Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/323830343a3336633a3a2f33322d313238203d3e20323632383738.roa
File:                     323830343a3336633a3a2f33322d313238203d3e20323632383738.roa (raw, json)
Hash identifier:          39KqHobcTiccOD6xDuXXkeLzu70vfqcTKwQ2ZM0FSiw=
Subject key identifier:   49:E5:31:AE:A5:79:4C:49:8B:59:AB:F0:0E:3A:B2:D9:48:84:F2:F1
Certificate issuer:       /CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
Certificate serial:       4B8AA55D79257E411B9C83475A58CF8474E7F158
Authority key identifier: 6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/323830343a3336633a3a2f33322d313238203d3e20323632383738.roa
Signing time:             Thu 25 Jul 2024 14:15:43 +0000
ROA not before:           Thu 25 Jul 2024 14:10:43 +0000
ROA not after:            Thu 24 Jul 2025 14:15:43 +0000
asID:                     262878
IP address blocks:        2804:36c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.crl
                          rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8a:a5:5d:79:25:7e:41:1b:9c:83:47:5a:58:cf:84:74:e7:f1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
        Validity
            Not Before: Jul 25 14:10:43 2024 GMT
            Not After : Jul 24 14:15:43 2025 GMT
        Subject: CN=49E531AEA5794C498B59ABF00E3AB2D94884F2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a1:69:31:95:39:9f:93:71:8e:b9:f8:0a:0a:
                    ca:13:f1:ac:39:87:b3:91:b1:c8:0d:31:df:41:c9:
                    5d:7c:e7:06:b2:b3:d5:9b:0a:65:0d:98:c3:0a:af:
                    49:0f:ca:63:bb:e9:ef:05:cc:2b:a9:b0:8b:c4:31:
                    80:ed:d0:88:d4:32:5d:9b:a9:ac:36:13:01:2f:c4:
                    bc:2b:5d:84:e0:5d:46:52:82:a1:dc:60:38:f4:de:
                    cd:44:e7:37:8f:4b:25:89:c7:72:7a:8c:3e:73:2c:
                    54:3a:9a:58:b6:54:15:f5:af:7e:91:47:4e:b4:37:
                    67:55:04:33:01:b1:3c:41:e9:8d:85:1a:34:e8:c1:
                    f7:50:d8:ef:88:9f:43:48:ec:cb:79:47:f2:31:2e:
                    46:36:d0:30:e3:1f:fd:1b:c2:11:63:25:8f:6c:e2:
                    b1:fe:03:39:88:bc:f3:be:b3:9c:19:0f:a2:5b:56:
                    8b:19:92:6c:cf:a6:a4:a5:19:78:c0:48:e1:7c:13:
                    49:d7:f4:64:a2:2a:c5:59:cb:b4:40:d0:0c:8b:2e:
                    8c:74:8a:7b:33:ab:21:c8:e1:a4:74:d3:c4:06:72:
                    1e:6b:4e:58:cf:6f:f2:2e:d2:08:09:8f:28:44:c2:
                    32:aa:bd:fc:3a:07:37:6c:ec:32:75:8e:92:45:c8:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:31:AE:A5:79:4C:49:8B:59:AB:F0:0E:3A:B2:D9:48:84:F2:F1
            X509v3 Authority Key Identifier:
