Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a3a2f33322d313238203d3e20323639323032.roa
File:                     323830343a363066343a3a2f33322d313238203d3e20323639323032.roa (raw, json)
Hash identifier:          oc89RZ89uvRQbKozFDpn0dXsNVwcyB2SUQ0nJdNVsr8=
Subject key identifier:   0C:23:46:01:C2:68:DC:27:26:ED:B1:53:6D:1B:B9:74:BF:7E:CB:5F
Certificate issuer:       /CN=C81F6B097A703228565609E7450298ED12276AFB
Certificate serial:       67385F4EE1BF84CAE91557BA0BA7E11163ECCE52
Authority key identifier: C8:1F:6B:09:7A:70:32:28:56:56:09:E7:45:02:98:ED:12:27:6A:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C81F6B097A703228565609E7450298ED12276AFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a3a2f33322d313238203d3e20323639323032.roa
Signing time:             Thu 01 Aug 2024 01:16:55 +0000
ROA not before:           Thu 01 Aug 2024 01:11:55 +0000
ROA not after:            Thu 31 Jul 2025 01:16:55 +0000
asID:                     269202
IP address blocks:        2804:60f4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/C81F6B097A703228565609E7450298ED12276AFB.crl
                          rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/C81F6B097A703228565609E7450298ED12276AFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C81F6B097A703228565609E7450298ED12276AFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:38:5f:4e:e1:bf:84:ca:e9:15:57:ba:0b:a7:e1:11:63:ec:ce:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C81F6B097A703228565609E7450298ED12276AFB
        Validity
            Not Before: Aug  1 01:11:55 2024 GMT
            Not After : Jul 31 01:16:55 2025 GMT
        Subject: CN=0C234601C268DC2726EDB1536D1BB974BF7ECB5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:a0:20:2a:d6:fe:41:9a:a4:d1:ef:9d:99:
                    8d:0e:bc:b0:b6:0d:03:2e:81:0b:bf:21:10:83:e2:
                    38:60:a2:e4:ab:23:dd:52:37:00:fe:38:06:55:4f:
                    40:97:65:e2:e4:a5:0e:19:48:87:c2:66:8f:c1:d4:
                    43:9d:b6:3f:65:1b:87:f8:8a:8d:30:07:3e:9f:04:
                    07:09:72:fc:1b:b6:14:01:6d:9e:db:97:b7:e4:b1:
                    e8:f2:c0:2d:98:85:5f:2e:a6:2e:53:d1:3d:62:86:
                    a9:60:d0:04:9d:98:11:4a:2f:cb:1b:17:ff:3a:09:
                    70:19:46:eb:d9:de:7a:34:88:31:66:d3:ec:32:76:
                    ad:fb:2c:7b:d4:92:06:dd:7e:96:9b:5d:ed:96:7a:
                    49:3c:54:8f:ab:d8:c5:17:97:06:f3:e1:39:2e:8b:
                    b6:8d:c7:13:c8:26:2b:6e:0c:10:80:6c:db:18:c5:
                    81:f7:d7:16:fe:98:38:20:e9:97:4b:1e:71:95:a8:
                    e5:7b:15:5b:a3:a4:cf:06:32:5d:a3:d9:30:a5:85:
                    cf:e3:7f:01:a9:22:44:ee:94:5b:d1:c2:1d:09:1e:
                    b5:14:fb:23:84:49:fb:e7:7f:9c:3a:3c:b8:80:a0:
                    cb:3d:8a:fd:4b:36:ba:1b:7f:88:f2:0f:e1:6a:62:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:23:46:01:C2:68:DC:27:26:ED:B1:53:6D:1B:B9:74:BF:7E:CB:5F
            X509v3 Authority Key Identifier:
