Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/323830343a376639633a3a2f33322d3332203d3e20323731363938.roa
File:                     323830343a376639633a3a2f33322d3332203d3e20323731363938.roa (raw, json)
Hash identifier:          OkCbCm58wDOqT0rlz1EhSq3nO/fmV2wncZO3mE7M76c=
Subject key identifier:   85:9F:AA:A0:04:F5:51:F1:05:49:CE:21:7E:10:03:B1:7F:9A:83:AE
Certificate issuer:       /CN=1EDEB86219784F12E4BCD4D1AE98F91E490B528E
Certificate serial:       72A50246CA22A1DDFE41E51109FEE23A59C46821
Authority key identifier: 1E:DE:B8:62:19:78:4F:12:E4:BC:D4:D1:AE:98:F9:1E:49:0B:52:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/323830343a376639633a3a2f33322d3332203d3e20323731363938.roa
Signing time:             Thu 18 Jul 2024 14:38:30 +0000
ROA not before:           Thu 18 Jul 2024 14:33:30 +0000
ROA not after:            Thu 17 Jul 2025 14:38:30 +0000
asID:                     271698
IP address blocks:        2804:7f9c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.crl
                          rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a5:02:46:ca:22:a1:dd:fe:41:e5:11:09:fe:e2:3a:59:c4:68:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EDEB86219784F12E4BCD4D1AE98F91E490B528E
        Validity
            Not Before: Jul 18 14:33:30 2024 GMT
            Not After : Jul 17 14:38:30 2025 GMT
        Subject: CN=859FAAA004F551F10549CE217E1003B17F9A83AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:11:1c:67:e1:0b:a6:21:6b:7d:51:9f:3a:
                    72:75:08:17:94:f1:cc:83:bf:2a:05:09:4d:8a:f8:
                    24:00:2f:ac:8e:6f:96:03:18:2d:0a:cc:0b:ba:e4:
                    f3:9e:d2:25:90:f9:c9:ce:36:8c:9c:17:11:77:54:
                    dc:75:aa:79:99:09:bf:39:24:9c:0e:f0:92:bc:b5:
                    37:2f:85:27:e8:52:b4:ad:85:91:b6:90:30:5a:99:
                    83:59:7b:71:1b:9f:e8:aa:9f:a7:bb:99:2d:e3:50:
                    6f:d1:91:6a:c7:e9:fc:48:e3:52:f4:a2:82:61:47:
                    b4:39:af:4c:0b:9d:26:46:5e:ef:9c:9a:f6:42:44:
                    e1:b9:b7:35:9f:f9:ac:69:a5:7d:19:44:ec:c1:1b:
                    de:d7:ad:07:bc:1f:79:c2:df:96:ec:96:84:ad:7f:
                    58:51:45:0a:19:8c:31:60:04:50:c2:f7:b5:3d:9e:
                    e0:d3:4e:e8:c6:cf:6c:a4:76:63:9f:11:c5:e4:d0:
                    da:02:ca:4a:8c:43:14:54:16:1e:c4:3c:29:c7:6b:
                    01:e5:d6:8d:9c:6a:c3:06:90:73:3e:2f:38:a1:1e:
                    ae:d7:de:76:dd:9c:c5:2e:1a:63:d9:38:04:85:79:
                    98:30:1d:aa:4c:03:a8:4d:06:70:99:35:3c:93:b5:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9F:AA:A0:04:F5:51:F1:05:49:CE:21:7E:10:03:B1:7F:9A:83:AE
            X509v3 Authority Key Identifier:
                keyid:1E:DE:B8:62:19:78:4F:12:E4:BC:D4:D1:AE:98:F9:1E:49:0B:52:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/323830343a376639633a3a2f33322d3332203d3e20323731363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d1:ae:d6:9d:dd:1d:3a:2c:af:99:7e:99:39:e2:80:1a:ad:
         93:cb:86:de:80:be:29:ed:4b:23:a8:91:15:b1:fc:31:49:eb:
         a6:d6:76:95:38:1a:df:ed:34:c7:78:ff:f5:51:3d:f1:6a:df:
         ef:06:d0:3b:e4:15:9e:7c:1f:5f:b1:d5:ca:0e:c7:0e:81:09:
         1d:1e:e7:31:ab:a0:28:d3:62:93:22:70:95:60:75:71:6c:b7:
         8c:2e:df:dd:94:09:ab:3d:22:ad:df:9b:8e:d6:b2:9a:6e:6d:
         8c:d3:4e:8d:79:93:32:b2:41:b9:fc:01:b6:1c:a3:21:1c:c1:
         15:be:b2:d6:35:7d:f2:1c:12:2d:a5:9e:da:23:f5:b1:7d:bb:
         e6:ac:8c:ce:3b:9e:cc:9d:91:f1:64:bd:a2:67:0e:fa:40:96:
         ef:6f:57:a7:e7:1e:6a:7a:cc:d0:a0:18:0a:51:3e:6c:38:f2:
         39:6d:bb:8d:7b:e2:bb:2b:95:40:3b:e4:1e:24:98:84:bb:fc:
         f6:1b:5b:46:98:2a:9e:9f:b5:7b:d7:99:8b:d4:4d:44:18:82:
         f9:bb:99:bb:d5:89:5f:31:93:49:ff:14:b2:8a:3e:80:d4:bd:
         35:55:98:26:e5:d1:08:22:42:a8:24:2b:f2:15:86:29:24:fa:
         b1:4a:de:a5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcqUCRsoiod3+QeURCf7iOlnEaCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVERUI4NjIxOTc4NEYxMkU0QkNENEQxQUU5OEY5MUU0
OTBCNTI4RTAeFw0yNDA3MTgxNDMzMzBaFw0yNTA3MTcxNDM4MzBaMDMxMTAvBgNV
BAMTKDg1OUZBQUEwMDRGNTUxRjEwNTQ5Q0UyMTdFMTAwM0IxN0Y5QTgzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDboBEcZ+ELpiFrfVGfOnJ1CBeU
8cyDvyoFCU2K+CQAL6yOb5YDGC0KzAu65POe0iWQ+cnONoycFxF3VNx1qnmZCb85
JJwO8JK8tTcvhSfoUrSthZG2kDBamYNZe3Ebn+iqn6e7mS3jUG/RkWrH6fxI41L0
ooJhR7Q5r0wLnSZGXu+cmvZCROG5tzWf+axppX0ZROzBG97XrQe8H3nC35bsloSt
f1hRRQoZjDFgBFDC97U9nuDTTujGz2ykdmOfEcXk0NoCykqMQxRUFh7EPCnHawHl
1o2casMGkHM+LzihHq7X3nbdnMUuGmPZOASFeZgwHapMA6hNBnCZNTyTte7dAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhZ+qoAT1UfEFSc4hfhADsX+ag64wHwYDVR0j
BBgwFoAUHt64Yhl4TxLkvNTRrpj5HkkLUo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1FuTjZDQmNFNmRLMm1mZHNUYllubTlWREZQNDNYVXVyTnhFZU05Zjgz
dEQvMC8xRURFQjg2MjE5Nzg0RjEyRTRCQ0Q0RDFBRTk4RjkxRTQ5MEI1MjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFREVCODYyMTk3ODRGMTJF
NEJDRDREMUFFOThGOTFFNDkwQjUyOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dRbk42Q0JjRTZkSzJtZmRzVGJZbm05VkRGUDQzWFV1ck54RWVNOWY4M3RELzAv
MzIzODMwMzQzYTM3NjYzOTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzYzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR/nDANBgkqhkiG9w0BAQsFAAOCAQEAHtGu1p3d
HTosr5l+mTnigBqtk8uG3oC+Ke1LI6iRFbH8MUnrptZ2lTga3+00x3j/9VE98Wrf
7wbQO+QVnnwfX7HVyg7HDoEJHR7nMaugKNNikyJwlWB1cWy3jC7f3ZQJqz0ird+b
jtaymm5tjNNOjXmTMrJBufwBthyjIRzBFb6y1jV98hwSLaWe2iP1sX275qyMzjue
zJ2R8WS9omcO+kCW729Xp+ceanrM0KAYClE+bDjyOW27jXviuyuVQDvkHiSYhLv8
9htbRpgqnp+1e9eZi9RNRBiC+buZu9WJXzGTSf8Usoo+gNS9NVWYJuXRCCJCqCQr
8hWGKST6sUrepQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:21 2024 by rpki-client on console-ams.rpki-client.org