Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3332203d3e20323637313335.roa
File:                     323830343a343861343a3a2f33322d3332203d3e20323637313335.roa (raw, json)
Hash identifier:          Nbj2eZ3owHUW6Gc08Fj8s2N/i7HPHpr7+++51gRnvMY=
Subject key identifier:   36:5D:C1:DA:8D:41:28:8B:7D:7B:3D:3D:A1:72:B6:AD:E4:5C:63:BA
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       4ECC18BED820811C7C61F98139F114B46C6E4B6E
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3332203d3e20323637313335.roa
Signing time:             Tue 26 Nov 2024 17:22:53 +0000
ROA not before:           Tue 26 Nov 2024 17:17:53 +0000
ROA not after:            Tue 25 Nov 2025 17:22:53 +0000
asID:                     267135
IP address blocks:        2804:48a4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 18:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cc:18:be:d8:20:81:1c:7c:61:f9:81:39:f1:14:b4:6c:6e:4b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Nov 26 17:17:53 2024 GMT
            Not After : Nov 25 17:22:53 2025 GMT
        Subject: CN=365DC1DA8D41288B7D7B3D3DA172B6ADE45C63BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:d9:a7:95:52:88:fb:bd:66:37:99:74:c6:
                    ca:2d:b1:d3:af:5a:ce:0e:c7:1d:12:94:8f:9e:29:
                    4f:96:93:70:b5:0c:40:95:18:02:36:71:0e:58:e5:
                    56:53:41:91:ac:d3:be:65:4a:b7:a8:65:14:6f:c4:
                    6f:2b:99:e9:c2:42:52:c3:8c:cf:a1:24:ec:76:b2:
                    04:26:9e:dc:83:ef:ef:af:3b:03:aa:45:a6:30:00:
                    57:44:81:6c:6d:5d:23:52:f8:be:2b:30:34:fe:a8:
                    63:91:d4:c0:0d:d4:c9:c1:3c:ea:a3:f4:29:13:75:
                    ab:9d:45:44:e0:a7:88:cc:34:e3:57:d1:35:0b:d3:
                    b6:85:89:24:4b:9f:00:f9:00:a4:73:4b:0e:24:cd:
                    5f:5d:b3:30:64:5a:69:bc:ee:f5:04:bc:82:46:9b:
                    ee:f3:5a:0d:53:8a:b5:80:0a:d3:e4:63:d3:b9:40:
                    3a:cd:9c:8c:e6:d6:ac:87:f9:ea:96:c6:5e:27:8e:
                    29:1c:42:58:15:a2:9f:8d:c5:74:cc:af:54:e6:76:
                    48:5e:e8:38:4c:83:0a:e7:bc:75:3f:5c:6c:cd:5a:
                    1c:6b:1a:92:dd:99:bc:ce:0b:31:c5:12:a7:28:2d:
                    c3:94:13:b9:31:f5:1d:d6:c1:68:13:e8:dc:2e:c5:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:C1:DA:8D:41:28:8B:7D:7B:3D:3D:A1:72:B6:AD:E4:5C:63:BA
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3332203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:2b:2b:9a:b7:1d:9d:72:90:e3:da:29:cc:0e:d1:85:5e:
         c3:a0:bf:39:56:a9:0a:8a:2d:66:54:1a:96:88:78:20:97:a5:
         7b:86:ec:05:48:ec:74:01:ac:d6:07:26:e1:7c:c5:d1:b3:1f:
         51:c6:95:16:a2:46:72:1e:af:77:82:e8:24:a4:b9:41:00:81:
         49:63:ef:af:46:d8:3e:61:76:a3:f6:b1:39:81:4c:8c:84:c5:
         ab:fc:fa:db:bb:37:9f:66:b6:60:7f:1c:21:b0:2c:35:2d:6c:
         10:ad:38:17:36:23:84:9f:fe:24:4e:d1:ef:c9:37:6e:70:3b:
         ab:81:05:6f:c1:b4:9e:13:3b:01:42:8b:10:6f:9a:d8:60:a3:
         57:80:35:5a:ad:96:e8:aa:bf:78:02:45:72:37:2b:80:ef:7e:
         86:25:b6:2c:54:ab:fa:37:9d:8b:fc:ab:3d:ea:34:a9:51:a6:
         6e:44:c4:12:7e:5d:d5:e3:6d:66:b1:18:86:a8:71:46:33:06:
         fc:1e:0f:fb:e4:fe:10:ff:6b:1f:dc:41:09:b2:ec:3c:37:9d:
         0b:3c:21:b0:e6:76:0f:cb:0a:bc:34:4b:00:74:89:13:21:4a:
         66:bf:69:99:04:06:36:57:1c:4c:e8:bb:c8:8f:57:33:d0:41:
         03:ae:60:85
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTswYvtgggRx8YfmBOfEUtGxuS24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQjc5MDg3QUNBMjdBMjE5ODVGNkYwNUI5MTAzRDQ0
NkJCNjVGNDAeFw0yNDExMjYxNzE3NTNaFw0yNTExMjUxNzIyNTNaMDMxMTAvBgNV
BAMTKDM2NURDMURBOEQ0MTI4OEI3RDdCM0QzREExNzJCNkFERTQ1QzYzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSdmnlVKI+71mN5l0xsotsdOv
Ws4Oxx0SlI+eKU+Wk3C1DECVGAI2cQ5Y5VZTQZGs075lSreoZRRvxG8rmenCQlLD
jM+hJOx2sgQmntyD7++vOwOqRaYwAFdEgWxtXSNS+L4rMDT+qGOR1MAN1MnBPOqj
9CkTdaudRUTgp4jMNONX0TUL07aFiSRLnwD5AKRzSw4kzV9dszBkWmm87vUEvIJG
m+7zWg1TirWACtPkY9O5QDrNnIzm1qyH+eqWxl4njikcQlgVop+NxXTMr1Tmdkhe
6DhMgwrnvHU/XGzNWhxrGpLdmbzOCzHFEqcoLcOUE7kx9R3WwWgT6Nwuxa7pAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNl3B2o1BKIt9ez09oXK2reRcY7owHwYDVR0j
BBgwFoAUirt5CHrKJ6IZhfbwW5ED1Ea7ZfQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZUmtFUE1wa1BQTEZLaHhNZHhRUnFRNmd3UlVSV1lpYWRWQUt3NndOdENE
LzAvOEFCQjc5MDg3QUNBMjdBMjE5ODVGNkYwNUI5MTAzRDQ0NkJCNjVGNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QUJCNzkwODdBQ0EyN0EyMTk4
NUY2RjA1QjkxMDNENDQ2QkI2NUY0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
UmtFUE1wa1BQTEZLaHhNZHhRUnFRNmd3UlVSV1lpYWRWQUt3NndOdENELzAvMzIz
ODMwMzQzYTM0Mzg2MTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3MzEz
MzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARIpDANBgkqhkiG9w0BAQsFAAOCAQEAoborK5q3HZ1y
kOPaKcwO0YVew6C/OVapCootZlQaloh4IJele4bsBUjsdAGs1gcm4XzF0bMfUcaV
FqJGch6vd4LoJKS5QQCBSWPvr0bYPmF2o/axOYFMjITFq/z627s3n2a2YH8cIbAs
NS1sEK04FzYjhJ/+JE7R78k3bnA7q4EFb8G0nhM7AUKLEG+a2GCjV4A1Wq2W6Kq/
eAJFcjcrgO9+hiW2LFSr+jedi/yrPeo0qVGmbkTEEn5d1eNtZrEYhqhxRjMG/B4P
++T+EP9rH9xBCbLsPDedCzwhsOZ2D8sKvDRLAHSJEyFKZr9pmQQGNlccTOi7yI9X
M9BBA65ghQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:02 2024 by rpki-client on console-ams.rpki-client.org