Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a3a2f33322d3332203d3e20323633323830.roa
File:                     323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (raw, json)
Hash identifier:          6QHWyxhucWmbVKZkZrTvKbnDcFohnYSh1QyJpmmnpX4=
Subject key identifier:   0C:DA:3D:AF:01:A3:A3:7F:17:89:FF:5E:D3:51:D3:C6:FF:26:1F:F7
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       7490A794274C92956B2D29F24F35439F45852119
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a3a2f33322d3332203d3e20323633323830.roa
Signing time:             Thu 04 Apr 2024 15:50:30 +0000
ROA not before:           Thu 04 Apr 2024 15:45:30 +0000
ROA not after:            Thu 03 Apr 2025 15:50:30 +0000
asID:                     263280
IP address blocks:        2804:164c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:90:a7:94:27:4c:92:95:6b:2d:29:f2:4f:35:43:9f:45:85:21:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Apr  4 15:45:30 2024 GMT
            Not After : Apr  3 15:50:30 2025 GMT
        Subject: CN=0CDA3DAF01A3A37F1789FF5ED351D3C6FF261FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:12:4f:11:65:3c:0b:70:56:7e:8b:db:a8:
                    af:1e:d5:b3:b6:b4:66:e4:20:05:a6:39:5c:72:e8:
                    69:62:f5:d2:95:ee:62:0b:77:26:40:ad:cc:5d:a9:
                    e1:42:ff:16:1b:9f:44:01:5e:34:8b:72:78:de:d0:
                    2f:d7:c6:ce:28:03:24:8e:d2:dd:78:5f:70:cc:60:
                    90:56:29:0c:9d:40:10:ff:a7:f2:e1:0b:73:c3:89:
                    b7:63:95:17:94:5d:33:cd:4a:a5:f2:55:42:ff:5a:
                    34:78:69:53:2d:49:39:3d:91:59:58:93:2d:45:5d:
                    35:7d:88:a8:72:23:e5:75:5e:e2:91:f5:06:9c:dd:
                    44:3b:31:c1:9f:64:a7:36:0b:f0:c3:e1:1c:1e:02:
                    e2:44:11:aa:b2:e5:d4:55:59:28:b2:00:8f:4f:ef:
                    9c:0e:fa:7a:41:3a:a7:9e:ae:59:18:b5:f9:92:0a:
                    7a:ff:61:2b:e3:75:20:b2:0c:43:2f:66:15:f8:86:
                    db:70:b4:da:39:c8:f4:e5:8d:09:1a:24:ba:82:10:
                    bb:c8:1d:c0:74:6b:e1:bf:ea:06:7c:80:2e:d2:04:
                    3c:35:57:07:06:d4:ce:9c:8c:31:fc:73:63:41:f3:
                    8c:4e:14:d3:ba:71:31:53:b1:8b:d1:7d:48:34:60:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DA:3D:AF:01:A3:A3:7F:17:89:FF:5E:D3:51:D3:C6:FF:26:1F:F7
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a3a2f33322d3332203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:be:86:03:5f:78:78:00:f6:6e:4c:8c:32:31:69:44:b1:96:
         b4:0a:c9:20:54:80:e6:48:f0:84:78:14:09:3c:8f:3f:49:a0:
