Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa
File:                     323830343a3632343a3a2f33322d3438203d3e203238323833.roa (raw, json)
Hash identifier:          184Ed3fCnf05TcXAMZKBY69I56En5m3qtSvs5jwyx2Y=
Subject key identifier:   80:0F:0E:CC:BA:9C:2C:68:E6:97:EB:47:50:64:51:5F:A8:EF:25:6B
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       015D9BFBEA2415565EC679EE4089BBC5EBFA1991
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28283
IP address blocks:        2804:624::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5d:9b:fb:ea:24:15:56:5e:c6:79:ee:40:89:bb:c5:eb:fa:19:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:92:65:8e:16:6e:55:fe:16:74:a4:1e:23:
                    89:9c:8b:1e:e6:83:35:b1:78:29:82:b6:2b:5d:c5:
                    67:a2:e5:82:a8:69:04:26:d8:b9:ec:55:7a:69:72:
                    7e:bc:f5:44:b2:9e:c0:37:6e:83:c5:a3:73:81:f8:
                    7b:c3:ca:f9:e9:74:ac:fb:10:4c:43:fb:71:60:51:
                    10:34:16:00:dd:1d:8c:18:cd:ca:79:2f:ff:01:64:
                    ff:0b:0c:2a:d5:fc:09:ce:6c:29:6f:17:b5:4a:b6:
                    0a:3d:d4:31:50:22:94:af:80:9f:55:c4:8f:d0:31:
                    9a:21:7b:02:0a:75:44:b9:f2:13:d9:74:1e:91:b9:
                    42:4b:ed:f6:0f:5a:e6:33:68:96:14:c9:ec:83:22:
                    a1:10:2a:c2:88:eb:0b:b2:13:e1:b9:dc:c6:51:cc:
                    57:6a:0d:1d:35:03:33:eb:52:60:bf:64:53:5c:2b:
                    30:66:46:e2:4f:22:7f:a4:73:4d:f8:f0:cf:2b:fd:
                    5b:31:f5:1a:60:5a:da:cd:27:7a:f3:46:c3:2c:7c:
                    77:48:51:ab:85:35:10:7a:fd:76:2d:5c:1a:eb:0b:
                    1f:e2:fd:6f:06:4a:87:ef:af:d1:fd:81:54:49:0c:
                    1f:ff:fe:1b:b5:51:b2:9f:68:9a:7f:df:ae:98:7b:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:0E:CC:BA:9C:2C:68:E6:97:EB:47:50:64:51:5F:A8:EF:25:6B
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:624::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:dc:82:62:07:7b:fd:ce:f6:1d:33:4a:a9:ef:cf:de:4e:c1:
         bf:61:0f:3a:43:14:d2:78:c4:d3:03:c1:e1:51:ad:bd:7a:20:
         36:6e:ec:e3:89:0c:fa:43:f5:bd:a3:f8:86:41:e0:ad:6a:36:
         f5:c9:22:bb:e5:19:d1:43:a3:e1:5b:9b:1a:78:e6:82:8f:cc:
         5e:93:9a:51:ff:7e:de:f9:98:9b:f3:bc:2a:9c:0d:5b:93:b1:
         36:90:06:6e:48:4c:f8:fc:e2:5c:df:9a:f0:c9:11:4f:d0:02:
         d1:5b:bc:c6:6a:c9:24:ac:2e:8e:cc:27:73:e7:d6:e0:55:07:
         ca:4a:01:e5:96:e8:b1:fb:48:f9:e7:53:31:b0:8b:de:03:bd:
         0b:44:29:52:c8:b5:0d:14:35:af:67:37:21:fa:ba:5e:06:28:
         3d:54:a7:45:dd:56:71:f4:00:15:85:1e:2a:e1:0d:0a:a7:8e:
         a3:ab:1c:79:84:80:06:d4:a4:35:37:31:02:a2:84:bc:45:e1:
