72:2F:35:6D:39:A8:1E:EF:2F:9C:66:0A:4F:A3
Certificate issuer:       /CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423
Certificate serial:       602059CF52A4AD44037BA28CD86B377337AE4739
Authority key identifier: 8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/323830343a323531303a3a2f33322d3438203d3e20323634323537.roa
Signing time:             Fri 08 Nov 2024 19:08:20 +0000
ROA not before:           Fri 08 Nov 2024 19:03:20 +0000
ROA not after:            Fri 07 Nov 2025 19:08:20 +0000
asID:                     264257
IP address blocks:        2804:2510::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl
                          rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:20:59:cf:52:a4:ad:44:03:7b:a2:8c:d8:6b:37:73:37:ae:47:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423
        Validity
            Not Before: Nov  8 19:03:20 2024 GMT
            Not After : Nov  7 19:08:20 2025 GMT
        Subject: CN=2479EB901C80722F356D39A81EEF2F9C660A4FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9e:bc:79:9d:16:ba:e0:a8:35:8a:3b:c6:3d:
                    26:00:1c:e5:6a:92:0f:61:15:d3:91:9c:d3:49:15:
                    9b:a4:6a:cc:72:1f:b6:0b:25:69:24:a1:a1:51:de:
                    7a:cf:e0:fe:c2:4e:7e:04:ed:a5:ba:c0:41:e2:fb:
                    9b:c3:05:aa:09:c9:b8:d9:4d:36:38:8c:4e:f4:20:
                    40:b2:e8:90:97:2b:2a:fd:d6:77:ad:a6:d6:0c:ea:
                    da:a2:96:42:81:27:90:c5:13:f7:c3:8a:c2:29:76:
                    64:f0:0a:97:f1:7a:c5:1b:a8:14:3e:33:2d:a4:95:
                    dc:b5:81:7b:97:1f:fc:04:f8:da:f4:c2:1f:27:b3:
                    2c:35:2a:ae:9c:80:55:c1:5c:4e:f7:9c:df:eb:49:
                    99:b6:2d:c9:35:53:b7:fa:9b:84:d6:5a:6d:b4:93:
                    bd:27:e2:61:97:5e:e0:ed:32:2b:6e:c7:31:59:50:
                    e2:2c:b2:f8:87:af:85:8c:34:88:b4:bc:13:b4:a4:
                    b8:54:f1:fa:31:96:eb:56:f7:9b:52:d4:5f:28:64:
                    b0:7a:41:23:ac:9a:df:bd:44:34:85:a0:a0:2e:bc:
                    d8:35:e7:c3:7e:a3:3a:f1:ba:81:d1:a9:54:e3:93:
                    e9:d8:dc:57:13:f8:09:2b:7c:8b:dc:84:3d:ce:a8:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:EB:90:1C:80:72:2F:35:6D:39:A8:1E:EF:2F:9C:66:0A:4F:A3
            X509v3 Authority Key Identifier:
                keyid:8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/323830343a323531303a3a2f33322d3438203d3e20323634323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2510::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:06:5b:df:3a:83:d6:50:55:83:5d:c4:e5:28:5d:56:09:54:
         4f:05:02:0a:df:e4:a8:05:82:41:32:dd:1f:ff:8b:37:24:34:
         1a:ff:0e:e2:aa:ab:ca:20:d2:35:27:77:56:af:09:d7:1a:73:
         87:64:41:ef:4f:17:53:08:64:57:3b:f2:00:13:5d:32:80:ae:
         dc:2d:ed:d1:ac:b5:f6:3b:48:21:c0:4b:03:c4:d7:1b:9f:31:
         48:46:4b:29:e5:a4:12:ee:31:fd:b7:4c:9c:a9:59:bb:24:a4:
         ab:99:06:51:b8:27:d7:30:d9:b4:b2:ae:0d:58:c8:75:7d:5b:
         80:d1:d3:fe:05:26:fc:81:8f:c2:62:b5:ff:5f:df:15:66:5b:
         d4:65:05:a0:a0:ee:e1:a8:51:d5:f7:99:7f:c1:81:d3:20:77:
         7a:7a:5f:77:20:21:fc:80:78:76:b3:14:16:8c:7c:39:f5:da:
         47:c0:ad:86:19:e6:0f:3f:db:62:1b:11:98:9c:ea:84:77:7c:
         54:13:2e:4f:68:b4:6b:14:43:bf:2e:4f:90:d9:b0:e2:ce:59:
         28:7a:b7:6f:ff:42:18:25:fb:22:4a:61:88:58:b7:d6:03:e5:
         a0:d6:31:0f:e8:ec:ad:37:2a:0a:c8:21:89:e5:84:08:d2:05:
         b9:63:85:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYCBZz1KkrUQDe6KM2Gs3czeuRzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERFNTRCMEIyM0E1QUVDMDI4MUFGQzYwOTk1QkJDRTEx
M0E5MjQyMzAeFw0yNDExMDgxOTAzMjBaFw0yNTExMDcxOTA4MjBaMDMxMTAvBgNV
BAMTKDI0NzlFQjkwMUM4MDcyMkYzNTZEMzlBODFFRUYyRjlDNjYwQTRGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrnrx5nRa64Kg1ijvGPSYAHOVq
kg9hFdORnNNJFZukasxyH7YLJWkkoaFR3nrP4P7CTn4E7aW6wEHi+5vDBaoJybjZ
TTY4jE70IECy6JCXKyr91netptYM6tqilkKBJ5DFE/fDisIpdmTwCpfxesUbqBQ+
My2kldy1gXuXH/wE+Nr0wh8nsyw1Kq6cgFXBXE73nN/rSZm2Lck1U7f6m4TWWm20
k70n4mGXXuDtMituxzFZUOIssviHr4WMNIi0vBO0pLhU8foxlutW95tS1F8oZLB6
QSOsmt+9RDSFoKAuvNg158N+ozrxuoHRqVTjk+nY3FcT+AkrfIvchD3OqNLNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJHnrkByAci81bTmoHu8vnGYKT6MwHwYDVR0j
BBgwFoAUjeVLCyOlrsAoGvxgmVu84ROpJCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlw
OFYvMS84REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTU0QjBCMjNBNUFFQzAy
ODFBRkM2MDk5NUJCQ0UxMTNBOTI0MjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dEZlJwUWdTRUpqd0JnNXBHSzhOcDR4Nzc5YzdDWkNaQkFFMjRBUE5pcDhWLzEv
MzIzODMwMzQzYTMyMzUzMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQlEDANBgkqhkiG9w0BAQsFAAOCAQEABAZb3zqD
1lBVg13E5ShdVglUTwUCCt/kqAWCQTLdH/+LNyQ0Gv8O4qqryiDSNSd3Vq8J1xpz
h2RB708XUwhkVzvyABNdMoCu3C3t0ay19jtIIcBLA8TXG58xSEZLKeWkEu4x/bdM
nKlZuySkq5kGUbgn1zDZtLKuDVjIdX1bgNHT/gUm/IGPwmK1/1/fFWZb1GUFoKDu
4ahR1feZf8GB0yB3enpfdyAh/IB4drMUFox8OfXaR8CthhnmDz/bYhsRmJzqhHd8
VBMuT2i0axRDvy5PkNmw4s5ZKHq3b/9CGCX7IkphiFi31gPloNYxD+jsrTcqCsgh
ieWECNIFuWOFsg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:05 2024 by rpki-client on console-fra.rpki-client.org