Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/323830343a363935303a3a2f33322d3438203d3e20323730323632.roa
File:                     323830343a363935303a3a2f33322d3438203d3e20323730323632.roa (raw, json)
Hash identifier:          CK3FlfcvNjRGtOPLruhKGj8uQGUbABhA25pfrinXRuU=
Subject key identifier:   27:AC:B2:96:BD:3B:B9:B4:8B:9E:D8:82:C8:B6:0E:1F:4E:46:7A:7A
Certificate issuer:       /CN=4604735AE146206BD46CAEA7DB01B25B210619DE
Certificate serial:       6A2DD575AECCE6CFDF9ABC08BE65E4133BD77ED6
Authority key identifier: 46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/323830343a363935303a3a2f33322d3438203d3e20323730323632.roa
Signing time:             Thu 18 Jul 2024 19:19:59 +0000
ROA not before:           Thu 18 Jul 2024 19:14:59 +0000
ROA not after:            Thu 17 Jul 2025 19:19:59 +0000
asID:                     270262
IP address blocks:        2804:6950::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl
                          rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2d:d5:75:ae:cc:e6:cf:df:9a:bc:08:be:65:e4:13:3b:d7:7e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4604735AE146206BD46CAEA7DB01B25B210619DE
        Validity
            Not Before: Jul 18 19:14:59 2024 GMT
            Not After : Jul 17 19:19:59 2025 GMT
        Subject: CN=27ACB296BD3BB9B48B9ED882C8B60E1F4E467A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:9a:e3:eb:89:81:68:e3:aa:70:45:97:3c:
                    91:11:7e:a9:81:da:bf:62:d5:d8:aa:15:08:ab:9b:
                    a2:ab:c6:d9:2c:4d:3e:fb:9f:f5:c7:17:ad:dc:8c:
                    38:7f:7b:9c:2d:2e:62:a3:39:b5:84:07:60:7f:f8:
                    b1:6a:a5:fc:df:8e:ad:8d:bb:f5:74:29:87:ea:0f:
                    3f:4c:f3:85:4b:8b:e6:d6:dc:90:a1:17:5b:22:3e:
                    46:57:cb:7a:10:1f:2b:a8:cc:a0:c7:e2:e3:0e:02:
                    9f:05:97:52:0e:c6:f9:4e:65:83:97:38:90:e9:f0:
                    5f:0c:c1:cd:4e:a0:ba:12:cb:1f:34:2c:c8:4d:06:
                    c4:5c:f4:cf:d7:03:08:8b:8a:1e:cd:b6:31:3f:72:
                    71:0c:dc:d6:76:44:d4:f0:fc:83:4b:97:e7:0c:30:
                    60:9b:56:37:65:e7:ed:80:ff:66:40:54:7b:fc:08:
                    07:50:96:2c:3d:e4:79:b6:fb:57:b6:59:1d:2f:ac:
                    9f:79:64:c1:28:5c:ee:87:be:42:06:6d:86:13:2e:
                    1a:89:89:34:02:9b:0b:70:78:26:14:bb:b7:25:c8:
                    4b:0d:8a:4c:07:4d:81:e8:e9:8b:5e:9b:ba:fc:e9:
                    af:66:ad:55:0a:c2:8d:c6:20:7e:2d:fb:88:e0:ae:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:B2:96:BD:3B:B9:B4:8B:9E:D8:82:C8:B6:0E:1F:4E:46:7A:7A
            X509v3 Authority Key Identifier:
                keyid:46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/323830343a363935303a3a2f33322d3438203d3e20323730323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6950::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:1f:48:c0:e9:b3:36:f9:cf:22:80:5e:11:a7:83:92:22:
         fb:c4:11:a3:54:70:b6:c8:33:57:a9:74:2c:36:00:d4:0c:42:
         b4:a1:08:52:ca:6e:f3:6e:6c:29:70:ef:b8:f2:5e:fc:32:7d:
         7b:f2:9a:86:bc:e2:98:6f:cb:84:75:67:c5:7f:0f:36:6f:d9:
         5c:f8:70:7c:3d:ec:2c:3f:5d:3c:e8:33:65:1b:10:c7:93:43:
         1a:5c:91:30:e3:21:77:ca:07:7b:c9:1e:e4:17:b2:1e:73:14:
         91:30:21:28:0b:49:23:8c:72:56:4b:f1:f5:53:2a:bd:2f:38:
         5a:a0:9d:c8:79:5b:4f:d4:9b:c7:bc:3b:ea:3a:86:23:33:4d:
         e4:ad:7d:f5:76:5f:7d:2c:41:87:db:ad:4d:68:c1:e5:5f:3b:
         a6:25:91:d4:49:23:cf:e7:dc:df:f6:43:b3:ee:c4:6e:ff:0c:
         16:72:a3:f3:a9:2b:70:a0:d0:c6:16:12:b4:c4:d6:a4:f4:c3:
         39:b5:fc:0d:53:aa:12:21:fd:0d:f1:33:83:8a:6b:e7:32:2c:
         4b:4d:97:8b:31:c7:96:29:b9:f8:8a:3f:59:a7:13:e3:2c:7e:
         5b:2a:1b:eb:27:f0:f0:f8:b0:d2:be:83:7a:67:11:cf:44:1d:
         0b:f8:bf:79
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUai3Vda7M5s/fmrwIvmXkEzvXftYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwNDczNUFFMTQ2MjA2QkQ0NkNBRUE3REIwMUIyNUIy
MTA2MTlERTAeFw0yNDA3MTgxOTE0NTlaFw0yNTA3MTcxOTE5NTlaMDMxMTAvBgNV
BAMTKDI3QUNCMjk2QkQzQkI5QjQ4QjlFRDg4MkM4QjYwRTFGNEU0NjdBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCJrj64mBaOOqcEWXPJERfqmB
2r9i1diqFQirm6KrxtksTT77n/XHF63cjDh/e5wtLmKjObWEB2B/+LFqpfzfjq2N
u/V0KYfqDz9M84VLi+bW3JChF1siPkZXy3oQHyuozKDH4uMOAp8Fl1IOxvlOZYOX
OJDp8F8Mwc1OoLoSyx80LMhNBsRc9M/XAwiLih7NtjE/cnEM3NZ2RNTw/INLl+cM
MGCbVjdl5+2A/2ZAVHv8CAdQliw95Hm2+1e2WR0vrJ95ZMEoXO6HvkIGbYYTLhqJ
iTQCmwtweCYUu7clyEsNikwHTYHo6Ytem7r86a9mrVUKwo3GIH4t+4jgrmubAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJ6yylr07ubSLntiCyLYOH05GenowHwYDVR0j
BBgwFoAURgRzWuFGIGvUbK6n2wGyWyEGGd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWJpWHM3cVJwbjlDTDRaUERFeVRzRloyQUR6YzRDekJGZG96aFoydndI
RXkvMC80NjA0NzM1QUUxNDYyMDZCRDQ2Q0FFQTdEQjAxQjI1QjIxMDYxOURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MDQ3MzVBRTE0NjIwNkJE
NDZDQUVBN0RCMDFCMjVCMjEwNjE5REUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzViaVhzN3FScG45Q0w0WlBERXlUc0ZaMkFEemM0Q3pCRmRvemhaMnZ3SEV5LzAv
MzIzODMwMzQzYTM2MzkzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpUDANBgkqhkiG9w0BAQsFAAOCAQEASnofSMDp
szb5zyKAXhGng5Ii+8QRo1RwtsgzV6l0LDYA1AxCtKEIUspu825sKXDvuPJe/DJ9
e/KahrzimG/LhHVnxX8PNm/ZXPhwfD3sLD9dPOgzZRsQx5NDGlyRMOMhd8oHe8ke
5BeyHnMUkTAhKAtJI4xyVkvx9VMqvS84WqCdyHlbT9Sbx7w76jqGIzNN5K199XZf
fSxBh9utTWjB5V87piWR1Ekjz+fc3/ZDs+7Ebv8MFnKj86krcKDQxhYStMTWpPTD
ObX8DVOqEiH9DfEzg4pr5zIsS02XizHHlim5+Io/WacT4yx+Wyob6yfw8Piw0r6D
emcRz0QdC/i/eQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org