Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d313238203d3e20323634353137.roa
File:                     323830343a323064633a3a2f33322d313238203d3e20323634353137.roa (raw, json)
Hash identifier:          L/hMo/mY2Nzxf3o8j2vPwahNBiJ9UtPFjIPiy6BPx8w=
Subject key identifier:   6B:4D:75:9E:3B:1D:4E:A7:5F:15:00:38:28:55:1B:69:34:F4:7F:8F
Certificate issuer:       /CN=CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B
Certificate serial:       3DD40DFC3C6D847DB99D9CA3DE13862120292297
Authority key identifier: CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d313238203d3e20323634353137.roa
Signing time:             Mon 17 Jun 2024 20:17:04 +0000
ROA not before:           Mon 17 Jun 2024 20:12:04 +0000
ROA not after:            Mon 16 Jun 2025 20:17:04 +0000
asID:                     264517
IP address blocks:        2804:20dc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 23:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d4:0d:fc:3c:6d:84:7d:b9:9d:9c:a3:de:13:86:21:20:29:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B
        Validity
            Not Before: Jun 17 20:12:04 2024 GMT
            Not After : Jun 16 20:17:04 2025 GMT
        Subject: CN=6B4D759E3B1D4EA75F15003828551B6934F47F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:a4:6f:20:e9:3e:4f:63:d7:c5:34:69:c0:
                    67:4d:e5:e3:fb:f3:e0:6a:eb:cb:3b:f2:79:68:b3:
                    63:5d:46:5c:92:05:59:7b:5c:5d:ce:89:c9:33:25:
                    db:07:76:77:f4:b5:2e:5c:2e:03:91:18:4c:d5:ce:
                    b5:73:af:6c:c3:d6:e8:b2:31:b2:d5:fb:73:eb:12:
                    14:ff:0c:66:79:b7:b7:0d:43:05:e4:df:6c:a5:8c:
                    6b:73:1c:eb:f6:b8:47:29:4f:26:83:bd:cd:71:62:
                    44:d5:2e:3d:8e:9d:92:dc:82:8a:22:e7:f8:38:de:
                    9a:e8:19:26:32:77:41:bb:b7:14:10:da:f1:b7:45:
                    f6:f4:a5:26:60:ca:76:3d:b3:39:2f:6a:d1:14:37:
                    13:50:01:d6:01:92:55:33:87:d9:d0:92:2e:85:e9:
                    b6:b9:f8:8d:b0:23:63:58:82:a6:47:f9:cb:e3:b7:
                    3b:e2:fe:d1:77:fd:bf:4e:b6:01:c0:7d:66:d6:1d:
                    fc:15:83:29:b4:87:f8:05:17:18:96:5f:c1:d6:92:
                    25:bf:98:4a:b1:20:00:f9:6a:13:35:f3:7c:9b:2f:
                    77:96:4c:e2:e9:a8:e5:43:1b:fc:9f:cd:e2:c3:e0:
                    ed:6a:43:bd:b8:94:22:0f:d7:f5:cc:9f:37:0c:a6:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:75:9E:3B:1D:4E:A7:5F:15:00:38:28:55:1B:69:34:F4:7F:8F
            X509v3 Authority Key Identifier:
                keyid:CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d313238203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:5a:bb:63:38:48:83:72:92:2f:b4:32:f0:2e:85:c0:ba:
