Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/323830343a313966633a3a2f33322d313238203d3e203631383330.roa
File:                     323830343a313966633a3a2f33322d313238203d3e203631383330.roa (raw, json)
Hash identifier:          iPDeV+lf/N6cemRDkOwVE6J4cyNqSiVQcYcsKZL0d9s=
Subject key identifier:   75:44:5C:75:A8:77:E0:AC:11:66:7F:DB:9F:EF:EA:3A:AC:8D:A3:1F
Certificate issuer:       /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
Certificate serial:       6B2FAD0C24307B35D29FAB19D7AE69071440E122
Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/323830343a313966633a3a2f33322d313238203d3e203631383330.roa
Signing time:             Wed 03 Apr 2024 21:02:00 +0000
ROA not before:           Wed 03 Apr 2024 20:57:00 +0000
ROA not after:            Wed 02 Apr 2025 21:02:00 +0000
asID:                     61830
IP address blocks:        2804:19fc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl
                          rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2f:ad:0c:24:30:7b:35:d2:9f:ab:19:d7:ae:69:07:14:40:e1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
        Validity
            Not Before: Apr  3 20:57:00 2024 GMT
            Not After : Apr  2 21:02:00 2025 GMT
        Subject: CN=75445C75A877E0AC11667FDB9FEFEA3AAC8DA31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:ab:a1:a4:0f:82:57:0b:11:e8:34:82:99:
                    3f:2a:d9:1f:59:db:8c:51:7c:a5:b9:e5:9a:cc:a9:
                    4f:fc:7a:34:ee:23:7e:12:92:39:7f:26:1f:0e:d4:
                    4e:cd:6d:9b:11:08:4f:ef:18:ba:bb:4f:bb:e0:bb:
                    f8:b2:d4:94:4b:49:2e:9d:ed:76:63:47:fd:86:48:
                    98:50:b1:cd:b2:70:d7:6b:d4:6e:50:b1:a5:be:93:
                    52:ec:80:57:d8:73:8b:6d:64:f1:f5:29:98:aa:0e:
                    58:8b:4c:cf:e5:54:08:a2:c5:d3:fe:fb:44:69:b3:
                    8c:48:11:50:4c:38:8b:94:1a:f4:ae:59:a8:d9:bb:
                    56:94:b6:ef:da:7c:cf:47:a9:9b:ba:76:8f:13:44:
                    ff:ff:2a:85:5c:18:ff:a5:97:9f:92:46:23:02:cc:
                    d7:84:45:b5:a4:ce:e6:36:85:f7:4b:0d:2f:db:b1:
                    84:9c:5e:70:bb:23:4c:57:66:b4:f3:40:59:15:32:
                    44:a0:29:cb:1f:4a:cc:cc:39:86:67:06:b2:33:e0:
                    c3:c3:45:dd:80:bd:33:ab:ef:ba:7f:c6:1c:e5:f9:
                    9d:0d:10:ec:29:03:56:35:39:33:6e:19:26:38:e7:
                    84:29:77:1d:8c:bb:84:83:29:ff:bf:f6:13:68:c4:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:5C:75:A8:77:E0:AC:11:66:7F:DB:9F:EF:EA:3A:AC:8D:A3:1F
            X509v3 Authority Key Identifier:
                keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/323830343a313966633a3a2f33322d313238203d3e203631383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:5e:7a:dc:6b:ff:02:e9:a1:49:6e:25:26:13:b7:a8:88:
         3a:57:30:e2:30:2b:03:1d:aa:5b:5d:dd:bd:af:a2:73:cb:0e:
         b0:79:c6:ce:e2:91:d6:3b:1d:e8:3a:3c:8c:e6:5b:5e:f0:8b:
         5c:0d:d3:63:7f:0b:c1:1f:60:6c:a4:68:cf:ed:ce:dc:8d:ff:
         e5:7a:53:da:25:57:0b:3d:61:cf:38:0f:40:25:50:4e:25:f3:
         85:1c:7a:88:25:91:50:f3:4c:54:a6:7e:e8:cf:b5:4e:0b:90:
         d8:29:c0:0f:46:48:b0:74:be:3e:e3:54:ba:8e:de:a3:3b:1a:
         95:b8:bd:65:92:ef:ab:78:f5:db:e9:ae:41:b4:25:6f:6c:15:
         0d:bf:ee:95:52:61:90:bd:01:24:ce:ce:29:ed:b3:30:5e:4d:
         e7:3d:85:f4:52:9b:02:67:34:cd:6d:e1:a5:39:d0:a6:ee:55:
         23:b8:df:8f:af:08:45:f7:89:14:af:bc:64:8a:c8:b1:e6:8b:
         5a:4b:8c:0c:65:19:ff:06:31:7b:2d:2b:53:68:c5:e9:51:2f:
         90:95:0a:c5:bb:15:05:db:3f:9f:2e:05:f3:1e:b2:12:23:19:
         f6:cc:59:43:1d:f6:a8:9c:67:17:ac:30:d6:68:bf:bc:9a:62:
         bc:07:da:42
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUay+tDCQwezXSn6sZ165pBxRA4SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF
RjVBREFGRDAeFw0yNDA0MDMyMDU3MDBaFw0yNTA0MDIyMTAyMDBaMDMxMTAvBgNV
BAMTKDc1NDQ1Qzc1QTg3N0UwQUMxMTY2N0ZEQjlGRUZFQTNBQUM4REEzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiI6uhpA+CVwsR6DSCmT8q2R9Z
24xRfKW55ZrMqU/8ejTuI34Skjl/Jh8O1E7NbZsRCE/vGLq7T7vgu/iy1JRLSS6d
7XZjR/2GSJhQsc2ycNdr1G5QsaW+k1LsgFfYc4ttZPH1KZiqDliLTM/lVAiixdP+
+0Rps4xIEVBMOIuUGvSuWajZu1aUtu/afM9HqZu6do8TRP//KoVcGP+ll5+SRiMC
zNeERbWkzuY2hfdLDS/bsYScXnC7I0xXZrTzQFkVMkSgKcsfSszMOYZnBrIz4MPD
Rd2AvTOr77p/xhzl+Z0NEOwpA1Y1OTNuGSY454Qpdx2Mu4SDKf+/9hNoxOSXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdURcdah34KwRZn/bn+/qOqyNox8wHwYDVR0j
BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2
bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw
OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTSjdDTG43N1Y4b1VMTXNmQXp1SDM0YlFBTlZrazVNd1BGbmc1azlGNm5LLzIv
MzIzODMwMzQzYTMxMzk2NjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzgzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQZ/DANBgkqhkiG9w0BAQsFAAOCAQEALx5eetxr
/wLpoUluJSYTt6iIOlcw4jArAx2qW13dva+ic8sOsHnGzuKR1jsd6Do8jOZbXvCL
XA3TY38LwR9gbKRoz+3O3I3/5XpT2iVXCz1hzzgPQCVQTiXzhRx6iCWRUPNMVKZ+
6M+1TguQ2CnAD0ZIsHS+PuNUuo7eozsalbi9ZZLvq3j12+muQbQlb2wVDb/ulVJh
kL0BJM7OKe2zMF5N5z2F9FKbAmc0zW3hpTnQpu5VI7jfj68IRfeJFK+8ZIrIseaL
WkuMDGUZ/wYxey0rU2jF6VEvkJUKxbsVBds/ny4F8x6yEiMZ9sxZQx32qJxnF6ww
1mi/vJpivAfaQg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org