Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a6164633a3a2f33322d3335203d3e203532393237.roa
File:                     323830343a6164633a3a2f33322d3335203d3e203532393237.roa (raw, json)
Hash identifier:          EYYWfr9qynTaoHU4E9dss/Zj5v/pw8j1busqaNH/SBY=
Subject key identifier:   3C:F7:26:C6:07:07:39:3B:98:22:E3:8B:EF:BD:E0:D1:4C:1C:BA:68
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       371C89AD7C73D80866D5D26EAD45E5590B60F1EC
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a6164633a3a2f33322d3335203d3e203532393237.roa
Signing time:             Fri 05 Apr 2024 01:53:07 +0000
ROA not before:           Fri 05 Apr 2024 01:48:07 +0000
ROA not after:            Fri 04 Apr 2025 01:53:07 +0000
asID:                     52927
IP address blocks:        2804:adc::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl
                          rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1c:89:ad:7c:73:d8:08:66:d5:d2:6e:ad:45:e5:59:0b:60:f1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Apr  5 01:48:07 2024 GMT
            Not After : Apr  4 01:53:07 2025 GMT
        Subject: CN=3CF726C60707393B9822E38BEFBDE0D14C1CBA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:ae:59:c5:f1:b7:0c:ac:84:64:68:b6:a2:
                    2a:b8:a3:3c:ca:86:55:fc:48:62:76:53:02:7e:34:
                    20:1a:41:2c:c5:a1:6e:08:60:9f:51:d9:00:63:80:
                    2e:59:5a:4e:48:87:52:8a:df:10:20:93:39:f4:5e:
                    a5:bb:07:7f:ff:89:01:d0:2e:99:de:e4:25:92:2d:
                    2f:80:15:f9:f1:c0:d3:2c:cb:c8:1b:2c:bb:66:11:
                    4c:c2:5d:72:7c:d8:7b:1b:f6:f3:58:01:fc:26:47:
                    b2:16:c8:c2:49:b2:53:6f:6c:01:c5:d7:d2:06:f3:
                    a6:9a:c7:06:f1:47:58:79:f6:cf:b3:98:f8:f7:99:
                    0e:60:7b:22:9a:a4:a8:d9:1e:e4:e8:38:12:64:a5:
                    99:a4:0a:a2:b6:22:ab:b4:9d:57:e7:d1:57:7f:8c:
                    f5:e5:f6:e6:4f:4e:8d:fe:83:81:a1:24:9f:7a:65:
                    3c:5e:ed:c7:f9:7c:2c:08:7d:dd:f1:61:07:4a:8b:
                    40:18:c5:29:39:e5:2b:af:1b:b8:a0:9c:05:0b:cb:
                    3a:33:ac:8f:f3:93:b0:f8:91:10:4c:eb:b8:60:a5:
                    50:5b:0f:12:a2:3e:43:af:6c:a8:ee:c4:a3:77:1f:
                    53:93:a1:c7:d9:6f:a9:9b:21:60:df:b3:24:70:23:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:26:C6:07:07:39:3B:98:22:E3:8B:EF:BD:E0:D1:4C:1C:BA:68
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a6164633a3a2f33322d3335203d3e203532393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:83:bc:76:bd:f9:04:2e:17:8b:14:32:9e:35:c5:bf:0a:ae:
