Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/323830343a373136303a3a2f33322d3438203d3e20323730373835.roa
File:                     323830343a373136303a3a2f33322d3438203d3e20323730373835.roa (raw, json)
Hash identifier:          EnIQWBwnezN+qhAjLDIjA2+T4/h1sWpkjDTOJXa0A1I=
Subject key identifier:   6A:2B:3C:A4:29:C9:35:8A:0D:8F:AA:0C:7B:5D:79:5F:4E:43:3E:E5
Certificate issuer:       /CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
Certificate serial:       697EF2BD85B979B4B5EE41769B5598792CE5A0AE
Authority key identifier: 0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/323830343a373136303a3a2f33322d3438203d3e20323730373835.roa
Signing time:             Fri 05 Apr 2024 04:57:41 +0000
ROA not before:           Fri 05 Apr 2024 04:52:41 +0000
ROA not after:            Fri 04 Apr 2025 04:57:41 +0000
asID:                     270785
IP address blocks:        2804:7160::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl
                          rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7e:f2:bd:85:b9:79:b4:b5:ee:41:76:9b:55:98:79:2c:e5:a0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
        Validity
            Not Before: Apr  5 04:52:41 2024 GMT
            Not After : Apr  4 04:57:41 2025 GMT
        Subject: CN=6A2B3CA429C9358A0D8FAA0C7B5D795F4E433EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:0c:98:90:fb:f1:5a:0a:e9:98:04:3b:57:
                    0f:ab:9e:d8:4e:a2:2e:22:90:3f:55:34:d6:cb:53:
                    d0:3e:92:9c:b3:b5:72:db:61:78:71:d6:d7:e4:e0:
                    5e:4a:88:d8:18:c3:ed:24:7c:4f:26:3b:2c:37:71:
                    86:47:af:8c:73:ae:b0:11:c0:82:c4:a9:87:01:c5:
                    bb:a0:2c:41:c8:b6:0a:64:ae:99:d2:02:8f:53:06:
                    2c:b7:7c:45:d8:1e:27:4c:97:31:8f:1f:65:8a:3d:
                    20:78:b9:ed:7c:71:a5:af:6e:2e:71:84:23:97:21:
                    1f:75:0a:c2:2e:4f:56:44:a1:5f:12:e6:05:e7:83:
                    d7:c0:87:c9:c6:d4:ee:0b:96:c3:26:fd:3f:3c:d2:
                    12:a7:ad:8d:67:4e:14:94:4a:4a:45:23:96:7b:d5:
                    dc:ea:fd:af:10:b8:a1:85:e2:6f:7a:2b:f3:71:47:
                    f2:e6:40:58:ca:78:d2:99:8e:82:da:30:08:ff:f1:
                    5b:81:a6:f8:f9:6d:3d:ef:66:cd:28:b2:a9:02:2e:
                    be:0e:6d:b4:ab:a6:72:2b:9e:99:50:f9:04:bc:68:
                    11:76:3e:89:c9:22:e4:94:d5:d9:64:22:38:95:67:
                    95:6b:8b:72:a4:45:01:3c:39:5d:69:59:8f:c6:ee:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:3C:A4:29:C9:35:8A:0D:8F:AA:0C:7B:5D:79:5F:4E:43:3E:E5
            X509v3 Authority Key Identifier:
                keyid:0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/323830343a373136303a3a2f33322d3438203d3e20323730373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7160::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:aa:e1:24:8b:c4:6b:5b:f1:87:a0:a0:78:71:e9:37:56:ef:
         1e:c4:b5:46:cb:f6:3c:46:95:a3:cf:7e:7d:bf:26:34:95:91:
         a5:a4:df:dc:41:77:bc:6c:1a:f3:96:36:60:83:a6:f2:ed:48:
         29:c4:5d:df:be:48:bd:66:c2:47:c1:ce:8f:4c:04:10:8f:4b:
         c7:95:ea:26:1a:7a:5b:41:01:36:c6:11:1d:a9:2e:cf:31:de:
         b9:9c:14:fe:ea:17:02:85:d3:f4:dd:62:25:0a:cd:02:ca:70:
         c0:0f:17:83:66:54:99:e4:a1:99:24:d8:26:b6:db:f0:a9:00:
         b6:3a:5e:d4:34:7a:0a:36:31:99:97:cf:a5:f1:9c:75:2a:e2:
         c9:be:94:63:af:99:9d:8b:36:44:a2:af:ab:e9:fe:9b:ea:18:
         da:10:a1:8e:86:d5:5e:26:a5:61:36:22:30:ed:f9:cc:9c:58:
         a7:13:01:26:50:2c:92:4b:8f:f5:84:48:d7:dd:0d:5e:86:95:
         09:e4:13:7c:1c:06:6c:96:81:2f:13:78:6d:61:04:72:ac:12:
         24:fd:22:24:d8:ab:b8:f6:2b:a6:7e:77:be:4c:0b:ad:20:36:
         f2:94:d4:5f:9e:c4:63:f3:a1:4d:72:0a:db:57:3b:e9:57:c0:
         32:05:fa:10
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaX7yvYW5ebS17kF2m1WYeSzloK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxNDFDMDVFMENENjBBQkUxQTNDREYzQzNDNjRDRkI5
NEQwNjc1MTAeFw0yNDA0MDUwNDUyNDFaFw0yNTA0MDQwNDU3NDFaMDMxMTAvBgNV
BAMTKDZBMkIzQ0E0MjlDOTM1OEEwRDhGQUEwQzdCNUQ3OTVGNEU0MzNFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qAyYkPvxWgrpmAQ7Vw+rnthO
oi4ikD9VNNbLU9A+kpyztXLbYXhx1tfk4F5KiNgYw+0kfE8mOyw3cYZHr4xzrrAR
wILEqYcBxbugLEHItgpkrpnSAo9TBiy3fEXYHidMlzGPH2WKPSB4ue18caWvbi5x
hCOXIR91CsIuT1ZEoV8S5gXng9fAh8nG1O4LlsMm/T880hKnrY1nThSUSkpFI5Z7
1dzq/a8QuKGF4m96K/NxR/LmQFjKeNKZjoLaMAj/8VuBpvj5bT3vZs0osqkCLr4O
bbSrpnIrnplQ+QS8aBF2PonJIuSU1dlkIjiVZ5Vri3KkRQE8OV1pWY/G7miPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUais8pCnJNYoNj6oMe115X05DPuUwHwYDVR0j
BBgwFoAUCxQcBeDNYKvho83zw8ZM+5TQZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlVaeXNBeVRqeDJOSnJrSGJ1bnlyU3BkRWtDTTY5RWZtbnM1MlBONlFI
dkMvMS8wQjE0MUMwNUUwQ0Q2MEFCRTFBM0NERjNDM0M2NENGQjk0RDA2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMTQxQzA1RTBDRDYwQUJF
MUEzQ0RGM0MzQzY0Q0ZCOTREMDY3NTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZVWnlzQXlUangyTkpya0hidW55clNwZEVrQ002OUVmbW5zNTJQTjZRSHZDLzEv
MzIzODMwMzQzYTM3MzEzNjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxYDANBgkqhkiG9w0BAQsFAAOCAQEAoarhJIvE
a1vxh6CgeHHpN1bvHsS1Rsv2PEaVo89+fb8mNJWRpaTf3EF3vGwa85Y2YIOm8u1I
KcRd375IvWbCR8HOj0wEEI9Lx5XqJhp6W0EBNsYRHakuzzHeuZwU/uoXAoXT9N1i
JQrNAspwwA8Xg2ZUmeShmSTYJrbb8KkAtjpe1DR6CjYxmZfPpfGcdSriyb6UY6+Z
nYs2RKKvq+n+m+oY2hChjobVXialYTYiMO35zJxYpxMBJlAskkuP9YRI190NXoaV
CeQTfBwGbJaBLxN4bWEEcqwSJP0iJNiruPYrpn53vkwLrSA28pTUX57EY/OhTXIK
21c76VfAMgX6EA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org