Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a383030303a3a2f33342d3334203d3e20323733343937.roa
File:                     323830343a386638633a383030303a3a2f33342d3334203d3e20323733343937.roa (raw, json)
Hash identifier:          Qi2wQrhFsI8+jbcSQUC/uvER0D4b6v7jrSXkkOyL2gE=
Subject key identifier:   E7:D0:A9:56:7A:48:FB:A8:F2:EB:A2:8F:6E:0B:4B:7A:FA:32:00:8F
Certificate issuer:       /CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
Certificate serial:       4B8AC72ED724A37A03378BD514EFC8E90201FB00
Authority key identifier: 7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a383030303a3a2f33342d3334203d3e20323733343937.roa
Signing time:             Fri 06 Sep 2024 16:53:58 +0000
ROA not before:           Fri 06 Sep 2024 16:48:58 +0000
ROA not after:            Fri 05 Sep 2025 16:53:58 +0000
asID:                     273497
IP address blocks:        2804:8f8c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.crl
                          rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8a:c7:2e:d7:24:a3:7a:03:37:8b:d5:14:ef:c8:e9:02:01:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
        Validity
            Not Before: Sep  6 16:48:58 2024 GMT
            Not After : Sep  5 16:53:58 2025 GMT
        Subject: CN=E7D0A9567A48FBA8F2EBA28F6E0B4B7AFA32008F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:21:51:ea:34:36:74:a4:00:fc:31:0e:0e:
                    65:5b:47:24:9c:fa:60:d6:a4:90:8e:da:25:42:69:
                    30:dd:ec:b4:95:09:58:fe:f6:c0:19:59:a1:c8:d9:
                    30:7e:b1:cb:9b:df:00:ee:5b:fe:65:97:4a:6a:07:
                    38:ad:2e:b5:b8:5f:87:0d:f3:86:a6:28:c7:dd:cd:
                    a0:61:6d:9f:1c:57:da:fd:4c:c0:02:cd:9c:c9:9e:
                    bd:a6:be:a4:9e:c4:3c:b4:26:b3:9e:c3:8f:01:2a:
                    76:5a:c6:9d:c5:95:88:54:6e:fd:fe:04:10:ae:e1:
                    e3:2c:c8:9b:db:18:80:5e:e1:b9:e3:22:9e:b2:bf:
                    50:28:b1:58:f0:25:a9:cd:62:e3:b7:e0:b1:73:05:
                    79:3b:b9:d5:30:54:70:aa:1a:3d:0c:19:2c:68:62:
                    94:d6:16:e6:f6:60:65:79:e2:33:5e:a5:20:31:50:
                    aa:22:59:6d:b8:f4:02:d6:22:52:14:ad:f9:bb:c7:
                    01:ae:cd:e2:d5:4f:fa:de:3c:70:37:15:c0:f9:74:
                    43:af:40:70:9b:9f:2c:33:77:4a:6a:49:58:e8:8f:
                    df:94:31:69:66:23:e8:84:6d:5e:e5:a9:ee:fe:fe:
                    a2:7b:38:47:de:c0:33:16:d2:69:06:c6:fc:48:c8:
                    95:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:A9:56:7A:48:FB:A8:F2:EB:A2:8F:6E:0B:4B:7A:FA:32:00:8F
            X509v3 Authority Key Identifier:
                keyid:7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a383030303a3a2f33342d3334203d3e20323733343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f8c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:c6:ca:a3:c3:d4:78:7c:3b:5e:66:3f:57:11:0d:f7:79:
