Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33332d3435203d3e20323638383432.roa
File:                     323830343a356236633a3a2f33332d3435203d3e20323638383432.roa (raw, json)
Hash identifier:          zRkGpahLAp1ypqi6hXmwgfSyOI6mpzAMFOgNhBVuFjo=
Subject key identifier:   08:C0:3B:95:2B:44:10:77:7F:14:8E:19:84:E4:87:4A:E9:80:A5:4C
Certificate issuer:       /CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
Certificate serial:       1B39F402900AC54868AEEDDC970DA01F663F7EC1
Authority key identifier: 56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33332d3435203d3e20323638383432.roa
Signing time:             Thu 08 Aug 2024 12:40:05 +0000
ROA not before:           Thu 08 Aug 2024 12:35:05 +0000
ROA not after:            Thu 07 Aug 2025 12:40:05 +0000
asID:                     268842
IP address blocks:        2804:5b6c::/33 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl
                          rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:39:f4:02:90:0a:c5:48:68:ae:ed:dc:97:0d:a0:1f:66:3f:7e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
        Validity
            Not Before: Aug  8 12:35:05 2024 GMT
            Not After : Aug  7 12:40:05 2025 GMT
        Subject: CN=08C03B952B4410777F148E1984E4874AE980A54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:6f:4d:df:3e:9a:8a:23:f4:c6:8e:9f:63:
                    41:bb:fa:27:c3:a1:88:3d:17:11:ec:09:3d:9a:93:
                    aa:da:9b:89:78:f7:75:6a:ae:fc:87:68:33:d8:6c:
                    79:a6:70:de:92:91:5f:62:75:6f:db:a0:90:ef:32:
                    f1:d4:93:e9:d1:64:70:74:5e:e3:b6:fc:1f:5a:6d:
                    71:f1:14:25:fb:7b:8b:60:e0:11:ca:51:ca:fe:05:
                    0a:41:c0:3b:f0:e8:2a:54:7c:70:88:fe:b6:20:5a:
                    90:3f:f2:51:12:27:98:91:d7:90:b4:c2:44:66:73:
                    d5:b9:dd:9c:7f:09:b3:d2:6e:ce:26:15:3c:f9:39:
                    3f:90:d2:9a:67:92:8f:17:f3:c9:ea:15:eb:64:3d:
                    74:3e:e2:27:38:88:09:9f:43:15:db:a7:00:18:ec:
                    23:fe:68:ce:89:62:9c:b9:f1:f3:7c:40:e3:10:bc:
                    d4:42:94:fb:11:32:ad:3c:8c:1f:10:7f:84:67:b1:
                    71:2b:28:02:0a:d5:45:f0:eb:cc:57:98:6d:14:01:
                    5e:0b:4d:6e:b2:65:6d:6e:a8:52:08:46:a9:f1:22:
                    19:4c:f6:2f:24:f5:78:d5:21:ec:25:27:55:82:10:
                    5e:5f:f5:a1:4b:bb:5f:ba:9f:d8:69:18:f6:7f:ba:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:3B:95:2B:44:10:77:7F:14:8E:19:84:E4:87:4A:E9:80:A5:4C
            X509v3 Authority Key Identifier:
                keyid:56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33332d3435203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:49:75:2c:ad:7d:2f:dd:ff:87:9c:3b:0e:34:a9:3e:54:6f:
         62:a1:73:9b:b6:07:7a:1e:39:ff:f2:2a:37:4d:25:82:be:38:
         17:9d:da:42:50:de:b8:7b:05:5a:81:be:a9:c1:87:46:bd:9b:
         62:e4:39:44:1f:ec:55:1e:8f:62:42:cb:55:40:1e:a8:63:9f:
         a2:c4:31:a7:8d:60:35:65:09:9e:33:b0:61:d7:0c:8c:4f:09:
         a9:11:0f:30:3c:42:3e:26:62:8e:50:d5:63:f2:23:c4:13:f7:
         b0:8c:37:59:2b:fa:63:96:c3:03:5f:0a:f7:b1:d5:9b:84:87:
         05:1c:21:11:69:e5:40:14:0d:07:a5:93:ac:e2:e1:f3:c6:ab:
         3b:af:47:6b:61:e9:9e:a1:7f:9d:b3:9f:44:20:c1:70:8b:78:
         87:c7:70:7c:26:0c:0f:bb:72:1e:7f:30:3c:15:43:d0:9e:0f:
         6c:1f:48:55:22:ff:7b:54:73:2c:3d:7c:24:27:91:7b:85:a3:
         50:99:89:ef:71:c7:04:38:d7:fe:3e:88:ab:5c:5c:25:8e:01:
         95:ed:cd:cf:f3:c0:75:69:b8:3a:43:16:91:c7:c9:1a:5e:cf:
         5e:80:71:14:91:3c:de:da:4c:c0:5e:94:24:5f:c3:4b:02:c2:
         b6:e5:1d:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGzn0ApAKxUhoru3clw2gH2Y/fsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZFQzNDRkQ1NkQ4QTJBN0U5RUE3MjVGMUFGNUQ4NEM1
OUNDNTYxRDAeFw0yNDA4MDgxMjM1MDVaFw0yNTA4MDcxMjQwMDVaMDMxMTAvBgNV
BAMTKDA4QzAzQjk1MkI0NDEwNzc3RjE0OEUxOTg0RTQ4NzRBRTk4MEE1NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRam9N3z6aiiP0xo6fY0G7+ifD
oYg9FxHsCT2ak6ram4l493VqrvyHaDPYbHmmcN6SkV9idW/boJDvMvHUk+nRZHB0
XuO2/B9abXHxFCX7e4tg4BHKUcr+BQpBwDvw6CpUfHCI/rYgWpA/8lESJ5iR15C0
wkRmc9W53Zx/CbPSbs4mFTz5OT+Q0ppnko8X88nqFetkPXQ+4ic4iAmfQxXbpwAY
7CP+aM6JYpy58fN8QOMQvNRClPsRMq08jB8Qf4RnsXErKAIK1UXw68xXmG0UAV4L
TW6yZW1uqFIIRqnxIhlM9i8k9XjVIewlJ1WCEF5f9aFLu1+6n9hpGPZ/uoSvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCMA7lStEEHd/FI4ZhOSHSumApUwwHwYDVR0j
BBgwFoAUVuw8/VbYoqfp6nJfGvXYTFnMVh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNlVGhOTDhRS0YzU2F4cGhuUDNvalJMaERBQmZaaG9vaTJIUUgyMXg4
SHEvMS81NkVDM0NGRDU2RDhBMkE3RTlFQTcyNUYxQUY1RDg0QzU5Q0M1NjFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2RUMzQ0ZENTZEOEEyQTdF
OUVBNzI1RjFBRjVEODRDNTlDQzU2MUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzZVRoTkw4UUtGM1NheHBoblAzb2pSTGhEQUJmWmhvb2kySFFIMjF4OEhxLzEv
MzIzODMwMzQzYTM1NjIzNjYzM2EzYTJmMzMzMzJkMzQzNTIwM2QzZTIwMzIzNjM4
MzgzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARbbAAwDQYJKoZIhvcNAQELBQADggEBAAZJdSyt
fS/d/4ecOw40qT5Ub2Khc5u2B3oeOf/yKjdNJYK+OBed2kJQ3rh7BVqBvqnBh0a9
m2LkOUQf7FUej2JCy1VAHqhjn6LEMaeNYDVlCZ4zsGHXDIxPCakRDzA8Qj4mYo5Q
1WPyI8QT97CMN1kr+mOWwwNfCvex1ZuEhwUcIRFp5UAUDQelk6zi4fPGqzuvR2th
6Z6hf52zn0QgwXCLeIfHcHwmDA+7ch5/MDwVQ9CeD2wfSFUi/3tUcyw9fCQnkXuF
o1CZie9xxwQ41/4+iKtcXCWOAZXtzc/zwHVpuDpDFpHHyRpez16AcRSRPN7aTMBe
lCRfw0sCwrblHUY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org