Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          qyVVAP5FNxv0DKRIwfGyB43F1OEkznCnklAuNNVdKW0=
Subject key identifier:   B0:79:BD:99:0F:DB:06:DA:34:E2:1A:5F:8E:63:67:81:9D:8C:36:5A
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       0F70CE527F9BDA07A0423EEFFA840F5A874FD3B1
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:53 +0000
ROA not before:           Tue 01 Oct 2024 14:00:53 +0000
ROA not after:            Tue 30 Sep 2025 14:05:53 +0000
asID:                     265175
IP address blocks:        2804:2bc8:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:70:ce:52:7f:9b:da:07:a0:42:3e:ef:fa:84:0f:5a:87:4f:d3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:53 2024 GMT
            Not After : Sep 30 14:05:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:78:2f:8c:e8:62:16:eb:50:ce:eb:47:e9:
                    72:e3:86:95:1b:87:17:8f:b0:ec:36:ec:f4:9f:4f:
                    cd:16:65:6b:5b:f9:0e:9a:bc:2b:c7:2f:0d:2f:8d:
                    65:c3:2d:79:1c:1b:c2:fc:d2:4f:ea:56:5b:1c:04:
                    fa:78:a4:0e:0d:5d:fe:fc:66:8a:a4:2d:c1:7f:0b:
                    79:d9:c1:4c:a3:86:4d:7e:0b:8a:61:79:72:85:93:
                    b6:c8:7b:d7:d2:8d:15:97:9a:0c:d4:05:1b:25:8d:
                    1f:7c:f9:58:e3:e6:2c:11:28:8a:7c:39:fe:2d:68:
                    4b:2f:c7:ef:26:a8:2a:65:5e:64:9d:55:45:fe:8a:
                    d6:62:55:b3:f6:9b:1b:3c:2e:fc:de:3b:ee:bc:52:
                    8b:91:47:12:12:b0:9b:ae:84:22:97:60:ef:20:a6:
                    c1:0b:eb:27:1f:e5:16:2e:e3:21:65:f4:a8:ef:c5:
                    11:f9:f6:42:f9:82:7b:67:0e:0f:ab:e3:27:4b:d2:
                    33:e2:c8:0f:94:d9:b8:17:25:42:6e:3e:05:55:fa:
                    0e:e9:a1:29:46:af:46:bf:bb:78:a0:c4:34:09:81:
                    91:ed:01:9f:2f:ff:fe:a5:15:17:45:5f:bb:6f:f9:
                    83:6b:84:d9:fd:6c:cd:b8:d3:ca:83:e7:b7:6a:f2:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:BD:99:0F:DB:06:DA:34:E2:1A:5F:8E:63:67:81:9D:8C:36:5A
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a613030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:d8:5e:02:12:bc:92:e6:93:f5:d7:05:35:d4:77:da:6a:eb:
         c3:63:d2:b7:21:2f:d5:d1:0e:60:0c:c9:86:a8:f5:1e:88:70:
         c3:f1:e7:c3:ab:22:de:a1:64:b0:92:83:37:64:fd:1c:d2:fc:
         4d:2a:c0:eb:4c:b3:d1:5d:66:99:1e:bb:4b:3e:f5:84:19:24:
         b8:25:99:d6:d8:a7:a5:6a:0b:af:2b:83:5f:63:c0:c3:bd:b4:
         f3:06:af:2a:47:3e:c2:95:d0:fd:71:0e:7e:32:e8:a6:4f:e6:
         53:19:c2:6d:dc:7b:3e:dc:54:b6:4c:23:97:3d:31:8c:51:71:
         97:60:89:95:a4:98:19:84:4b:55:f2:92:1b:9e:ba:09:68:63:
         a4:95:c4:d4:6c:1f:77:e4:ce:51:22:ef:05:be:cf:c5:69:1b:
