Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          QApy6//m0YWMu0+ZAwmtjIJ7JhQzptecF5FAqpn6pKc=
Subject key identifier:   1F:F9:05:D8:C8:D7:EF:02:46:CF:1C:0F:7B:CE:F9:5D:A6:EE:D1:CC
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       10E368BA64D9507ABD1F2508B9A2AE6CF37D15CC
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:49 +0000
ROA not before:           Wed 03 Apr 2024 18:26:49 +0000
ROA not after:            Wed 02 Apr 2025 18:31:49 +0000
asID:                     266623
IP address blocks:        2804:3ed4:76aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:68:ba:64:d9:50:7a:bd:1f:25:08:b9:a2:ae:6c:f3:7d:15:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:49 2024 GMT
            Not After : Apr  2 18:31:49 2025 GMT
        Subject: CN=1FF905D8C8D7EF0246CF1C0F7BCEF95DA6EED1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:4d:32:a4:10:8e:a7:88:2e:45:76:d5:f5:
                    54:c2:86:92:ae:b6:6c:e0:c3:d3:cd:4d:e1:88:b5:
                    12:63:d1:b1:68:5a:44:b6:2f:73:76:fb:00:0b:2d:
                    fb:bb:c9:af:07:39:57:94:b9:9f:04:8f:74:cf:69:
                    1a:34:08:bd:2a:0d:7c:d8:87:6d:dc:59:60:99:9f:
                    24:02:00:43:e8:82:f5:43:6d:18:56:de:ed:5d:9a:
                    8c:e3:d9:03:d5:bd:9f:fe:75:5b:ed:d6:a3:18:e0:
                    da:e2:b5:fa:90:8d:13:e7:49:42:ec:dc:53:71:2d:
                    bb:63:6c:6b:4d:7a:74:fd:1f:0b:b3:ff:84:d1:3a:
                    a3:ba:91:c5:cf:5e:b7:c2:16:5a:43:04:a9:9f:b8:
                    4b:6b:31:bb:99:45:5b:5d:15:07:d4:0a:65:0e:e8:
                    ba:ef:be:09:f5:1a:ce:22:03:14:cf:61:ed:f7:57:
                    42:4c:81:65:60:2a:27:7b:b1:f1:7f:c1:27:b5:0e:
                    11:19:21:c3:ff:29:23:cb:b6:71:3b:89:6e:e4:61:
                    11:2c:68:e2:87:db:da:ad:53:30:34:88:df:6e:fd:
                    7e:ad:43:25:74:e2:3f:61:1f:cf:26:45:24:88:c3:
                    3e:2d:32:c7:d5:d4:10:47:75:12:da:93:2a:d2:7b:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F9:05:D8:C8:D7:EF:02:46:CF:1C:0F:7B:CE:F9:5D:A6:EE:D1:CC
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:76aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:25:67:fa:80:9a:88:b4:0b:00:93:35:77:95:31:33:74:e7:
         00:b4:2e:00:2e:90:43:26:fd:58:a6:68:d4:17:2f:02:9a:34:
         78:75:b7:4e:b5:15:bd:82:6f:51:13:ee:42:9a:ca:b1:db:d5:
         a8:2b:c0:df:30:7a:ea:4e:90:6b:2a:63:ae:91:34:8c:e2:52:
         3d:25:33:9a:48:54:38:9c:35:a6:ec:ed:e6:2c:ec:c7:01:d0:
         5b:0e:d0:6d:b6:e9:48:57:56:5d:de:77:95:8c:80:59:b0:f1:
         67:8f:eb:6f:e7:38:43:86:7c:fd:12:22:e6:93:58:1c:eb:d2:
         10:16:53:82:e4:a4:6c:85:da:48:b7:78:46:93:d4:14:c2:25:
         82:02:98:aa:e7:1a:42:dc:b4:74:6f:50:97:09:33:e5:8f:0a:
         5f:81:7b:a1:3c:5f:60:6b:29:59:f2:6d:90:62:06:6f:44:2b:
         ae:0b:35:09:e1:31:b3:b5:e9:5f:53:41:bb:da:c7:7c:25:f6:
         cc:e5:f7:b3:02:d8:bc:7e:c0:7c:41:e7:d5:22:fd:4a:e5:99:
         2c:b6:b6:da:ec:86:e6:4b:67:ea:42:32:64:52:33:70:b3:6a:
         6c:d5:1c:fa:78:58:f6:ef:fb:d3:f2:5b:98:db:69:0b:e6:8f:
         76:f4:54:a9
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUEONoumTZUHq9HyUIuaKubPN9FcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzNzY2RUQ3MDNBNEE5RTlDQTQzN0YzRTdGREIyREI1
RThDOEE3ODAeFw0yNDA0MDMxODI2NDlaFw0yNTA0MDIxODMxNDlaMDMxMTAvBgNV
BAMTKDFGRjkwNUQ4QzhEN0VGMDI0NkNGMUMwRjdCQ0VGOTVEQTZFRUQxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe6E0ypBCOp4guRXbV9VTChpKu
tmzgw9PNTeGItRJj0bFoWkS2L3N2+wALLfu7ya8HOVeUuZ8Ej3TPaRo0CL0qDXzY
h23cWWCZnyQCAEPogvVDbRhW3u1dmozj2QPVvZ/+dVvt1qMY4NritfqQjRPnSULs
3FNxLbtjbGtNenT9Hwuz/4TROqO6kcXPXrfCFlpDBKmfuEtrMbuZRVtdFQfUCmUO
6Lrvvgn1Gs4iAxTPYe33V0JMgWVgKid7sfF/wSe1DhEZIcP/KSPLtnE7iW7kYREs
aOKH29qtUzA0iN9u/X6tQyV04j9hH88mRSSIwz4tMsfV1BBHdRLakyrSe3HbAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUH/kF2MjX7wJGzxwPe875Xabu0cwwHwYDVR0j
BBgwFoAUQTdm7XA6Sp6cpDfz5/2y216MingwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMS80MTM3NjZFRDcwM0E0QTlFOUNBNDM3RjNFN0ZEQjJEQjVFOEM4QTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMzc2NkVENzAzQTRBOUU5
Q0E0MzdGM0U3RkRCMkRCNUU4QzhBNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzEv
MzIzODMwMzQzYTMzNjU2NDM0M2EzNzM2NjE2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPtR2qjANBgkqhkiG9w0BAQsF
AAOCAQEASyVn+oCaiLQLAJM1d5UxM3TnALQuAC6QQyb9WKZo1BcvApo0eHW3TrUV
vYJvURPuQprKsdvVqCvA3zB66k6QaypjrpE0jOJSPSUzmkhUOJw1puzt5izsxwHQ
Ww7QbbbpSFdWXd53lYyAWbDxZ4/rb+c4Q4Z8/RIi5pNYHOvSEBZTguSkbIXaSLd4
RpPUFMIlggKYqucaQty0dG9Qlwkz5Y8KX4F7oTxfYGspWfJtkGIGb0Qrrgs1CeEx
s7XpX1NBu9rHfCX2zOX3swLYvH7AfEHn1SL9SuWZLLa22uyG5ktn6kIyZFIzcLNq
bNUc+nhY9u/70/JbmNtpC+aPdvRUqQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org