Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
File:                     323830343a323330383a3a2f33322d3634203d3e20323634313338.roa (raw, json)
Hash identifier:          Mh4RNw8I5g3aPy+TEp08KexrAFg+SRCl8QBE/2NiqsI=
Subject key identifier:   47:49:6D:7F:E9:A0:10:80:25:C9:13:61:42:8A:90:6F:4B:4C:32:D5
Certificate issuer:       /CN=066C4A67C4AAF5E36A550A1FE82432034BCAE927
Certificate serial:       74F97C4C463686A85AAD8228809B50DCD2A416DC
Authority key identifier: 06:6C:4A:67:C4:AA:F5:E3:6A:55:0A:1F:E8:24:32:03:4B:CA:E9:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066C4A67C4AAF5E36A550A1FE82432034BCAE927.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
Signing time:             Tue 05 Nov 2024 18:14:26 +0000
ROA not before:           Tue 05 Nov 2024 18:09:26 +0000
ROA not after:            Tue 04 Nov 2025 18:14:26 +0000
asID:                     264138
IP address blocks:        2804:2308::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/066C4A67C4AAF5E36A550A1FE82432034BCAE927.crl
                          rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/066C4A67C4AAF5E36A550A1FE82432034BCAE927.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066C4A67C4AAF5E36A550A1FE82432034BCAE927.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f9:7c:4c:46:36:86:a8:5a:ad:82:28:80:9b:50:dc:d2:a4:16:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066C4A67C4AAF5E36A550A1FE82432034BCAE927
        Validity
            Not Before: Nov  5 18:09:26 2024 GMT
            Not After : Nov  4 18:14:26 2025 GMT
        Subject: CN=47496D7FE9A0108025C91361428A906F4B4C32D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:0d:ae:78:ae:c1:0c:5d:8b:06:93:42:8e:
                    6c:d4:28:72:77:20:2a:11:41:cd:88:25:ee:8f:32:
                    c4:ac:8c:80:8f:54:3d:08:cd:9b:61:6d:14:3a:fe:
                    58:0c:04:db:2f:9a:40:42:dc:cb:43:6f:97:13:ab:
                    f9:b9:2c:d6:2a:e1:72:77:3b:0e:ed:02:3b:2e:16:
                    86:24:ed:2d:9b:8e:cd:46:6a:e2:97:10:96:77:bb:
                    b7:57:0d:a4:48:dc:c7:ef:39:88:09:d6:8e:37:42:
                    5f:83:31:16:41:eb:77:57:70:cc:fa:0c:ef:37:67:
                    cb:3e:d8:19:24:b0:36:4d:d2:a3:d0:e2:79:0c:e2:
                    a4:b5:d2:66:6f:59:99:4a:ce:ca:15:71:51:8b:41:
                    d2:99:5e:47:96:d9:15:84:11:bb:64:66:e3:b0:4d:
                    64:2d:a9:de:bc:07:bb:dd:9b:59:cb:08:3f:43:93:
                    38:af:b0:36:ae:74:af:ff:57:7b:73:d1:6d:7a:0e:
                    de:5d:a6:39:4d:dd:38:72:4c:4f:3d:d6:31:0c:5d:
                    f3:65:ee:33:79:fe:65:b8:54:cf:66:61:22:9f:30:
                    42:4a:6b:9d:de:51:5f:f1:b8:a9:99:c0:f3:d6:32:
                    d9:f0:a2:3d:15:15:ce:64:eb:44:bf:2c:6c:94:ce:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:49:6D:7F:E9:A0:10:80:25:C9:13:61:42:8A:90:6F:4B:4C:32:D5
            X509v3 Authority Key Identifier:
