Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3334203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33322d3334203d3e20323633303236.roa (raw, json)
Hash identifier:          qU9/Lszyqh4WYRKj8F9kgkAsX/5rNKHtbKuM97mRduU=
Subject key identifier:   8C:E3:FD:67:1B:95:49:1A:1A:FA:E9:70:05:93:00:74:54:FF:AC:23
Certificate issuer:       /CN=5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651
Certificate serial:       422B9A75CAB5D8FAD868CEA8D6F7D43EFACF652F
Authority key identifier: 5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3334203d3e20323633303236.roa
Signing time:             Tue 05 Nov 2024 14:30:32 +0000
ROA not before:           Tue 05 Nov 2024 14:25:32 +0000
ROA not after:            Tue 04 Nov 2025 14:30:32 +0000
asID:                     263026
IP address blocks:        2804:a28::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:9a:75:ca:b5:d8:fa:d8:68:ce:a8:d6:f7:d4:3e:fa:cf:65:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651
        Validity
            Not Before: Nov  5 14:25:32 2024 GMT
            Not After : Nov  4 14:30:32 2025 GMT
        Subject: CN=8CE3FD671B95491A1AFAE9700593007454FFAC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:04:d0:fd:2b:f8:41:28:18:2f:05:69:8e:
                    e3:41:0f:56:0a:76:b6:ba:ba:07:2b:a8:93:5d:75:
                    8f:39:d6:43:3e:be:3b:b8:7e:29:3b:2a:a4:40:44:
                    8d:9f:b8:10:1e:6a:1b:93:6c:59:d8:4e:57:11:6b:
                    10:4c:76:08:2c:09:a6:ec:14:27:c3:f2:be:76:a7:
                    1d:e1:75:fe:9e:36:9a:f2:f3:8a:15:a7:b8:1a:6d:
                    e8:bf:16:1c:68:3d:ab:01:e2:a9:51:09:e2:cb:92:
                    d8:3f:3e:99:48:ec:30:dc:94:d4:35:13:2f:c3:5e:
                    7e:bc:15:88:01:e4:e7:41:2c:9f:99:fd:36:c8:27:
                    a3:f2:4a:a9:7f:ef:1c:a4:9f:a3:19:c6:5c:e8:95:
                    fa:4c:1c:4a:81:ae:28:4f:bd:0a:36:97:99:67:0b:
                    bd:f9:52:aa:18:dc:86:37:00:b7:85:ab:82:d2:fe:
                    2b:b8:6a:6e:6e:7f:e5:3d:ba:c0:eb:e6:6d:76:27:
                    11:08:de:74:89:be:0b:af:5f:09:84:02:24:03:68:
                    d7:37:f0:f0:83:de:23:b7:99:67:21:f9:ff:21:fa:
                    61:01:99:23:41:00:36:6e:ed:29:ae:3e:40:07:ac:
                    0b:6c:65:4c:e7:9d:c1:13:b5:ea:6f:4a:46:ee:ff:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E3:FD:67:1B:95:49:1A:1A:FA:E9:70:05:93:00:74:54:FF:AC:23
            X509v3 Authority Key Identifier:
                keyid:5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3334203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:24:28:81:cc:87:77:e6:ea:7a:1e:9c:3d:eb:d6:d1:1b:d0:
         06:62:32:06:83:e2:d3:0d:74:aa:29:11:d8:91:99:87:ba:22:
         58:97:bf:fe:10:97:f7:75:97:e2:b3:60:1e:76:26:14:92:36:
         04:71:bd:db:84:a1:a1:d2:58:46:7e:b0:68:7d:a0:df:ba:c4:
         c8:7e:f4:8b:4d:81:81:b6:c4:38:7a:6e:bb:5c:93:1d:c2:eb:
         9a:11:11:c3:1f:3b:31:7a:9e:39:8a:40:c5:8c:99:c8:03:7d:
         d2:67:24:a6:83:8f:66:d1:b1:c7:76:b0:4d:4f:c9:e4:a5:77:
         30:da:c8:d6:f2:e6:38:b6:c1:71:dc:fa:5e:ca:a2:41:5e:c7:
         f0:04:7b:4c:9e:05:50:89:e9:aa:f7:2f:99:e3:29:2d:cc:29:
         99:3d:3a:96:3f:51:83:0b:39:bf:8f:b9:5f:a9:68:8c:70:a8:
         05:74:3f:2c:c5:de:8d:8a:27:32:06:1d:7a:48:ff:e8:5c:7c:
         2d:36:da:c1:49:01:1a:c4:0b:fc:06:3c:37:d4:9f:25:46:41:
         41:f7:45:58:4a:ef:bb:73:f0:43:e0:58:82:7b:70:d4:a8:77:
         3d:13:1f:eb:54:c8:e1:e7:3f:ed:f8:ae:2f:df:16:e9:f8:df:
         7e:77:c3:98
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUQiuadcq12PrYaM6o1vfUPvrPZS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM4RjIyRkVCQUM2MTMzNzdENUEwNzY4QjJERTZERDgx
RTNDRDY1MTAeFw0yNDExMDUxNDI1MzJaFw0yNTExMDQxNDMwMzJaMDMxMTAvBgNV
BAMTKDhDRTNGRDY3MUI5NTQ5MUExQUZBRTk3MDA1OTMwMDc0NTRGRkFDMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2QTQ/Sv4QSgYLwVpjuNBD1YK
dra6ugcrqJNddY851kM+vju4fik7KqRARI2fuBAeahuTbFnYTlcRaxBMdggsCabs
FCfD8r52px3hdf6eNpry84oVp7gabei/FhxoPasB4qlRCeLLktg/PplI7DDclNQ1
Ey/DXn68FYgB5OdBLJ+Z/TbIJ6PySql/7xykn6MZxlzolfpMHEqBrihPvQo2l5ln
C735UqoY3IY3ALeFq4LS/iu4am5uf+U9usDr5m12JxEI3nSJvguvXwmEAiQDaNc3
8PCD3iO3mWch+f8h+mEBmSNBADZu7SmuPkAHrAtsZUznncETtepvSkbu/98PAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUjOP9ZxuVSRoa+ulwBZMAdFT/rCMwHwYDVR0j
BBgwFoAUXI8i/rrGEzd9Wgdost5t2B481lEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzAvNUM4RjIyRkVCQUM2MTMzNzdENUEwNzY4QjJERTZERDgxRTNDRDY1MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QzhGMjJGRUJBQzYxMzM3N0Q1
QTA3NjhCMkRFNkREODFFM0NENjUxLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzIz
ODMwMzQzYTYxMzIzODNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzMzMwMzIz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgECigwDQYJKoZIhvcNAQELBQADggEBAEAkKIHMh3fm6noe
nD3r1tEb0AZiMgaD4tMNdKopEdiRmYe6IliXv/4Ql/d1l+KzYB52JhSSNgRxvduE
oaHSWEZ+sGh9oN+6xMh+9ItNgYG2xDh6brtckx3C65oREcMfOzF6njmKQMWMmcgD
fdJnJKaDj2bRscd2sE1PyeSldzDayNby5ji2wXHc+l7KokFex/AEe0yeBVCJ6ar3
L5njKS3MKZk9OpY/UYMLOb+PuV+paIxwqAV0PyzF3o2KJzIGHXpI/+hcfC022sFJ
ARrEC/wGPDfUnyVGQUH3RVhK77tz8EPgWIJ7cNSodz0TH+tUyOHnP+34ri/fFun4
3353w5g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:49:49 2024 by rpki-client on console-fra.rpki-client.org