         7f:b6:dd:96:ac:19:c3:ed:92:c4:b1:3f:07:20:af:f4:79:c2:
         78:f6:e5:cb:73:69:a6:5e:bb:6f:96:a6:b0:69:87:0c:75:67:
         11:a6:44:1d:fd:24:c8:9c:0c:b5:2c:b0:22:ea:8d:34:68:3c:
         44:de:5f:62:60:aa:e8:04:48:e2:e2:7a:45:31:b7:c3:7c:b3:
         68:2f:b3:52:bc:b1:21:99:1b:c5:26:c2:95:74:55:8d:c9:ba:
         57:1f:97:f5:7c:0f:91:52:8e:7d:be:36:c9:b3:1e:74:3b:b6:
         33:75:e9:64:6c:4c:fa:ff:9f:99:df:83:91:76:a1:9d:59:30:
         2a:0b:05:cf:ee:27:91:cb:6c:77:cb:a3:6e:43:c3:01:6d:a3:
         d8:0c:2f:a3:ce:95:1c:15:56:51:9b:cc:66:92:16:36:e6:20:
         aa:c2:92:68:4b:b1:c4:38:33:39:be:e3:69:73:2f:e9:06:fc:
         77:0f:47:84:29:2c:67:4a:e0:7a:e2:a6:ba:5b:60:26:89:e1:
         41:a5:c4:e7:95:28:a4:b2:ef:f5:8c:0f:01:f4:53:8a:7f:71:
         63:00:f3:e7:c4:29:22:0c:71:43:ab:09:7e:c8:be:dd:ed:ed:
         41:63:52:e4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNxyJrXxz2Ahm1dJurUXlWQtg8ewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVGNDc5RDA2MjhGQjc1NkUyNkFBNDA2RjBFOEMwNzI3
NzA0NDRDODAeFw0yNDA0MDUwMTQ4MDdaFw0yNTA0MDQwMTUzMDdaMDMxMTAvBgNV
BAMTKDNDRjcyNkM2MDcwNzM5M0I5ODIyRTM4QkVGQkRFMEQxNEMxQ0JBNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZM65ZxfG3DKyEZGi2oiq4ozzK
hlX8SGJ2UwJ+NCAaQSzFoW4IYJ9R2QBjgC5ZWk5Ih1KK3xAgkzn0XqW7B3//iQHQ
Lpne5CWSLS+AFfnxwNMsy8gbLLtmEUzCXXJ82Hsb9vNYAfwmR7IWyMJJslNvbAHF
19IG86aaxwbxR1h59s+zmPj3mQ5geyKapKjZHuToOBJkpZmkCqK2Iqu0nVfn0Vd/
jPXl9uZPTo3+g4GhJJ96ZTxe7cf5fCwIfd3xYQdKi0AYxSk55SuvG7ignAULyzoz
rI/zk7D4kRBM67hgpVBbDxKiPkOvbKjuxKN3H1OTocfZb6mbIWDfsyRwIwLJAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPPcmxgcHOTuYIuOL773g0UwcumgwHwYDVR0j
BBgwFoAUhfR50GKPt1biaqQG8OjAcncERMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGljY3I5OG9MS0JXTW9xcVBqU250QXlWcFBCZFpwbXhLeTZpcDhpeWVt
dVUvMy84NUY0NzlEMDYyOEZCNzU2RTI2QUE0MDZGMEU4QzA3Mjc3MDQ0NEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RjQ3OUQwNjI4RkI3NTZF
MjZBQTQwNkYwRThDMDcyNzcwNDQ0QzguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpY2NyOThvTEtCV01vcXFQalNudEF5VnBQQmRacG14S3k2aXA4aXllbXVVLzMv
MzIzODMwMzQzYTYxNjQ2MzNhM2EyZjMzMzIyZDMzMzUyMDNkM2UyMDM1MzIzOTMy
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBArcMA0GCSqGSIb3DQEBCwUAA4IBAQCZg7x2vfkELheL
FDKeNcW/Cq5/tt2WrBnD7ZLEsT8HIK/0ecJ49uXLc2mmXrtvlqawaYcMdWcRpkQd
/STInAy1LLAi6o00aDxE3l9iYKroBEji4npFMbfDfLNoL7NSvLEhmRvFJsKVdFWN
ybpXH5f1fA+RUo59vjbJsx50O7YzdelkbEz6/5+Z34ORdqGdWTAqCwXP7ieRy2x3
y6NuQ8MBbaPYDC+jzpUcFVZRm8xmkhY25iCqwpJoS7HEODM5vuNpcy/pBvx3D0eE
KSxnSuB64qa6W2AmieFBpcTnlSiksu/1jA8B9FOKf3FjAPPnxCkiDHFDqwl+yL7d
7e1BY1Lk
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:13 2024 by rpki-client on console-fra.rpki-client.org