         6f:a3:c5:3c:10:3b:54:4a:af:bb:24:af:56:65:fd:53:ac:c5:
         0d:b0:86:3c:2d:f7:e8:b7:7b:f8:17:6f:77:92:42:8c:c8:c5:
         e2:ca:41:a9:3d:18:67:3a:94:05:39:3a:ac:1d:2b:7a:2b:6f:
         2e:fd:d1:d5:b9:c2:37:a7:cf:c5:cf:7a:5a:91:83:cb:f5:54:
         35:38:c9:68:84:3e:e6:50:0e:cf:0f:90:4d:01:a6:5b:53:fa:
         d6:bb:1e:40:2a:7f:08:2e:c8:b9:dc:26:68:e7:76:1b:80:b4:
         e2:48:9c:5f:9a:03:e5:56:cf:77:95:82:dc:1e:c0:0d:d9:c4:
         a3:2b:ef:2f:82:a8:05:88:68:bf:83:dc:2b:c1:6b:ec:73:be:
         fa:1c:46:5c:ba:c5:e4:3f:dd:5c:3b:a2:fd:39:3f:af:24:bb:
         76:68:f1:22:59:0a:00:19:e0:ba:54:4f:cf:7b:f8:62:14:56:
         be:63:38:fe:56:ab:4b:af:7f:13:27:6f:53:c2:37:32:99:45:
         09:39:83:29:7c:6f:5b:ba:8e:18:a0:37:f5:ed:e7:35:50:ec:
         ce:f2:95:d4:4b:2a:29:c6:2a:b8:f7:88:ae:60:21:12:e1:8e:
         4e:2f:dd:e6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUS4rHLtcko3oDN4vVFO/I6QIB+wAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2OEI0QTVDQjY0Q0NCMTkzMkUzOEI1RjIyQzA1RkYw
REQxM0ZDMzAeFw0yNDA5MDYxNjQ4NThaFw0yNTA5MDUxNjUzNThaMDMxMTAvBgNV
BAMTKEU3RDBBOTU2N0E0OEZCQThGMkVCQTI4RjZFMEI0QjdBRkEzMjAwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RyFR6jQ2dKQA/DEODmVbRySc
+mDWpJCO2iVCaTDd7LSVCVj+9sAZWaHI2TB+scub3wDuW/5ll0pqBzitLrW4X4cN
84amKMfdzaBhbZ8cV9r9TMACzZzJnr2mvqSexDy0JrOew48BKnZaxp3FlYhUbv3+
BBCu4eMsyJvbGIBe4bnjIp6yv1AosVjwJanNYuO34LFzBXk7udUwVHCqGj0MGSxo
YpTWFub2YGV54jNepSAxUKoiWW249ALWIlIUrfm7xwGuzeLVT/rePHA3FcD5dEOv
QHCbnywzd0pqSVjoj9+UMWlmI+iEbV7lqe7+/qJ7OEfewDMW0mkGxvxIyJU5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU59CpVnpI+6jy66KPbgtLevoyAI8wHwYDVR0j
BBgwFoAUfWi0pctkzLGTLji18iwF/w3RP8MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FnQ05SS25hNWExOFVyNWRVclBlR2phaUR1djZxUTg0YmRpdlE1ZTJz
YnQvMC83RDY4QjRBNUNCNjRDQ0IxOTMyRTM4QjVGMjJDMDVGRjBERDEzRkMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENjhCNEE1Q0I2NENDQjE5
MzJFMzhCNUYyMkMwNUZGMEREMTNGQzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhZ0NOUktuYTVhMThVcjVkVXJQZUdqYWlEdXY2cVE4NGJkaXZRNWUyc2J0LzAv
MzIzODMwMzQzYTM4NjYzODYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM0MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEj4yAMA0GCSqGSIb3DQEBCwUA
A4IBAQA3qMbKo8PUeHw7XmY/VxEN93lvo8U8EDtUSq+7JK9WZf1TrMUNsIY8Lffo
t3v4F293kkKMyMXiykGpPRhnOpQFOTqsHSt6K28u/dHVucI3p8/Fz3pakYPL9VQ1
OMlohD7mUA7PD5BNAaZbU/rWux5AKn8ILsi53CZo53YbgLTiSJxfmgPlVs93lYLc
HsAN2cSjK+8vgqgFiGi/g9wrwWvsc776HEZcusXkP91cO6L9OT+vJLt2aPEiWQoA
GeC6VE/Pe/hiFFa+Yzj+VqtLr38TJ29TwjcymUUJOYMpfG9buo4YoDf17ec1UOzO
8pXUSyopxiq494iuYCES4Y5OL93m
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:08 2024 by rpki-client on console-fra.rpki-client.org