Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33322d3332203d3e20323638353137.roa
File:                     323830343a353236633a3a2f33322d3332203d3e20323638353137.roa (raw, json)
Hash identifier:          VZ0+VbGo0j1fpYw/Wqs/RSDudQb16Cf8EzoQKfn0qfc=
Subject key identifier:   7B:A7:55:4C:42:0E:02:94:92:EA:A7:C1:23:0E:CB:CE:A1:37:C7:ED
Certificate issuer:       /CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
Certificate serial:       357A968A9FCD409CA2821A5B820E628F1C125310
Authority key identifier: 32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33322d3332203d3e20323638353137.roa
Signing time:             Sat 27 Jul 2024 20:05:00 +0000
ROA not before:           Sat 27 Jul 2024 20:00:00 +0000
ROA not after:            Sat 26 Jul 2025 20:05:00 +0000
asID:                     268517
IP address blocks:        2804:526c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl
                          rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7a:96:8a:9f:cd:40:9c:a2:82:1a:5b:82:0e:62:8f:1c:12:53:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
        Validity
            Not Before: Jul 27 20:00:00 2024 GMT
            Not After : Jul 26 20:05:00 2025 GMT
        Subject: CN=7BA7554C420E029492EAA7C1230ECBCEA137C7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:b7:05:95:00:f6:8f:f0:f3:d6:d8:ee:f0:
                    33:30:14:06:8f:f5:c5:59:f2:94:e7:e0:55:79:43:
                    7d:b9:4c:16:fc:7e:f8:39:3f:b1:03:e8:8a:63:c4:
                    d3:c0:e9:11:ef:33:0d:b0:90:12:51:95:60:11:8f:
                    c0:03:93:6e:ee:17:a0:1e:08:15:14:3f:52:78:9f:
                    ad:cd:23:b8:a8:03:30:61:98:53:e6:6d:b2:e3:16:
                    6b:25:5e:e6:71:53:fb:1d:f6:87:94:b6:7b:bc:cc:
                    8d:32:3e:b3:e9:9d:d6:f0:40:35:50:ea:2c:94:cc:
                    af:26:79:61:69:10:88:f1:53:27:48:6f:be:87:d6:
                    0b:96:2b:9b:41:bd:7a:f8:ab:43:4e:80:5a:c0:6f:
                    5c:8d:85:ab:96:96:a8:2c:40:7c:a3:83:45:2d:56:
                    36:c0:63:6a:8f:76:76:69:05:06:5d:23:68:1f:ee:
                    1d:e9:f9:2a:bc:fe:ac:eb:d9:6b:6b:b0:93:d1:b7:
                    94:a5:20:70:40:c4:fb:ea:67:7f:2f:04:23:71:93:
                    20:45:34:ef:f3:69:6e:fa:dc:25:ce:d9:6f:ed:9c:
                    67:6a:b6:4f:31:bc:15:13:9b:d2:b6:01:31:23:2e:
                    84:51:6e:d2:f5:b0:71:30:96:0e:27:58:d0:42:4e:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A7:55:4C:42:0E:02:94:92:EA:A7:C1:23:0E:CB:CE:A1:37:C7:ED
            X509v3 Authority Key Identifier:
                keyid:32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33322d3332203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:526c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:81:d4:8e:2a:27:e8:dd:11:e5:f8:57:08:5b:24:03:4f:
         5a:c0:0a:90:77:b4:02:42:c2:1e:2b:d2:97:d6:fe:4a:77:d6:
         80:1f:fd:22:c8:f4:c4:e8:f5:a9:35:95:2f:b4:38:82:79:24:
         5b:bf:02:4b:71:4a:09:fc:0a:ac:b1:0f:24:7f:c1:6a:4a:03:
         d5:ae:0d:6d:04:2d:b7:c9:f1:e3:c0:35:ee:0a:76:32:2f:a4:
         55:18:ed:05:28:4a:aa:61:15:56:04:da:e6:9a:7f:7b:12:ae:
         e0:7e:48:f6:6a:14:c8:bc:54:20:ab:c2:6d:ef:11:08:11:eb:
         4d:10:49:db:9d:27:22:77:e0:54:4e:cf:57:06:e5:9c:a3:49:
         85:33:60:fe:16:f4:51:40:ac:eb:85:07:49:40:6f:99:37:f7:
         8e:94:ab:c0:e1:19:07:03:36:b8:4d:1c:8f:ae:e9:41:65:ac:
         fd:49:96:16:fe:51:ea:ca:33:ed:79:9f:34:66:ae:01:20:d0:
         05:ad:c1:5a:0f:2f:87:df:3f:d5:85:7c:c9:41:77:f4:2d:53:
         59:93:aa:11:72:d4:d6:a1:37:97:3c:62:83:94:41:31:20:2e:
         32:9e:05:ea:6f:b4:23:35:a9:48:6e:d7:80:bd:1e:d9:2c:86:
         29:93:7a:44
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNXqWip/NQJyighpbgg5ijxwSUxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJEMzJEMzQ2NzRGMDE2MTY1N0FGM0Y3MUI5OTJDQUY3
NEUyQkJCOTAeFw0yNDA3MjcyMDAwMDBaFw0yNTA3MjYyMDA1MDBaMDMxMTAvBgNV
BAMTKDdCQTc1NTRDNDIwRTAyOTQ5MkVBQTdDMTIzMEVDQkNFQTEzN0M3RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLLcFlQD2j/Dz1tju8DMwFAaP
9cVZ8pTn4FV5Q325TBb8fvg5P7ED6IpjxNPA6RHvMw2wkBJRlWARj8ADk27uF6Ae
CBUUP1J4n63NI7ioAzBhmFPmbbLjFmslXuZxU/sd9oeUtnu8zI0yPrPpndbwQDVQ
6iyUzK8meWFpEIjxUydIb76H1guWK5tBvXr4q0NOgFrAb1yNhauWlqgsQHyjg0Ut
VjbAY2qPdnZpBQZdI2gf7h3p+Sq8/qzr2WtrsJPRt5SlIHBAxPvqZ38vBCNxkyBF
NO/zaW763CXO2W/tnGdqtk8xvBUTm9K2ATEjLoRRbtL1sHEwlg4nWNBCTtFJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUe6dVTEIOApSS6qfBIw7LzqE3x+0wHwYDVR0j
BBgwFoAUMtMtNGdPAWFlevP3G5ksr3Tiu7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5hcU4zcmRrQU5QcVFkdzhkZmthZFF2UUdWcTFRb1RBMkJzaUJUZHNn
a1QvMC8zMkQzMkQzNDY3NEYwMTYxNjU3QUYzRjcxQjk5MkNBRjc0RTJCQkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRDMyRDM0Njc0RjAxNjE2
NTdBRjNGNzFCOTkyQ0FGNzRFMkJCQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hOYXFOM3Jka0FOUHFRZHc4ZGZrYWRRdlFHVnExUW9UQTJCc2lCVGRzZ2tULzAv
MzIzODMwMzQzYTM1MzIzNjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARSbDANBgkqhkiG9w0BAQsFAAOCAQEAstWB1I4q
J+jdEeX4VwhbJANPWsAKkHe0AkLCHivSl9b+SnfWgB/9Isj0xOj1qTWVL7Q4gnkk
W78CS3FKCfwKrLEPJH/BakoD1a4NbQQtt8nx48A17gp2Mi+kVRjtBShKqmEVVgTa
5pp/exKu4H5I9moUyLxUIKvCbe8RCBHrTRBJ250nInfgVE7PVwblnKNJhTNg/hb0
UUCs64UHSUBvmTf3jpSrwOEZBwM2uE0cj67pQWWs/UmWFv5R6soz7XmfNGauASDQ
Ba3BWg8vh98/1YV8yUF39C1TWZOqEXLU1qE3lzxig5RBMSAuMp4F6m+0IzWpSG7X
gL0e2SyGKZN6RA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:41 2024 by rpki-client on console-fra.rpki-client.org