Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a383030303a3a2f33342d3334203d3e20323637313335.roa
File:                     323830343a343861343a383030303a3a2f33342d3334203d3e20323637313335.roa (raw, json)
Hash identifier:          tDBupb1G5tBPpgHRDyL9hYxYW7vPeL5bahfsRTXWrSk=
Subject key identifier:   78:38:BB:CB:9D:D5:8E:52:32:CF:2C:9D:A9:35:D8:69:DA:95:78:DB
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       435A689CF8ADD868BEC1A9C0E158F83CB2DC0D03
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a383030303a3a2f33342d3334203d3e20323637313335.roa
Signing time:             Tue 26 Nov 2024 17:23:03 +0000
ROA not before:           Tue 26 Nov 2024 17:18:03 +0000
ROA not after:            Tue 25 Nov 2025 17:23:03 +0000
asID:                     267135
IP address blocks:        2804:48a4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 18:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5a:68:9c:f8:ad:d8:68:be:c1:a9:c0:e1:58:f8:3c:b2:dc:0d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Nov 26 17:18:03 2024 GMT
            Not After : Nov 25 17:23:03 2025 GMT
        Subject: CN=7838BBCB9DD58E5232CF2C9DA935D869DA9578DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:5e:f3:81:92:b6:e8:c2:9d:cb:0d:b3:5a:
                    8e:03:01:1c:59:c9:65:d4:1b:3b:f5:6e:ef:41:89:
                    82:e4:3c:57:36:cd:f9:e2:89:9c:2d:09:ea:da:d7:
                    08:18:50:d2:f2:28:7f:b6:98:f6:24:f2:63:a9:61:
                    7c:f8:cd:cb:41:79:5c:88:21:e8:ce:51:f8:34:52:
                    ce:b5:71:cd:89:2b:79:84:b9:94:a5:9d:48:f0:eb:
                    9f:86:34:82:2d:bf:46:0d:2e:bf:72:a1:d9:fb:ba:
                    73:5b:6e:93:fa:cd:f0:61:24:b0:da:73:82:93:fb:
                    66:a8:75:fe:de:6a:0a:8f:59:8c:0f:4c:d8:53:1f:
                    ed:bc:84:5a:56:cc:3e:07:c3:90:52:72:e0:0a:e9:
                    93:7f:8a:5d:ee:2c:6f:95:04:31:80:c1:ba:5e:75:
                    83:10:f3:ee:df:c6:5a:3b:04:31:65:e7:af:f2:89:
                    73:90:c0:8d:19:f7:ff:04:ea:79:39:91:51:7a:ef:
                    8c:d1:ba:88:41:5f:20:cd:7d:17:56:4a:39:cc:a4:
                    9c:39:82:26:86:68:7e:e7:9d:9a:53:31:d0:42:5d:
                    ce:51:f3:96:35:78:ee:1f:7d:03:3b:49:39:ee:66:
                    9e:db:4b:40:b7:2b:80:84:92:6a:3d:38:f6:3b:89:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:BB:CB:9D:D5:8E:52:32:CF:2C:9D:A9:35:D8:69:DA:95:78:DB
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a383030303a3a2f33342d3334203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:7a:d5:7d:53:b6:54:cc:69:48:5c:4d:a8:df:f2:c4:34:
         a5:0a:aa:3f:85:91:89:30:0d:8b:1e:7e:66:c4:76:40:fa:4b:
         ee:e8:14:5d:3f:b0:df:91:88:f9:2c:5c:7c:0d:0c:10:cf:ad:
         d5:a1:0d:e7:b3:77:e0:9e:de:16:5d:9a:d5:12:97:2b:bd:9f:
         57:74:e1:78:74:73:04:b0:1d:38:53:8a:84:ce:26:c8:7b:2e:
         c2:5b:45:66:f9:2e:f1:7b:67:78:8d:80:7a:95:1f:e8:1c:46:
         55:70:3f:fa:07:8a:44:ed:da:78:eb:77:d9:01:c6:9c:e2:55:
         69:8e:45:5d:5e:de:27:87:ef:5d:fe:19:e3:fe:a2:08:b5:5c:
         53:06:3d:41:4f:b8:af:84:ac:88:75:7b:9a:44:39:5f:21:74:
         d0:04:84:4e:a2:4f:6c:0f:62:c3:35:64:40:94:59:65:f5:65:
         13:13:73:cd:ea:61:82:16:d0:83:ae:07:2d:fd:23:8c:54:f8:
         bc:79:04:39:39:b0:cb:99:30:e4:63:d2:74:27:b3:2d:b1:d8:
         98:57:9d:6e:13:ec:0b:19:cc:0c:34:5d:c8:26:ce:a1:eb:b7:
         d7:11:a0:e5:fe:15:d8:e7:a9:81:d8:dc:6d:93:4c:aa:27:b0:
         9c:90:1b:ec
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUQ1ponPit2Gi+wanA4Vj4PLLcDQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQjc5MDg3QUNBMjdBMjE5ODVGNkYwNUI5MTAzRDQ0
NkJCNjVGNDAeFw0yNDExMjYxNzE4MDNaFw0yNTExMjUxNzIzMDNaMDMxMTAvBgNV
BAMTKDc4MzhCQkNCOURENThFNTIzMkNGMkM5REE5MzVEODY5REE5NTc4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfV7zgZK26MKdyw2zWo4DARxZ
yWXUGzv1bu9BiYLkPFc2zfniiZwtCera1wgYUNLyKH+2mPYk8mOpYXz4zctBeVyI
IejOUfg0Us61cc2JK3mEuZSlnUjw65+GNIItv0YNLr9yodn7unNbbpP6zfBhJLDa
c4KT+2aodf7eagqPWYwPTNhTH+28hFpWzD4Hw5BScuAK6ZN/il3uLG+VBDGAwbpe
dYMQ8+7fxlo7BDFl56/yiXOQwI0Z9/8E6nk5kVF674zRuohBXyDNfRdWSjnMpJw5
giaGaH7nnZpTMdBCXc5R85Y1eO4ffQM7STnuZp7bS0C3K4CEkmo9OPY7iXkNAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUeDi7y53VjlIyzyydqTXYadqVeNswHwYDVR0j
BBgwFoAUirt5CHrKJ6IZhfbwW5ED1Ea7ZfQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZUmtFUE1wa1BQTEZLaHhNZHhRUnFRNmd3UlVSV1lpYWRWQUt3NndOdENE
LzAvOEFCQjc5MDg3QUNBMjdBMjE5ODVGNkYwNUI5MTAzRDQ0NkJCNjVGNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QUJCNzkwODdBQ0EyN0EyMTk4
NUY2RjA1QjkxMDNENDQ2QkI2NUY0LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
UmtFUE1wa1BQTEZLaHhNZHhRUnFRNmd3UlVSV1lpYWRWQUt3NndOdENELzAvMzIz
ODMwMzQzYTM0Mzg2MTM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzNzMxMzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigESKSAMA0GCSqGSIb3DQEBCwUAA4IB
AQCL8nrVfVO2VMxpSFxNqN/yxDSlCqo/hZGJMA2LHn5mxHZA+kvu6BRdP7DfkYj5
LFx8DQwQz63VoQ3ns3fgnt4WXZrVEpcrvZ9XdOF4dHMEsB04U4qEzibIey7CW0Vm
+S7xe2d4jYB6lR/oHEZVcD/6B4pE7dp463fZAcac4lVpjkVdXt4nh+9d/hnj/qII
tVxTBj1BT7ivhKyIdXuaRDlfIXTQBIROok9sD2LDNWRAlFll9WUTE3PN6mGCFtCD
rgct/SOMVPi8eQQ5ObDLmTDkY9J0J7MtsdiYV51uE+wLGcwMNF3IJs6h67fXEaDl
/hXY56mB2Nxtk0yqJ7CckBvs
-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:02 2024 by rpki-client on console-ams.rpki-client.org