         4f:94:35:cc:d2:37:69:8e:02:54:6b:76:de:7c:fe:c2:f9:98:
         9a:4a:c7:13:df:46:9f:67:54:30:c0:3b:e8:65:07:ef:c5:cb:
         06:3e:a4:52:4f:6d:d8:a9:46:a9:f7:f8:93:e0:48:3d:c9:22:
         43:64:40:0d:5e:29:ea:a2:0c:d0:da:3a:13:bb:9c:cf:fe:b2:
         34:af:58:80:61:73:1a:bd:34:86:fa:43:80:bc:6a:f1:2c:19:
         8a:a9:da:48:43:50:38:9b:3a:81:aa:51:39:19:3c:87:a2:ae:
         10:5a:ce:5b:74:95:a9:d0:e4:e3:89:d1:5d:8e:3a:40:bd:17:
         73:d1:b6:f7:eb:d6:9e:9b:e4:be:13:ae:6d:7c:7d:c4:37:bd:
         b5:44:7c:76:6b:ba:68:32:42:ad:ae:8e:63:f4:ae:d1:07:bb:
         a1:f7:99:21:01:40:ca:54:41:b1:59:08:c8:0f:cf:ed:3b:a3:
         6e:0b:29:90:35:2b:b2:06:5b:18:6b:6d:4f:24:cd:62:bc:58:
         41:49:2f:d9:85:8d:a6:49:34:d9:40:1c:2e:a8:ed:d5:38:77:
         bb:c3:1d:f7:6f:87:75:6f:2d:3d:62:2d:f2:db:8d:bb:a6:fe:
         2b:77:5e:c7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPdQN/DxthH25nZyj3hOGISApIpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U4QjNFQUJDNUY2QTVBOUY2QzhCQUU4REZDMUMxMjc2
MTJENkU0QjAeFw0yNDA2MTcyMDEyMDRaFw0yNTA2MTYyMDE3MDRaMDMxMTAvBgNV
BAMTKDZCNEQ3NTlFM0IxRDRFQTc1RjE1MDAzODI4NTUxQjY5MzRGNDdGOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN46RvIOk+T2PXxTRpwGdN5eP7
8+Bq68s78nlos2NdRlySBVl7XF3OickzJdsHdnf0tS5cLgORGEzVzrVzr2zD1uiy
MbLV+3PrEhT/DGZ5t7cNQwXk32yljGtzHOv2uEcpTyaDvc1xYkTVLj2OnZLcgooi
5/g43proGSYyd0G7txQQ2vG3Rfb0pSZgynY9szkvatEUNxNQAdYBklUzh9nQki6F
6ba5+I2wI2NYgqZH+cvjtzvi/tF3/b9OtgHAfWbWHfwVgym0h/gFFxiWX8HWkiW/
mEqxIAD5ahM183ybL3eWTOLpqOVDG/yfzeLD4O1qQ724lCIP1/XMnzcMpmV1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUa011njsdTqdfFQA4KFUbaTT0f48wHwYDVR0j
BBgwFoAUzos+q8X2pan2yLro38HBJ2EtbkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl
UkwvMC9DRThCM0VBQkM1RjZBNUE5RjZDOEJBRThERkMxQzEyNzYxMkQ2RTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOEIzRUFCQzVGNkE1QTlG
NkM4QkFFOERGQzFDMTI3NjEyRDZFNEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHbndYMm1BZ3RZWTNZb3JhZHNGbW9TVlg0bmpmem81ZFRxaG84bWc4ZVJMLzAv
MzIzODMwMzQzYTMyMzA2NDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCDcMA0GCSqGSIb3DQEBCwUAA4IBAQBuuVq7
YzhIg3KSL7Qy8C6FwLpPlDXM0jdpjgJUa3befP7C+ZiaSscT30afZ1QwwDvoZQfv
xcsGPqRST23YqUap9/iT4Eg9ySJDZEANXinqogzQ2joTu5zP/rI0r1iAYXMavTSG
+kOAvGrxLBmKqdpIQ1A4mzqBqlE5GTyHoq4QWs5bdJWp0OTjidFdjjpAvRdz0bb3
69aem+S+E65tfH3EN721RHx2a7poMkKtro5j9K7RB7uh95khAUDKVEGxWQjID8/t
O6NuCymQNSuyBlsYa21PJM1ivFhBSS/ZhY2mSTTZQBwuqO3VOHe7wx33b4d1by09
Yi3y2427pv4rd17H
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:02:08 2024 by rpki-client on console-fra.rpki-client.org