Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa
File:                     323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (raw, json)
Hash identifier:          Bm9Kcd02phGiG7AWOn0ma8NcB+QmfSZ46IQIKek0iV4=
Subject key identifier:   A9:F5:0D:42:71:C5:0A:98:06:70:E7:50:E5:E2:89:7E:48:E4:F0:F5
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       1303C459310F64ACE6076690FA0C4F20C620B75A
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa
Signing time:             Wed 30 Oct 2024 01:58:50 +0000
ROA not before:           Wed 30 Oct 2024 01:53:50 +0000
ROA not after:            Wed 29 Oct 2025 01:58:50 +0000
asID:                     272518
IP address blocks:        2804:8268::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:03:c4:59:31:0f:64:ac:e6:07:66:90:fa:0c:4f:20:c6:20:b7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct 30 01:53:50 2024 GMT
            Not After : Oct 29 01:58:50 2025 GMT
        Subject: CN=A9F50D4271C50A980670E750E5E2897E48E4F0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:d9:a4:6b:45:ca:d2:d0:5d:54:27:25:06:
                    c8:5e:9e:f3:af:09:ac:a0:9f:93:65:fd:00:09:70:
                    1b:5c:ce:9f:00:66:a5:55:7c:79:4f:3d:b5:7c:08:
                    df:96:62:67:91:4e:eb:e5:a2:0c:83:20:d8:8b:bb:
                    d0:3b:ab:bc:7f:35:e7:db:cd:f7:cb:cf:f3:5c:7d:
                    a9:ee:1c:aa:21:ab:98:16:b3:d6:7b:d3:80:41:39:
                    c1:20:20:b0:67:81:27:74:d1:e6:9d:33:5c:b0:4a:
                    ae:bc:f0:1c:da:37:02:12:63:2e:29:13:fd:e8:f8:
                    75:ba:46:90:8b:0e:e8:73:85:7c:8b:5e:d6:57:f4:
                    d0:98:21:07:bb:f6:eb:95:cd:c6:16:8f:91:3d:2b:
                    9a:c2:22:17:f6:9c:7e:a9:63:dd:dc:99:97:9a:53:
                    df:e3:3b:c6:d7:db:b4:5f:3c:cb:b5:b6:b6:3c:3c:
                    ff:05:b2:56:80:ba:36:24:fe:2c:21:08:ed:77:97:
                    c5:a7:d8:84:cd:f2:3b:c3:f4:f9:4a:1d:94:08:b3:
                    6a:da:1c:d8:a1:f4:66:a5:37:35:e7:22:53:97:19:
                    a7:de:c3:c5:bb:c8:d2:02:11:8f:62:94:56:7a:2f:
                    8a:b9:1f:b1:47:bc:d5:82:00:c6:28:33:cb:3f:2f:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:0D:42:71:C5:0A:98:06:70:E7:50:E5:E2:89:7E:48:E4:F0:F5
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:d1:40:86:c3:1c:2d:bf:9d:0e:48:d9:f9:06:38:e9:ea:
         76:cd:30:72:1d:58:f9:5c:68:82:42:51:04:89:89:31:3d:f6:
         29:ab:f1:99:38:61:1a:0a:a6:71:5f:23:95:71:0e:19:a4:4d:
         de:bd:97:c4:e8:32:b3:7a:f9:db:da:96:94:d7:56:9b:80:eb:
         39:89:96:ee:ee:be:13:4b:fc:ca:70:22:fe:f2:d7:fc:92:9a:
         f9:cf:a1:5f:47:06:ce:79:80:8b:7a:dc:a9:b2:19:77:8e:e6:
         61:cb:64:84:38:de:b5:a2:9c:71:6f:f7:81:10:32:83:07:72:
         34:78:81:a9:fe:dc:1c:86:26:02:81:dd:72:13:f3:08:c6:ca:
         04:3b:61:45:93:14:86:3c:67:b6:f6:f0:bb:d0:de:37:04:17:
         c7:1c:73:69:b1:7c:bf:f5:96:bc:8b:dd:99:26:76:29:fa:6f:
         8e:09:33:77:a5:bc:e0:2c:43:26:61:5d:4f:1c:41:3f:17:9f:
         fc:5f:0b:e3:cb:36:24:53:40:0c:4e:53:97:f9:db:2a:87:14:
         d3:23:17:9b:96:4e:85:4a:a7:b3:92:f7:8f:fc:26:07:73:ed:
         b5:52:53:95:3a:3d:eb:cb:45:27:62:46:df:80:90:1b:dc:29:
         59:54:f1:a7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEwPEWTEPZKzmB2aQ+gxPIMYgt1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5
NEE3RUE5NDAeFw0yNDEwMzAwMTUzNTBaFw0yNTEwMjkwMTU4NTBaMDMxMTAvBgNV
BAMTKEE5RjUwRDQyNzFDNTBBOTgwNjcwRTc1MEU1RTI4OTdFNDhFNEYwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmNmka0XK0tBdVCclBshenvOv
Caygn5Nl/QAJcBtczp8AZqVVfHlPPbV8CN+WYmeRTuvlogyDINiLu9A7q7x/Nefb
zffLz/NcfanuHKohq5gWs9Z704BBOcEgILBngSd00eadM1ywSq688BzaNwISYy4p
E/3o+HW6RpCLDuhzhXyLXtZX9NCYIQe79uuVzcYWj5E9K5rCIhf2nH6pY93cmZea
U9/jO8bX27RfPMu1trY8PP8FslaAujYk/iwhCO13l8Wn2ITN8jvD9PlKHZQIs2ra
HNih9GalNzXnIlOXGafew8W7yNICEY9ilFZ6L4q5H7FHvNWCAMYoM8s/L0FTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqfUNQnHFCpgGcOdQ5eKJfkjk8PUwHwYDVR0j
BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2
eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD
MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlCMkdUaTdwWWpFZkdXeFlEYTZGamFMdEplc2hRRlhKc1U5U3NaZ1ZGNnh0LzAv
MzIzODMwMzQzYTM4MzIzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCaDANBgkqhkiG9w0BAQsFAAOCAQEAbVLRQIbD
HC2/nQ5I2fkGOOnqds0wch1Y+VxogkJRBImJMT32KavxmThhGgqmcV8jlXEOGaRN
3r2XxOgys3r529qWlNdWm4DrOYmW7u6+E0v8ynAi/vLX/JKa+c+hX0cGznmAi3rc
qbIZd47mYctkhDjetaKccW/3gRAygwdyNHiBqf7cHIYmAoHdchPzCMbKBDthRZMU
hjxntvbwu9DeNwQXxxxzabF8v/WWvIvdmSZ2Kfpvjgkzd6W84CxDJmFdTxxBPxef
/F8L48s2JFNADE5Tl/nbKocU0yMXm5ZOhUqns5L3j/wmB3PttVJTlTo968tFJ2JG
34CQG9wpWVTxpw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org