Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/323830343a316338383a3a2f33322d3438203d3e203631363630.roa
File:                     323830343a316338383a3a2f33322d3438203d3e203631363630.roa (raw, json)
Hash identifier:          6ZpE9pihXBEaaTHuSANiyhXKFoLsuNZnEcZ0BWtA/6c=
Subject key identifier:   18:6D:3A:AE:CD:0D:E8:5C:F8:24:D1:44:D1:39:E0:38:A8:25:F3:EB
Certificate issuer:       /CN=684027F204382A1BC3E39E8891804EBB07906C89
Certificate serial:       03BF629DA222A9D1D39912F4CCC950504AB22E1A
Authority key identifier: 68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/323830343a316338383a3a2f33322d3438203d3e203631363630.roa
Signing time:             Thu 04 Apr 2024 01:08:37 +0000
ROA not before:           Thu 04 Apr 2024 01:03:37 +0000
ROA not after:            Thu 03 Apr 2025 01:08:37 +0000
asID:                     61660
IP address blocks:        2804:1c88::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bf:62:9d:a2:22:a9:d1:d3:99:12:f4:cc:c9:50:50:4a:b2:2e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=684027F204382A1BC3E39E8891804EBB07906C89
        Validity
            Not Before: Apr  4 01:03:37 2024 GMT
            Not After : Apr  3 01:08:37 2025 GMT
        Subject: CN=186D3AAECD0DE85CF824D144D139E038A825F3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:84:f1:90:b5:1d:39:86:3e:f2:7c:6c:04:
                    cf:35:c2:12:49:32:a2:d3:c5:76:59:5c:89:ce:e5:
                    af:ab:60:d4:4f:1f:83:32:2f:fd:c0:c2:ec:09:ba:
                    6d:ae:4d:aa:69:16:80:27:e5:66:0e:19:99:ff:d3:
                    fd:f3:9c:a4:97:bd:a2:7c:bf:cb:50:0a:cf:83:16:
                    5f:d6:e0:b1:81:1c:bc:bc:68:b7:54:61:64:32:75:
                    c2:49:65:f5:76:39:01:cc:76:42:87:10:b4:c9:55:
                    94:7f:b3:8d:8c:ee:b6:f9:c4:f3:c8:60:b0:62:f3:
                    b4:c6:5e:ef:ae:24:73:3e:63:f4:45:ea:ef:71:0f:
                    f7:b3:45:b6:57:bc:02:8c:f9:c0:63:79:4f:2c:df:
                    6b:67:de:02:b8:df:db:fb:71:a2:6b:82:89:f4:c5:
                    69:77:3f:9a:b6:cf:6f:20:7a:26:72:5f:5d:50:83:
                    91:48:1a:02:4a:17:e0:03:22:bf:f9:ff:e6:76:34:
                    aa:55:2e:2c:ca:c0:29:ee:da:fd:19:7e:e3:cb:1d:
                    31:05:4a:e2:fc:80:e4:46:72:73:28:22:64:06:23:
                    86:ae:c6:18:01:fb:a3:72:ff:0c:23:45:8c:64:5e:
                    39:51:3c:98:46:fc:94:02:ec:36:56:b1:b5:55:e7:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6D:3A:AE:CD:0D:E8:5C:F8:24:D1:44:D1:39:E0:38:A8:25:F3:EB
            X509v3 Authority Key Identifier:
                keyid:68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/323830343a316338383a3a2f33322d3438203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:d9:10:5a:0d:23:4b:c4:96:fd:ad:db:f6:a4:a8:cd:7e:
