Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d313238203d3e20323638323136.roa
File:                     323830343a346462633a3a2f33322d313238203d3e20323638323136.roa (raw, json)
Hash identifier:          T23pasDCnq+bfZvmhhWHPmDggXFTxWWWqadNWxmPiDE=
Subject key identifier:   BA:F2:FE:FC:65:4F:35:CB:94:CA:24:CF:9B:56:1C:ED:AB:DF:21:A5
Certificate issuer:       /CN=66E0B9C43F6F84B853D630A67B75676B8CA39CF7
Certificate serial:       7548572BD2E0AC03C74B8DD02C1D7FAB8CC577F5
Authority key identifier: 66:E0:B9:C4:3F:6F:84:B8:53:D6:30:A6:7B:75:67:6B:8C:A3:9C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d313238203d3e20323638323136.roa
Signing time:             Fri 25 Oct 2024 04:43:09 +0000
ROA not before:           Fri 25 Oct 2024 04:38:09 +0000
ROA not after:            Fri 24 Oct 2025 04:43:09 +0000
asID:                     268216
IP address blocks:        2804:4dbc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.crl
                          rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:48:57:2b:d2:e0:ac:03:c7:4b:8d:d0:2c:1d:7f:ab:8c:c5:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E0B9C43F6F84B853D630A67B75676B8CA39CF7
        Validity
            Not Before: Oct 25 04:38:09 2024 GMT
            Not After : Oct 24 04:43:09 2025 GMT
        Subject: CN=BAF2FEFC654F35CB94CA24CF9B561CEDABDF21A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:2f:7b:7c:36:0e:da:93:86:00:ae:3d:06:
                    c4:24:8c:7d:ff:31:88:5f:c1:34:24:28:62:83:5e:
                    27:97:32:34:bc:c9:0b:cf:1b:f0:ee:d9:99:f3:07:
                    e3:f1:35:36:dc:8c:e3:08:4c:5c:0c:15:6a:46:47:
                    9a:70:1d:e1:1b:e8:5b:07:f1:ea:2a:a0:61:58:ce:
                    02:3d:1a:f1:bc:91:93:67:90:72:b3:55:3c:e1:71:
                    01:28:c4:10:d2:c6:17:7b:e4:17:59:ee:b0:6e:04:
                    e8:fe:1b:87:79:24:63:59:ea:3a:ba:53:de:63:32:
                    cd:90:3a:a6:c2:e1:26:75:57:69:03:bf:95:cf:85:
                    be:12:78:3a:4b:a5:02:5a:6e:b9:07:96:52:ac:ac:
                    c4:93:88:55:7e:b4:51:73:94:7c:11:d5:9a:75:e7:
                    65:0d:3c:54:c0:68:1b:69:cf:ff:6b:c6:19:70:65:
                    bb:32:7c:fc:3e:39:cb:84:d3:8f:28:8d:24:78:84:
                    99:f1:ef:59:57:12:5a:6c:b1:af:e1:3b:7d:dc:29:
                    c9:38:1d:41:5d:df:4a:84:a9:d4:3d:df:d8:63:35:
                    35:c0:6b:14:d4:0f:e9:89:2e:b6:00:e1:5a:e7:b4:
                    5a:69:13:80:03:dc:a1:53:a1:29:64:83:3b:f6:76:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F2:FE:FC:65:4F:35:CB:94:CA:24:CF:9B:56:1C:ED:AB:DF:21:A5
            X509v3 Authority Key Identifier:
                keyid:66:E0:B9:C4:3F:6F:84:B8:53:D6:30:A6:7B:75:67:6B:8C:A3:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d313238203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:b0:28:3a:5e:ca:56:81:12:82:d9:dc:6b:81:38:e5:d9:
         70:9a:40:f2:fa:54:47:9f:bf:30:61:ad:36:12:d6:38:07:f5:
         0c:97:4d:1d:16:ee:21:86:50:a3:50:84:28:1c:86:ea:7b:9a:
         f3:4a:f3:87:84:d1:5d:fe:05:48:dc:a6:ad:2e:75:d9:d2:ec:
         03:35:0e:b0:0d:55:c5:a1:90:8d:4e:81:27:da:ba:e7:21:6f:
         a6:3c:2f:ed:0d:7c:42:24:45:e0:40:fb:d1:5f:a0:94:fb:05:
         7b:98:f6:a8:3d:60:b2:25:34:02:7f:7d:77:a5:2e:37:12:f9:
         76:0b:9d:1e:47:bf:f2:ab:19:1b:44:d8:11:02:46:01:f5:75:
         b5:3b:82:74:a1:e2:8d:fa:7c:4f:ea:56:04:3c:91:58:14:b2:
         8c:74:c9:cc:25:3a:8f:25:73:c9:da:23:a4:d0:be:ca:85:ea:
         7a:a9:65:43:35:1a:24:d8:e4:52:3a:56:65:8c:5e:ba:de:6b:
         fb:65:84:08:91:c3:1b:81:f3:e3:90:78:f7:18:b9:4f:29:f1:
         a8:04:40:b9:8d:97:43:d0:42:35:c5:d0:7a:86:d5:43:45:89:
         5a:5d:87:39:26:58:24:32:50:89:b7:64:75:da:3c:67:98:a5:
         cf:5f:8e:d4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdUhXK9LgrAPHS43QLB1/q4zFd/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZFMEI5QzQzRjZGODRCODUzRDYzMEE2N0I3NTY3NkI4
Q0EzOUNGNzAeFw0yNDEwMjUwNDM4MDlaFw0yNTEwMjQwNDQzMDlaMDMxMTAvBgNV
BAMTKEJBRjJGRUZDNjU0RjM1Q0I5NENBMjRDRjlCNTYxQ0VEQUJERjIxQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeni97fDYO2pOGAK49BsQkjH3/
MYhfwTQkKGKDXieXMjS8yQvPG/Du2ZnzB+PxNTbcjOMITFwMFWpGR5pwHeEb6FsH
8eoqoGFYzgI9GvG8kZNnkHKzVTzhcQEoxBDSxhd75BdZ7rBuBOj+G4d5JGNZ6jq6
U95jMs2QOqbC4SZ1V2kDv5XPhb4SeDpLpQJabrkHllKsrMSTiFV+tFFzlHwR1Zp1
52UNPFTAaBtpz/9rxhlwZbsyfPw+OcuE048ojSR4hJnx71lXElpssa/hO33cKck4
HUFd30qEqdQ939hjNTXAaxTUD+mJLrYA4VrntFppE4AD3KFToSlkgzv2du4BAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUuvL+/GVPNcuUyiTPm1Yc7avfIaUwHwYDVR0j
BBgwFoAUZuC5xD9vhLhT1jCme3Vna4yjnPcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFybjVSZ0NHWVgzSEExVlQ2Y3RtNjE2amg0NzZwZ2lyZ25OUzRtUnJD
aXkvMC82NkUwQjlDNDNGNkY4NEI4NTNENjMwQTY3Qjc1Njc2QjhDQTM5Q0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RTBCOUM0M0Y2Rjg0Qjg1
M0Q2MzBBNjdCNzU2NzZCOENBMzlDRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhcm41UmdDR1lYM0hBMVZUNmN0bTYxNmpoNDc2cGdpcmduTlM0bVJyQ2l5LzAv
MzIzODMwMzQzYTM0NjQ2MjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBE28MA0GCSqGSIb3DQEBCwUAA4IBAQBwzrAo
Ol7KVoESgtnca4E45dlwmkDy+lRHn78wYa02EtY4B/UMl00dFu4hhlCjUIQoHIbq
e5rzSvOHhNFd/gVI3KatLnXZ0uwDNQ6wDVXFoZCNToEn2rrnIW+mPC/tDXxCJEXg
QPvRX6CU+wV7mPaoPWCyJTQCf313pS43Evl2C50eR7/yqxkbRNgRAkYB9XW1O4J0
oeKN+nxP6lYEPJFYFLKMdMnMJTqPJXPJ2iOk0L7Khep6qWVDNRok2ORSOlZljF66
3mv7ZYQIkcMbgfPjkHj3GLlPKfGoBEC5jZdD0EI1xdB6htVDRYlaXYc5JlgkMlCJ
t2R12jxnmKXPX47U
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:52 2024 by rpki-client on console-fra.rpki-client.org