Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f34302d3430203d3e20323632363432.roa
File:                     323830343a326561383a383030303a3a2f34302d3430203d3e20323632363432.roa (raw, json)
Hash identifier:          NG7S3LRn53UVD0zWlGzN/7aU6Al9wYP6mGMqXBDek0E=
Subject key identifier:   B6:D5:9D:95:D2:6C:7B:9D:82:B6:89:F5:B7:9E:48:74:11:E0:0F:95
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       383B10F5D13A5FE0F6CFBE795D647378540CD711
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f34302d3430203d3e20323632363432.roa
Signing time:             Fri 19 Jul 2024 15:06:15 +0000
ROA not before:           Fri 19 Jul 2024 15:01:15 +0000
ROA not after:            Fri 18 Jul 2025 15:06:15 +0000
asID:                     262642
IP address blocks:        2804:2ea8:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3b:10:f5:d1:3a:5f:e0:f6:cf:be:79:5d:64:73:78:54:0c:d7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Jul 19 15:01:15 2024 GMT
            Not After : Jul 18 15:06:15 2025 GMT
        Subject: CN=B6D59D95D26C7B9D82B689F5B79E487411E00F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:85:49:ed:8e:bd:d2:10:e9:07:7d:62:6e:
                    a6:98:c0:f9:25:8f:0e:f3:73:5a:fb:74:27:0f:16:
                    a8:41:15:b2:22:25:44:12:f7:c6:a1:58:71:51:5b:
                    0b:59:4b:e2:74:87:b1:4c:85:29:91:9c:8c:d3:d6:
                    fa:dc:a5:27:ea:2e:c6:2b:fe:3d:ea:cb:c3:47:cd:
                    c0:ad:40:62:3a:f4:cf:5f:97:93:96:f9:91:3e:eb:
                    14:22:6a:64:7e:c5:66:a3:1a:5c:b0:c2:50:2f:25:
                    6b:2c:91:26:d6:04:85:f6:96:c3:a3:ba:8d:c1:67:
                    43:d3:18:84:92:de:0c:7e:13:ef:21:b5:10:77:24:
                    dc:27:d8:eb:db:87:dc:65:ba:8d:c5:43:27:55:dc:
                    27:29:20:56:e5:fc:46:b5:88:83:38:1f:ed:2f:2a:
                    9e:9b:3b:3b:06:c7:75:65:1f:74:78:70:5b:0f:a6:
                    8a:07:64:cb:d7:5a:59:0f:41:95:e4:15:07:79:a7:
                    65:c8:81:a1:e1:a7:c6:32:46:99:6a:99:ca:30:4b:
                    2b:8f:82:60:2c:08:13:aa:c5:bb:5c:c6:da:91:d7:
                    b4:25:61:91:6a:f0:f7:d4:51:33:c4:3c:d3:6e:76:
                    c7:92:90:0f:b0:7d:bc:35:62:21:98:7d:b9:84:3e:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D5:9D:95:D2:6C:7B:9D:82:B6:89:F5:B7:9E:48:74:11:E0:0F:95
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f34302d3430203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:43:e0:ac:2b:8b:a4:80:7c:ef:e0:d3:14:81:1a:88:1a:dd:
         26:29:ab:60:4e:cb:7a:2c:a6:39:ff:a6:eb:12:ee:ad:17:94:
         ac:62:05:d5:d1:db:ca:ba:3b:95:53:7d:2a:6f:cd:30:e2:4d:
         e7:9f:1e:54:b4:97:df:6b:31:1b:bf:8c:fc:b5:c0:7a:ac:49:
         d7:8c:d5:8f:db:ad:d9:61:a7:ef:3e:0d:ce:f8:9d:aa:12:85:
         28:02:40:47:f3:c5:00:e5:40:d2:e1:e2:02:82:4b:5b:92:fd:
         37:5a:a0:05:49:86:94:a1:f2:d7:58:3b:85:cc:55:41:32:2c:
         6c:32:b0:4e:bf:97:c4:09:57:1b:83:65:54:05:c4:e3:53:d6:
         d0:6f:1c:23:2e:3c:ff:6f:a0:ca:ff:f1:ed:4c:3d:90:8b:93:
         64:b4:fa:c6:76:fc:c0:25:eb:fd:77:81:84:db:1b:3b:1a:9a:
         12:3b:50:eb:37:94:cc:b6:60:de:32:01:b9:79:fe:e1:04:d2:
         70:95:97:83:cc:9f:5d:1a:7b:6e:6c:f0:50:16:92:d0:09:9d:
         33:03:88:0a:93:bb:d7:0d:cb:2a:ec:f9:4e:96:3c:b1:57:68:
         2b:05:7f:30:d5:09:83:10:26:7f:3a:85:17:3a:ad:f7:ec:53:
         86:e6:cf:dc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUODsQ9dE6X+D2z755XWRzeFQM1xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNDA3MTkxNTAxMTVaFw0yNTA3MTgxNTA2MTVaMDMxMTAvBgNV
BAMTKEI2RDU5RDk1RDI2QzdCOUQ4MkI2ODlGNUI3OUU0ODc0MTFFMDBGOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCL4VJ7Y690hDpB31ibqaYwPkl
jw7zc1r7dCcPFqhBFbIiJUQS98ahWHFRWwtZS+J0h7FMhSmRnIzT1vrcpSfqLsYr
/j3qy8NHzcCtQGI69M9fl5OW+ZE+6xQiamR+xWajGlywwlAvJWsskSbWBIX2lsOj
uo3BZ0PTGISS3gx+E+8htRB3JNwn2Ovbh9xluo3FQydV3CcpIFbl/Ea1iIM4H+0v
Kp6bOzsGx3VlH3R4cFsPpooHZMvXWlkPQZXkFQd5p2XIgaHhp8YyRplqmcowSyuP
gmAsCBOqxbtcxtqR17QlYZFq8PfUUTPEPNNudseSkA+wfbw1YiGYfbmEPkZfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUttWdldJse52Cton1t55IdBHgD5UwHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzIzODMwMzQzYTMyNjU2MTM4M2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMjM2MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgELqiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAHQ+CsK4ukgHzv4NMUgRqIGt0mKatgTst6LKY5/6brEu6tF5SsYgXV0dvK
ujuVU30qb80w4k3nnx5UtJffazEbv4z8tcB6rEnXjNWP263ZYafvPg3O+J2qEoUo
AkBH88UA5UDS4eICgktbkv03WqAFSYaUofLXWDuFzFVBMixsMrBOv5fECVcbg2VU
BcTjU9bQbxwjLjz/b6DK//HtTD2Qi5NktPrGdvzAJev9d4GE2xs7GpoSO1DrN5TM
tmDeMgG5ef7hBNJwlZeDzJ9dGntubPBQFpLQCZ0zA4gKk7vXDcsq7PlOljyxV2gr
BX8w1QmDECZ/OoUXOq337FOG5s/c
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org