         3d:f2:a9:0d:b0:48:99:8e:19:98:1f:26:7d:58:3b:1c:f9:d0:
         30:81:25:a9:c5:65:d8:1d:46:0b:a2:f3:cc:5a:81:d3:49:1d:
         a1:fc:e4:39:6b:49:7f:d1:81:d5:f6:f0:58:af:02:4b:f7:37:
         d2:74:1c:e9:e5:10:fe:8a:d1:e8:3f:57:35:47:99:a8:43:8e:
         ab:97:85:ee:41:31:fe:94:1a:2d:dd:40:23:2d:49:26:90:22:
         88:19:91:02:f8:b2:10:32:9d:e1:3d:83:29:df:84:65:e5:20:
         ac:3b:23:95:c4:55:50:39:fd:fa:8a:59:19:db:2d:59:26:c1:
         fa:c8:0a:78:87:7b:79:c5:05:11:c3:34:69:0a:10:ff:7f:5b:
         8a:05:c1:07:2a:d4:07:d5:0f:30:31:33:6b:ed:79:fe:3a:79:
         e6:d6:e6:6c:a9:91:8a:ba:5b:ff:7f:2f:c1:b7:c7:63:28:de:
         57:3e:42:88:15:da:01:32:c6:1c:86:d7:73:71:f5:3d:73:1e:
         eb:df:70:c9:f1:5c:26:ed:7e:80:25:ac:49:cc:c5:73:98:44:
         de:94:d0:b2:e2:fb:b8:95:ba:fe:2f:b1:ce:9e:6e:cb:eb:eb:
         a3:b3:c9:ec
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUA79inaIiqdHTmRL0zMlQUEqyLhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MDI3RjIwNDM4MkExQkMzRTM5RTg4OTE4MDRFQkIw
NzkwNkM4OTAeFw0yNDA0MDQwMTAzMzdaFw0yNTA0MDMwMTA4MzdaMDMxMTAvBgNV
BAMTKDE4NkQzQUFFQ0QwREU4NUNGODI0RDE0NEQxMzlFMDM4QTgyNUYzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2O4TxkLUdOYY+8nxsBM81whJJ
MqLTxXZZXInO5a+rYNRPH4MyL/3AwuwJum2uTappFoAn5WYOGZn/0/3znKSXvaJ8
v8tQCs+DFl/W4LGBHLy8aLdUYWQydcJJZfV2OQHMdkKHELTJVZR/s42M7rb5xPPI
YLBi87TGXu+uJHM+Y/RF6u9xD/ezRbZXvAKM+cBjeU8s32tn3gK439v7caJrgon0
xWl3P5q2z28geiZyX11Qg5FIGgJKF+ADIr/5/+Z2NKpVLizKwCnu2v0ZfuPLHTEF
SuL8gORGcnMoImQGI4auxhgB+6Ny/wwjRYxkXjlRPJhG/JQC7DZWsbVV54bnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUGG06rs0N6Fz4JNFE0TngOKgl8+swHwYDVR0j
BBgwFoAUaEAn8gQ4KhvD456IkYBOuweQbIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0dXR2JIUW44R3Fma2tGUkpmZENoWGhKUmc0UGFKMzVETEZLd2lrdG9a
Um4vMS82ODQwMjdGMjA0MzgyQTFCQzNFMzlFODg5MTgwNEVCQjA3OTA2Qzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NDAyN0YyMDQzODJBMUJD
M0UzOUU4ODkxODA0RUJCMDc5MDZDODkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHV0diSFFuOEdxZmtrRlJKZmRDaFhoSlJnNFBhSjM1RExGS3dpa3RvWlJuLzEv
MzIzODMwMzQzYTMxNjMzODM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM2
MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHIgwDQYJKoZIhvcNAQELBQADggEBAIbx2RBaDSNL
xJb9rdv2pKjNfj3yqQ2wSJmOGZgfJn1YOxz50DCBJanFZdgdRgui88xagdNJHaH8
5DlrSX/RgdX28FivAkv3N9J0HOnlEP6K0eg/VzVHmahDjquXhe5BMf6UGi3dQCMt
SSaQIogZkQL4shAyneE9gynfhGXlIKw7I5XEVVA5/fqKWRnbLVkmwfrICniHe3nF
BRHDNGkKEP9/W4oFwQcq1AfVDzAxM2vtef46eebW5mypkYq6W/9/L8G3x2Mo3lc+
QogV2gEyxhyG13Nx9T1zHuvfcMnxXCbtfoAlrEnMxXOYRN6U0LLi+7iVuv4vsc6e
bsvr66Ozyew=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org