                keyid:06:6C:4A:67:C4:AA:F5:E3:6A:55:0A:1F:E8:24:32:03:4B:CA:E9:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/066C4A67C4AAF5E36A550A1FE82432034BCAE927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066C4A67C4AAF5E36A550A1FE82432034BCAE927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2308::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:bb:15:9d:bf:9d:37:fa:a3:05:c5:ab:1d:be:0d:2c:70:
         ff:29:55:7b:47:aa:eb:0e:c2:63:31:7c:c0:2c:2c:88:d9:a1:
         1a:7a:1b:b8:70:9c:6d:e4:27:58:53:96:b0:4e:08:72:f1:23:
         63:b8:f5:58:16:7e:24:e1:db:a3:c2:d4:dc:c2:b8:0c:fe:e4:
         6e:42:01:1b:37:f9:b8:c5:95:6e:eb:69:a5:e2:a0:78:60:62:
         f1:71:c6:c7:59:34:b5:4d:61:e1:30:f7:85:14:f8:13:83:fc:
         37:b8:9c:23:99:f1:7d:ea:c8:c9:12:39:b8:91:97:96:72:8b:
         9a:0d:94:ad:9c:e6:ff:cd:45:80:7d:2f:b1:12:77:05:03:23:
         fb:26:03:af:1d:ef:60:fd:67:c7:49:be:fe:74:86:6c:ab:51:
         c7:02:4b:4f:cd:ed:a4:48:f6:c8:b6:b3:b5:39:a6:48:7b:31:
         bb:bc:ec:b1:de:42:53:6a:14:d2:bb:58:15:a1:8f:ef:fa:82:
         75:59:ac:fa:9b:e1:e1:47:32:15:28:c4:31:09:54:c0:28:5f:
         7b:54:76:00:af:fb:85:5e:3b:30:5c:4a:c8:f5:8c:5b:19:52:
         25:41:b5:8e:37:69:72:07:f8:23:7a:a8:59:37:1d:99:c6:ae:
         e1:dd:19:72
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdPl8TEY2hqharYIogJtQ3NKkFtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY2QzRBNjdDNEFBRjVFMzZBNTUwQTFGRTgyNDMyMDM0
QkNBRTkyNzAeFw0yNDExMDUxODA5MjZaFw0yNTExMDQxODE0MjZaMDMxMTAvBgNV
BAMTKDQ3NDk2RDdGRTlBMDEwODAyNUM5MTM2MTQyOEE5MDZGNEI0QzMyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtw2ueK7BDF2LBpNCjmzUKHJ3
ICoRQc2IJe6PMsSsjICPVD0IzZthbRQ6/lgMBNsvmkBC3MtDb5cTq/m5LNYq4XJ3
Ow7tAjsuFoYk7S2bjs1GauKXEJZ3u7dXDaRI3MfvOYgJ1o43Ql+DMRZB63dXcMz6
DO83Z8s+2BkksDZN0qPQ4nkM4qS10mZvWZlKzsoVcVGLQdKZXkeW2RWEEbtkZuOw
TWQtqd68B7vdm1nLCD9DkzivsDaudK//V3tz0W16Dt5dpjlN3ThyTE891jEMXfNl
7jN5/mW4VM9mYSKfMEJKa53eUV/xuKmZwPPWMtnwoj0VFc5k60S/LGyUzmIJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUR0ltf+mgEIAlyRNhQoqQb0tMMtUwHwYDVR0j
BBgwFoAUBmxKZ8Sq9eNqVQof6CQyA0vK6ScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNNTnpqaU15QnRncTFmdDJBYXBxM1ljamp3bldLc2taQkxIMWp2QnJT
RHYvMC8wNjZDNEE2N0M0QUFGNUUzNkE1NTBBMUZFODI0MzIwMzRCQ0FFOTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NkM0QTY3QzRBQUY1RTM2
QTU1MEExRkU4MjQzMjAzNEJDQUU5MjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzTU56amlNeUJ0Z3ExZnQyQWFwcTNZY2pqd25XS3NrWkJMSDFqdkJyU0R2LzAv
MzIzODMwMzQzYTMyMzMzMDM4M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNjM0
MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQjCDANBgkqhkiG9w0BAQsFAAOCAQEAC8G7FZ2/
nTf6owXFqx2+DSxw/ylVe0eq6w7CYzF8wCwsiNmhGnobuHCcbeQnWFOWsE4IcvEj
Y7j1WBZ+JOHbo8LU3MK4DP7kbkIBGzf5uMWVbutppeKgeGBi8XHGx1k0tU1h4TD3
hRT4E4P8N7icI5nxferIyRI5uJGXlnKLmg2UrZzm/81FgH0vsRJ3BQMj+yYDrx3v
YP1nx0m+/nSGbKtRxwJLT83tpEj2yLaztTmmSHsxu7zssd5CU2oU0rtYFaGP7/qC
dVms+pvh4UcyFSjEMQlUwChfe1R2AK/7hV47MFxKyPWMWxlSJUG1jjdpcgf4I3qo
WTcdmcau4d0Zcg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org