         64:c1:0d:31:25:62:9c:39:f9:f2:0c:4d:f2:76:95:76:a3:d8:
         f1:57:20:16:ab:5d:f7:15:84:09:59:21:d1:f7:02:1e:28:7a:
         26:d4:fe:a8:3b:dc:80:d2:5d:d8:90:80:aa:4f:0a:dd:46:86:
         39:c1:de:89
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUAV2b++okFVZexnnuQIm7xev6GZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MDI0MEMzRTg4QjMzMEI5QkQwQjkxNzkxRjUxOURC
NUJFOEM1OTAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQ1QjkyNjU4RTE2NkU1NUZF
MTY3NEE0MUUyMzg5OUM4QjFFRTY4MzM1QjE3ODI5ODJCNjJCNURDNTY3QTJFNTgy
QTg2OTA0MjZEOEI5RUM1NTdBNjk3MjdFQkNGNTQ0QjI5RUMwMzc2RTgzQzVBMzcz
ODFGODdCQzNDQUY5RTk3NEFDRkIxMDRDNDNGQjcxNjA1MTEwMzQxNjAwREQxRDhD
MThDRENBNzkyRkZGMDE2NEZGMEIwQzJBRDVGQzA5Q0U2QzI5NkYxN0I1NEFCNjBB
M0RENDMxNTAyMjk0QUY4MDlGNTVDNDhGRDAzMTlBMjE3QjAyMEE3NTQ0QjlGMjEz
RDk3NDFFOTFCOTQyNEJFREY2MEY1QUU2MzM2ODk2MTRDOUVDODMyMkExMTAyQUMy
ODhFQjBCQjIxM0UxQjlEQ0M2NTFDQzU3NkEwRDFEMzUwMzMzRUI1MjYwQkY2NDUz
NUMyQjMwNjY0NkUyNEYyMjdGQTQ3MzRERjhGMENGMkJGRDVCMzFGNTFBNjA1QURB
Q0QyNzdBRjM0NkMzMkM3Qzc3NDg1MUFCODUzNTEwN0FGRDc2MkQ1QzFBRUIwQjFG
RTJGRDZGMDY0QTg3RUZBRkQxRkQ4MTU0NDkwQzFGRkZGRTFCQjU1MUIyOUY2ODlB
N0ZERkFFOTg3QjkzMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5FuSZY4WblX+FnSkHiOJnIse5oM1sXgpgrYrXcVnouWCqGkEJti5
7FV6aXJ+vPVEsp7AN26DxaNzgfh7w8r56XSs+xBMQ/txYFEQNBYA3R2MGM3KeS//
AWT/Cwwq1fwJzmwpbxe1SrYKPdQxUCKUr4CfVcSP0DGaIXsCCnVEufIT2XQekblC
S+32D1rmM2iWFMnsgyKhECrCiOsLshPhudzGUcxXag0dNQMz61Jgv2RTXCswZkbi
TyJ/pHNN+PDPK/1bMfUaYFrazSd680bDLHx3SFGrhTUQev12LVwa6wsf4v1vBkqH
76/R/YFUSQwf//4btVGyn2iaf9+umHuTIQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FIAPDsy6nCxo5pfrR1BkUV+o7yVrMB8GA1UdIwQYMBaAFKaQJAw+iLMwub0LkXkf
UZ21voxZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNyY2c0cTExRTdXQVFL
cVRyTWVBOFFrYlc5bU5MdTdad3h6dmlDakxuZkZ2LzEvQTY5MDI0MEMzRTg4QjMz
MEI5QkQwQjkxNzkxRjUxOURCNUJFOEM1OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BNjkwMjQwQzNFODhCMzMwQjlCRDBCOTE3OTFGNTE5REI1QkU4
QzU5LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zcmNnNHExMUU3V0FRS3FUck1l
QThRa2JXOW1OTHU3Wnd4enZpQ2pMbmZGdi8xLzMyMzgzMDM0M2EzNjMyMzQzYTNh
MmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzIzODMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQGJDAN
BgkqhkiG9w0BAQsFAAOCAQEAvdyCYgd7/c72HTNKqe/P3k7Bv2EPOkMU0njE0wPB
4VGtvXogNm7s44kM+kP1vaP4hkHgrWo29ckiu+UZ0UOj4VubGnjmgo/MXpOaUf9+
3vmYm/O8KpwNW5OxNpAGbkhM+PziXN+a8MkRT9AC0Vu8xmrJJKwujswnc+fW4FUH
ykoB5ZbosftI+edTMbCL3gO9C0QpUsi1DRQ1r2c3Ifq6XgYoPVSnRd1WcfQAFYUe
KuENCqeOo6sceYSABtSkNTcxAqKEvEXhZMENMSVinDn58gxN8naVdqPY8VcgFqtd
9xWECVkh0fcCHih6JtT+qDvcgNJd2JCAqk8K3UaGOcHeiQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org