         95:98:58:1f:b7:ad:be:09:52:e6:b1:38:0b:4a:2e:df:5d:72:
         92:8a:c3:ba:00:6b:50:80:45:26:a0:5d:1b:17:b2:06:fa:8d:
         59:14:70:95:d6:0a:d1:75:21:0e:7a:47:af:5a:3a:b4:6f:6a:
         4a:04:ee:64:39:af:d7:80:81:41:c8:f9:02:c5:20:ee:dc:e4:
         35:96:01:ac:1a:00:46:f9:70:2a:43:a4:56:6f:6a:98:ac:6d:
         d1:22:31:cb:26:80:93:76:4b:76:69:84:a7:e5:a9:7e:f4:a2:
         3f:9d:cd:e2:ea:ee:1c:7e:e6:bc:48:05:73:4a:88:0a:8c:0d:
         c0:d8:a5:4f:f0:f0:5b:7a:5e:2c:86:c3:3e:37:15:23:32:9a:
         ee:32:f5:1e:3b:9b:3e:f6:b4:73:2b:f8:c7:d2:9b:da:5b:3f:
         ba:af:d7:21:31:dd:c5:eb:f0:42:cb:00:d6:20:f9:50:8b:ad:
         ca:0f:1a:6e:05:10:96:c5:f4:62:cf:bf:64:ea:06:d0:1f:ae:
         29:8e:8b:e1:fc:55:62:46:76:73:1a:a0:41:60:74:3c:ad:4a:
         95:f7:03:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdJCnlCdMkpVrLSnyTzVDn0WFIRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNGMTY4RjBFNTBBOTBFNDFBNzM2RkUwRDVGQTkxOTc2
NUUxQjVFNjAeFw0yNDA0MDQxNTQ1MzBaFw0yNTA0MDMxNTUwMzBaMDMxMTAvBgNV
BAMTKDBDREEzREFGMDFBM0EzN0YxNzg5RkY1RUQzNTFEM0M2RkYyNjFGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkhJPEWU8C3BWfovbqK8e1bO2
tGbkIAWmOVxy6Gli9dKV7mILdyZArcxdqeFC/xYbn0QBXjSLcnje0C/Xxs4oAySO
0t14X3DMYJBWKQydQBD/p/LhC3PDibdjlReUXTPNSqXyVUL/WjR4aVMtSTk9kVlY
ky1FXTV9iKhyI+V1XuKR9Qac3UQ7McGfZKc2C/DD4RweAuJEEaqy5dRVWSiyAI9P
75wO+npBOqeerlkYtfmSCnr/YSvjdSCyDEMvZhX4httwtNo5yPTljQkaJLqCELvI
HcB0a+G/6gZ8gC7SBDw1VwcG1M6cjDH8c2NB84xOFNO6cTFTsYvRfUg0YJmPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDNo9rwGjo38Xif9e01HTxv8mH/cwHwYDVR0j
BBgwFoAUo/Fo8OUKkOQac2/g1fqRl2XhteYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk5aY1YxTFJORkQ5N3BoVmRUUXN2cEZzVmFDVkpQa01jbWFHUmRMbXFa
S2QvMS9BM0YxNjhGMEU1MEE5MEU0MUE3MzZGRTBENUZBOTE5NzY1RTFCNUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzRjE2OEYwRTUwQTkwRTQx
QTczNkZFMEQ1RkE5MTk3NjVFMUI1RTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZOWmNWMUxSTkZEOTdwaFZkVFFzdnBGc1ZhQ1ZKUGtNY21hR1JkTG1xWktkLzEv
MzIzODMwMzQzYTMxMzYzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzIzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQWTDANBgkqhkiG9w0BAQsFAAOCAQEAGr6GA194
eAD2bkyMMjFpRLGWtArJIFSA5kjwhHgUCTyPP0mglZhYH7etvglS5rE4C0ou311y
korDugBrUIBFJqBdGxeyBvqNWRRwldYK0XUhDnpHr1o6tG9qSgTuZDmv14CBQcj5
AsUg7tzkNZYBrBoARvlwKkOkVm9qmKxt0SIxyyaAk3ZLdmmEp+WpfvSiP53N4uru
HH7mvEgFc0qICowNwNilT/DwW3peLIbDPjcVIzKa7jL1HjubPva0cyv4x9Kb2ls/
uq/XITHdxevwQssA1iD5UIutyg8abgUQlsX0Ys+/ZOoG0B+uKY6L4fxVYkZ2cxqg
QWB0PK1KlfcDiw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org