                keyid:6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/323830343a3336633a3a2f33322d313238203d3e20323632383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:47:95:43:ba:ac:44:2e:91:64:07:9c:0a:19:52:55:29:
         18:2b:84:f2:48:7f:0b:28:10:37:55:26:05:8d:b5:81:16:d9:
         9e:8c:11:0d:02:ab:07:b5:1d:e9:7a:5a:6c:cc:5e:42:63:2d:
         e2:ce:d4:36:cf:cb:2f:07:b6:bc:19:d2:72:e8:72:ca:b9:e7:
         90:ce:5d:a0:5a:1f:a1:1b:4e:60:72:20:4b:f8:9f:e9:a6:26:
         53:af:20:5a:e8:3d:f3:96:53:e6:35:2e:77:7c:50:d4:74:27:
         97:a3:6b:1d:b4:6a:78:a5:d2:96:8b:0a:de:a5:ea:ac:db:55:
         2c:82:e6:69:2a:92:f2:88:2f:f1:f7:50:cf:42:83:8a:9a:15:
         81:90:f1:11:c9:86:81:1a:5c:a9:83:63:44:1b:a6:6f:be:9f:
         98:85:b9:af:07:f7:90:50:b6:9e:01:63:5d:11:d6:27:39:07:
         0b:f6:cb:b2:4a:27:71:15:51:17:11:3e:3a:12:11:4a:f5:1a:
         45:bc:5f:28:c2:e5:b7:44:58:a1:b3:80:24:d9:11:59:33:74:
         b6:54:a0:38:87:50:5b:11:d0:8a:44:fc:8b:b1:81:df:8c:75:
         58:38:78:4b:05:e6:2b:37:03:1e:3e:a2:29:45:87:3a:99:54:
         3b:13:0d:5e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUS4qlXXklfkEbnINHWljPhHTn8VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFDQzI2OUU5Qjk0QUQ2QTI4M0Q2QjI1RTZGMkQzN0Yw
MzZBMjc0MDAeFw0yNDA3MjUxNDEwNDNaFw0yNTA3MjQxNDE1NDNaMDMxMTAvBgNV
BAMTKDQ5RTUzMUFFQTU3OTRDNDk4QjU5QUJGMDBFM0FCMkQ5NDg4NEYyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDloWkxlTmfk3GOufgKCsoT8aw5
h7ORscgNMd9ByV185ways9WbCmUNmMMKr0kPymO76e8FzCupsIvEMYDt0IjUMl2b
qaw2EwEvxLwrXYTgXUZSgqHcYDj03s1E5zePSyWJx3J6jD5zLFQ6mli2VBX1r36R
R060N2dVBDMBsTxB6Y2FGjTowfdQ2O+In0NI7Mt5R/IxLkY20DDjH/0bwhFjJY9s
4rH+AzmIvPO+s5wZD6JbVosZkmzPpqSlGXjASOF8E0nX9GSiKsVZy7RA0AyLLox0
inszqyHI4aR008QGch5rTljPb/Iu0ggJjyhEwjKqvfw6Bzds7DJ1jpJFyH0rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSeUxrqV5TEmLWavwDjqy2UiE8vEwHwYDVR0j
BBgwFoAUaswmnpuUrWooPWsl5vLTfwNqJ0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVdoc2l2RVBlQ2Y1WUV6SzM3RjJTV3MyeE5Md1pDOGRYcEQzdkp6VzFp
RHovMC82QUNDMjY5RTlCOTRBRDZBMjgzRDZCMjVFNkYyRDM3RjAzNkEyNzQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBQ0MyNjlFOUI5NEFENkEy
ODNENkIyNUU2RjJEMzdGMDM2QTI3NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVXaHNpdkVQZUNmNVlFekszN0YyU1dzMnhOTHdaQzhkWHBEM3ZKelcxaUR6LzAv
MzIzODMwMzQzYTMzMzY2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQDbDANBgkqhkiG9w0BAQsFAAOCAQEALYFHlUO6
rEQukWQHnAoZUlUpGCuE8kh/CygQN1UmBY21gRbZnowRDQKrB7Ud6XpabMxeQmMt
4s7UNs/LLwe2vBnScuhyyrnnkM5doFofoRtOYHIgS/if6aYmU68gWug985ZT5jUu
d3xQ1HQnl6NrHbRqeKXSlosK3qXqrNtVLILmaSqS8ogv8fdQz0KDipoVgZDxEcmG
gRpcqYNjRBumb76fmIW5rwf3kFC2ngFjXRHWJzkHC/bLskoncRVRFxE+OhIRSvUa
RbxfKMLlt0RYobOAJNkRWTN0tlSgOIdQWxHQikT8i7GB34x1WDh4SwXmKzcDHj6i
KUWHOplUOxMNXg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org