Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
File:                     323830343a6636633a3a2f33322d3438203d3e20323633353835.roa (raw, json)
Hash identifier:          pBxqrGcdlECEpVIp1pGfRz5/4UZaGmgSZFEVSbnPfR4=
Subject key identifier:   1F:F6:00:B3:71:8D:B1:BE:E1:9A:66:C5:E7:F8:7C:45:5A:CE:9D:AD
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       55B63966B4A50688742FF2714C1052C84949669A
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     263585
IP address blocks:        2804:f6c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b6:39:66:b4:a5:06:88:74:2f:f2:71:4c:10:52:c8:49:49:66:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:63:5c:7d:37:14:e4:fc:aa:ed:76:92:f4:
                    46:79:bc:fb:72:a3:24:6e:fa:dc:67:82:7d:0a:b7:
                    81:57:32:73:91:e4:d7:c8:5c:44:6d:e7:4b:50:cf:
                    81:9f:8b:76:53:f8:1e:c1:27:dc:b5:22:70:10:ae:
                    dd:6b:cd:8e:cb:e2:e4:a1:6c:ba:ba:05:d6:22:36:
                    bc:bf:cf:ee:52:1a:65:57:b7:16:ad:0f:44:b2:22:
                    6c:a6:6e:36:89:45:e3:f8:66:bb:e9:22:9b:cb:4f:
                    66:c7:3e:fe:d7:04:bf:b9:d5:bb:36:6b:81:09:ea:
                    50:60:c8:d0:97:65:de:69:11:8c:c0:aa:3a:b8:92:
                    b1:4c:74:e4:f9:12:23:00:3a:ee:87:95:9b:c0:9d:
                    45:4d:b5:e5:72:67:65:94:19:ea:4b:19:fa:18:eb:
                    63:39:61:c3:69:21:3f:f9:65:92:bc:3b:e3:04:55:
                    d7:d4:b2:19:80:ca:ed:40:c9:59:53:eb:d8:b9:2b:
                    d5:36:d7:3b:2f:c4:96:f5:8e:e2:49:f0:f5:3b:ab:
                    c6:f8:04:75:30:b1:43:2c:c0:11:fe:32:26:de:3b:
                    2c:20:af:d9:d6:f9:e4:58:20:63:d7:1b:be:35:89:
                    cb:fe:0c:08:a4:c9:0f:84:37:35:90:6c:61:8e:bc:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:00:B3:71:8D:B1:BE:E1:9A:66:C5:E7:F8:7C:45:5A:CE:9D:AD
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:1b:ab:9f:4a:d5:82:e2:38:00:a0:99:8c:98:c0:58:0d:c8:
         94:dd:35:fd:f5:1e:e7:40:a2:1b:20:49:b3:47:8c:fb:7c:74:
         83:79:a1:a0:5c:9f:2e:91:bd:24:1d:57:1b:ff:a1:68:c8:fb:
         51:a3:50:b5:dc:da:ec:29:81:12:9d:db:3f:25:ba:66:06:fd:
         d9:97:f6:a2:67:66:27:4e:ff:5d:f1:90:ae:dd:6d:a0:86:16:
         a2:32:bd:48:3a:9b:2f:e8:53:b6:0f:4b:99:61:63:6a:eb:db:
         17:de:53:03:bf:18:86:5b:e7:fd:65:92:90:6a:38:e9:9d:e1:
         9c:35:1c:da:70:d1:94:6b:db:20:e3:7a:c9:16:69:3e:7e:c7:
         cf:12:26:71:35:01:f8:89:9a:89:db:bc:1c:10:46:79:6b:eb:
         3f:54:47:82:0e:fe:2f:21:f5:4e:23:5b:97:81:a4:a3:b4:b2:
         d2:95:b6:38:c6:49:ef:8b:9a:d7:d5:13:26:54:cb:6c:3a:e2:
         52:d9:11:67:f0:fd:55:11:bb:db:de:e4:9b:cb:ca:d8:eb:e8:
         a2:30:7e:fd:fd:47:f8:c1:f8:58:b9:30:38:26:53:d7:38:44:
         88:a8:61:af:64:40:b2:68:40:ea:71:37:46:f3:c0:ee:0c:57:
         1d:90:fd:86
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUVbY5ZrSlBoh0L/JxTBBSyElJZpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ4RDYzMTY2NTc0OEE3RTNEMUIyMkVBQjNFOTY3NUY1
RjY3NTZEMDAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTREQzYzNUM3RDM3MTRFNEZD
QUFFRDc2OTJGNDQ2NzlCQ0ZCNzJBMzI0NkVGQURDNjc4MjdEMEFCNzgxNTczMjcz
OTFFNEQ3Qzg1QzQ0NkRFNzRCNTBDRjgxOUY4Qjc2NTNGODFFQzEyN0RDQjUyMjcw
MTBBRURENkJDRDhFQ0JFMkU0QTE2Q0JBQkEwNUQ2MjIzNkJDQkZDRkVFNTIxQTY1
NTdCNzE2QUQwRjQ0QjIyMjZDQTY2RTM2ODk0NUUzRjg2NkJCRTkyMjlCQ0I0RjY2
QzczRUZFRDcwNEJGQjlENUJCMzY2QjgxMDlFQTUwNjBDOEQwOTc2NURFNjkxMThD
QzBBQTNBQjg5MkIxNEM3NEU0RjkxMjIzMDAzQUVFODc5NTlCQzA5RDQ1NERCNUU1
NzI2NzY1OTQxOUVBNEIxOUZBMThFQjYzMzk2MUMzNjkyMTNGRjk2NTkyQkMzQkUz
MDQ1NUQ3RDRCMjE5ODBDQUVENDBDOTU5NTNFQkQ4QjkyQkQ1MzZENzNCMkZDNDk2
RjU4RUUyNDlGMEY1M0JBQkM2RjgwNDc1MzBCMTQzMkNDMDExRkUzMjI2REUzQjJD
MjBBRkQ5RDZGOUU0NTgyMDYzRDcxQkJFMzU4OUNCRkUwQzA4QTRDOTBGODQzNzM1
OTA2QzYxOEVCQzNFMEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApNxjXH03FOT8qu12kvRGebz7cqMkbvrcZ4J9CreBVzJzkeTXyFxE
bedLUM+Bn4t2U/gewSfctSJwEK7da82Oy+LkoWy6ugXWIja8v8/uUhplV7cWrQ9E
siJspm42iUXj+Ga76SKby09mxz7+1wS/udW7NmuBCepQYMjQl2XeaRGMwKo6uJKx
THTk+RIjADruh5WbwJ1FTbXlcmdllBnqSxn6GOtjOWHDaSE/+WWSvDvjBFXX1LIZ
gMrtQMlZU+vYuSvVNtc7L8SW9Y7iSfD1O6vG+AR1MLFDLMAR/jIm3jssIK/Z1vnk
WCBj1xu+NYnL/gwIpMkPhDc1kGxhjrw+CwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FB/2ALNxjbG+4Zpmxef4fEVazp2tMB8GA1UdIwQYMBaAFB2NYxZldIp+PRsi6rPp
Z19fZ1bQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhQUlJXQ1dXalFMbmRU
dGh4N1BlR1doTjh1ZW9idkp1bURyOThwaFNrbU1ULzEvMUQ4RDYzMTY2NTc0OEE3
RTNEMUIyMkVBQjNFOTY3NUY1RjY3NTZEMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xRDhENjMxNjY1NzQ4QTdFM0QxQjIyRUFCM0U5Njc1RjVGNjc1
NkQwLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84UFJSV0NXV2pRTG5kVHRoeDdQ
ZUdXaE44dWVvYnZKdW1Ecjk4cGhTa21NVC8xLzMyMzgzMDM0M2E2NjM2NjMzYTNh
MmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM2MzMzNTM4MzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBA9s
MA0GCSqGSIb3DQEBCwUAA4IBAQCUG6ufStWC4jgAoJmMmMBYDciU3TX99R7nQKIb
IEmzR4z7fHSDeaGgXJ8ukb0kHVcb/6FoyPtRo1C13NrsKYESnds/JbpmBv3Zl/ai
Z2YnTv9d8ZCu3W2ghhaiMr1IOpsv6FO2D0uZYWNq69sX3lMDvxiGW+f9ZZKQajjp
neGcNRzacNGUa9sg43rJFmk+fsfPEiZxNQH4iZqJ27wcEEZ5a+s/VEeCDv4vIfVO
I1uXgaSjtLLSlbY4xknvi5rX1RMmVMtsOuJS2RFn8P1VEbvb3uSby8rY6+iiMH79
/Uf4wfhYuTA4JlPXOESIqGGvZECyaEDqcTdG88DuDFcdkP2G
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:57 2024 by rpki-client on console-fra.rpki-client.org