                keyid:C8:1F:6B:09:7A:70:32:28:56:56:09:E7:45:02:98:ED:12:27:6A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/C81F6B097A703228565609E7450298ED12276AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C81F6B097A703228565609E7450298ED12276AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a3a2f33322d313238203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:9d:20:4e:d1:ac:6c:47:dd:5d:eb:82:66:e0:85:21:69:
         e2:65:06:d0:0d:b0:18:31:ef:03:57:85:d8:6e:8d:8a:9d:4a:
         c8:b9:df:7f:50:c8:36:6c:4f:7d:d0:e5:8c:ca:3c:54:59:29:
         d5:22:a9:b1:19:36:4a:48:45:fa:8b:81:2d:74:cb:0f:c3:ec:
         cb:74:24:2d:dc:a7:d8:a8:0a:31:8c:19:f3:d2:23:5d:e4:a3:
         d4:fe:4d:2d:3f:20:b6:e5:00:14:c6:01:68:70:e6:b6:ee:73:
         80:b0:dc:08:c0:ce:1f:8e:88:65:60:dc:76:3d:20:3e:db:bb:
         cf:84:47:73:3c:90:34:7f:e1:52:61:7d:db:17:cc:36:bc:13:
         07:e2:cd:8d:1a:90:c0:80:75:cc:9c:1f:24:61:d4:00:79:f0:
         9b:bd:4d:df:d6:fb:3a:74:f0:9c:5a:66:ad:ba:f8:17:3a:47:
         a0:28:21:8d:a0:f4:f0:e3:05:be:85:3c:a5:98:72:e8:35:53:
         44:a0:24:db:00:ec:d9:73:cd:37:d7:e8:b5:e0:38:1e:4e:28:
         da:52:ab:26:98:0b:42:df:9a:25:68:cb:e6:2a:db:a3:9b:e2:
         31:73:92:56:72:6e:6b:15:58:c8:fe:a2:a4:f9:da:fa:a5:d8:
         2b:79:f3:f0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZzhfTuG/hMrpFVe6C6fhEWPszlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgxRjZCMDk3QTcwMzIyODU2NTYwOUU3NDUwMjk4RUQx
MjI3NkFGQjAeFw0yNDA4MDEwMTExNTVaFw0yNTA3MzEwMTE2NTVaMDMxMTAvBgNV
BAMTKDBDMjM0NjAxQzI2OERDMjcyNkVEQjE1MzZEMUJCOTc0QkY3RUNCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGKAgKtb+QZqk0e+dmY0OvLC2
DQMugQu/IRCD4jhgouSrI91SNwD+OAZVT0CXZeLkpQ4ZSIfCZo/B1EOdtj9lG4f4
io0wBz6fBAcJcvwbthQBbZ7bl7fksejywC2YhV8upi5T0T1ihqlg0ASdmBFKL8sb
F/86CXAZRuvZ3no0iDFm0+wydq37LHvUkgbdfpabXe2Wekk8VI+r2MUXlwbz4Tku
i7aNxxPIJituDBCAbNsYxYH31xb+mDgg6ZdLHnGVqOV7FVujpM8GMl2j2TClhc/j
fwGpIkTulFvRwh0JHrUU+yOESfvnf5w6PLiAoMs9iv1LNrobf4jyD+FqYrRvAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUDCNGAcJo3Ccm7bFTbRu5dL9+y18wHwYDVR0j
BBgwFoAUyB9rCXpwMihWVgnnRQKY7RInavswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0tUaXBDUWhIQUtFVWJEakNxM1NQV3FIUG1vUzhyWHhkVDdhUjVnU0hn
NmEvMC9DODFGNkIwOTdBNzAzMjI4NTY1NjA5RTc0NTAyOThFRDEyMjc2QUZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4MUY2QjA5N0E3MDMyMjg1
NjU2MDlFNzQ1MDI5OEVEMTIyNzZBRkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLVGlwQ1FoSEFLRVViRGpDcTNTUFdxSFBtb1M4clh4ZFQ3YVI1Z1NIZzZhLzAv
MzIzODMwMzQzYTM2MzA2NjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGD0MA0GCSqGSIb3DQEBCwUAA4IBAQB7dJ0g
TtGsbEfdXeuCZuCFIWniZQbQDbAYMe8DV4XYbo2KnUrIud9/UMg2bE990OWMyjxU
WSnVIqmxGTZKSEX6i4EtdMsPw+zLdCQt3KfYqAoxjBnz0iNd5KPU/k0tPyC25QAU
xgFocOa27nOAsNwIwM4fjohlYNx2PSA+27vPhEdzPJA0f+FSYX3bF8w2vBMH4s2N
GpDAgHXMnB8kYdQAefCbvU3f1vs6dPCcWmatuvgXOkegKCGNoPTw4wW+hTylmHLo
NVNEoCTbAOzZc8031+i14DgeTijaUqsmmAtC35olaMvmKtujm+Ixc5JWcm5rFVjI
/qKk+dr6pdgrefPw
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:48 2024 by rpki-client on console-fra.rpki-client.org