         ae:66:95:bd:d7:29:e5:5d:7a:98:52:be:74:e7:e7:03:56:00:
         43:88:0b:02:21:91:d3:26:2f:8a:cd:20:72:4c:cc:09:5f:61:
         ee:21:87:f1:4b:fa:6b:83:d2:72:29:b7:30:d7:ae:52:9e:29:
         bf:c1:c9:e4:cc:4f:87:91:22:91:a9:f4:28:e0:69:bb:07:8a:
         b6:c8:4b:bf:9e:a6:f4:e7:1e:72:05:7f:8f:61:ec:9d:bd:58:
         42:d8:0e:2f
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUD3DOUn+b2gegQj7v+oQPWodP07EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxRDhDNzk2MDNFOTZEMTMwOURGQjlCQTg4QUVCNkE2
MkM3QzY0MjAeFw0yNDEwMDExNDAwNTNaFw0yNTA5MzAxNDA1NTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDAzQTc4MkY4Q0U4NjIxNkVC
NTBDRUVCNDdFOTcyRTM4Njk1MUI4NzE3OEZCMEVDMzZFQ0Y0OUY0RkNEMTY2NTZC
NUJGOTBFOUFCQzJCQzcyRjBEMkY4RDY1QzMyRDc5MUMxQkMyRkNEMjRGRUE1NjVC
MUMwNEZBNzhBNDBFMEQ1REZFRkM2NjhBQTQyREMxN0YwQjc5RDlDMTRDQTM4NjRE
N0UwQjhBNjE3OTcyODU5M0I2Qzg3QkQ3RDI4RDE1OTc5QTBDRDQwNTFCMjU4RDFG
N0NGOTU4RTNFNjJDMTEyODhBN0MzOUZFMkQ2ODRCMkZDN0VGMjZBODJBNjU1RTY0
OUQ1NTQ1RkU4QUQ2NjI1NUIzRjY5QjFCM0MyRUZDREUzQkVFQkM1MjhCOTE0NzEy
MTJCMDlCQUU4NDIyOTc2MEVGMjBBNkMxMEJFQjI3MUZFNTE2MkVFMzIxNjVGNEE4
RUZDNTExRjlGNjQyRjk4MjdCNjcwRTBGQUJFMzI3NEJEMjMzRTJDODBGOTREOUI4
MTcyNTQyNkUzRTA1NTVGQTBFRTlBMTI5NDZBRjQ2QkZCQjc4QTBDNDM0MDk4MTkx
RUQwMTlGMkZGRkZFQTUxNTE3NDU1RkJCNkZGOTgzNkI4NEQ5RkQ2Q0NEQjhEM0NB
ODNFN0I3NkFGMkRBRUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Dp4L4zoYhbrUM7rR+ly44aVG4cXj7DsNuz0n0/NFmVrW/kOmrwr
xy8NL41lwy15HBvC/NJP6lZbHAT6eKQODV3+/GaKpC3Bfwt52cFMo4ZNfguKYXly
hZO2yHvX0o0Vl5oM1AUbJY0ffPlY4+YsESiKfDn+LWhLL8fvJqgqZV5knVVF/orW
YlWz9psbPC783jvuvFKLkUcSErCbroQil2DvIKbBC+snH+UWLuMhZfSo78UR+fZC
+YJ7Zw4Pq+MnS9Iz4sgPlNm4FyVCbj4FVfoO6aEpRq9Gv7t4oMQ0CYGR7QGfL//+
pRUXRV+7b/mDa4TZ/WzNuNPKg+e3avLa7QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FLB5vZkP2wbaNOIaX45jZ4GdjDZaMB8GA1UdIwQYMBaAFCMdjHlgPpbRMJ37m6iK
62pix8ZCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzEvMjMxRDhDNzk2MDNFOTZE
MTMwOURGQjlCQTg4QUVCNkE2MkM3QzY0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMzFEOEM3OTYwM0U5NkQxMzA5REZCOUJBODhBRUI2QTYyQzdD
NjQyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8xLzMyMzgzMDM0M2EzMjYyNjMzODNh
NjEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBCvIoDANBgkqhkiG9w0BAQsFAAOCAQEAn9heAhK8kuaT9dcFNdR3
2mrrw2PStyEv1dEOYAzJhqj1Hohww/Hnw6si3qFksJKDN2T9HNL8TSrA60yz0V1m
mR67Sz71hBkkuCWZ1tinpWoLryuDX2PAw7208wavKkc+wpXQ/XEOfjLopk/mUxnC
bdx7PtxUtkwjlz0xjFFxl2CJlaSYGYRLVfKSG566CWhjpJXE1Gwfd+TOUSLvBb7P
xWkbrmaVvdcp5V16mFK+dOfnA1YAQ4gLAiGR0yYvis0gckzMCV9h7iGH8Uv6a4PS
cim3MNeuUp4pv8HJ5MxPh5Eikan0KOBpuweKtshLv56m9OcecgV/j2Hsnb1YQtgO
Lw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:05 2024 by rpki-client on console-fra.rpki-client.org