Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          kFWYOehzraBStKnSHKsMAern7if9Qq6Q+7zOFGl4AYM=
Subject key identifier:   0F:EB:26:ED:DC:6F:93:72:A3:DF:80:F5:CE:0E:23:75:B6:88:A9:0B
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       683CE2AE657F57BA5F6E66975002AACEAC1DCCB5
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:51 +0000
ROA not before:           Tue 01 Oct 2024 14:00:51 +0000
ROA not after:            Tue 30 Sep 2025 14:05:51 +0000
asID:                     265175
IP address blocks:        2804:2bc8:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3c:e2:ae:65:7f:57:ba:5f:6e:66:97:50:02:aa:ce:ac:1d:cc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:51 2024 GMT
            Not After : Sep 30 14:05:51 2025 GMT
        Subject: CN=3082010A0282010100ADAE60B0931570795F52197C7C9FD7FB537F6001D72125CBD2A56C6F69DD8EB8858FCDE54159A4F900B3F75B81E14DC3807432DC0CFF6A90B628CB5E9619DEBBC7645B6C723F1A6B9F6A0B8B475838C73E97924F22815B7D3B47B2D49D4BF4CFB679CD29694B1F663C75BE4F68275045D9AB57ECAB4059AE1D300AB332EBB1B1D981211F482D94F08CF324410F31EBD8E05C47FB5BAB66CFF580DDF2FD5829D9D94828FC8D3788B50C9EAB49955534CB783F7B1D237F85C70000CEA0E7EAE88E38E2FEDA1CF09A66F66D4E0766B81BD998B736838906C59FD1E40BFF9667B98EB6EC4EBDF9AA1C31416DE4016C72AE97F37786F45C3D02DEB81201B0D97F794B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:60:b0:93:15:70:79:5f:52:19:7c:7c:9f:
                    d7:fb:53:7f:60:01:d7:21:25:cb:d2:a5:6c:6f:69:
                    dd:8e:b8:85:8f:cd:e5:41:59:a4:f9:00:b3:f7:5b:
                    81:e1:4d:c3:80:74:32:dc:0c:ff:6a:90:b6:28:cb:
                    5e:96:19:de:bb:c7:64:5b:6c:72:3f:1a:6b:9f:6a:
                    0b:8b:47:58:38:c7:3e:97:92:4f:22:81:5b:7d:3b:
                    47:b2:d4:9d:4b:f4:cf:b6:79:cd:29:69:4b:1f:66:
                    3c:75:be:4f:68:27:50:45:d9:ab:57:ec:ab:40:59:
                    ae:1d:30:0a:b3:32:eb:b1:b1:d9:81:21:1f:48:2d:
                    94:f0:8c:f3:24:41:0f:31:eb:d8:e0:5c:47:fb:5b:
                    ab:66:cf:f5:80:dd:f2:fd:58:29:d9:d9:48:28:fc:
                    8d:37:88:b5:0c:9e:ab:49:95:55:34:cb:78:3f:7b:
                    1d:23:7f:85:c7:00:00:ce:a0:e7:ea:e8:8e:38:e2:
                    fe:da:1c:f0:9a:66:f6:6d:4e:07:66:b8:1b:d9:98:
                    b7:36:83:89:06:c5:9f:d1:e4:0b:ff:96:67:b9:8e:
                    b6:ec:4e:bd:f9:aa:1c:31:41:6d:e4:01:6c:72:ae:
                    97:f3:77:86:f4:5c:3d:02:de:b8:12:01:b0:d9:7f:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:26:ED:DC:6F:93:72:A3:DF:80:F5:CE:0E:23:75:B6:88:A9:0B
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a623030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:b2:43:fe:d6:fe:fa:56:6b:e1:69:a7:41:dc:6e:c6:ad:23:
         a9:53:f3:2d:c2:71:2d:89:b6:40:d9:bf:fc:8d:64:18:95:de:
         d4:7d:dc:99:21:bf:11:fe:97:f6:79:e7:57:9c:67:98:7d:2b:
         93:cc:f3:4f:c5:a9:3c:be:24:ce:c9:54:84:cc:f1:db:4c:da:
         cb:bd:da:38:59:5c:52:ab:33:66:9b:de:52:bd:cb:b8:b1:70:
         67:39:09:72:7b:1a:ce:ac:f2:67:0c:93:dd:52:eb:8c:67:2f:
         94:4e:7e:db:2e:f5:69:5d:13:be:b6:47:fd:27:6a:30:38:bc:
         40:12:cc:20:9a:0e:c9:2c:1c:38:2c:a3:35:50:00:3f:54:24:
         de:bf:e1:a1:d4:2f:a1:d4:d7:05:a0:9c:92:a8:b4:c3:ea:30:
         bd:c5:09:db:1a:96:64:43:d8:f6:ba:5c:ab:d6:9b:db:d4:55:
         45:ef:73:52:6b:8f:14:6a:b2:c5:61:90:e3:ee:a2:88:6d:c3:
         7f:48:2a:30:8f:6b:1a:6c:2a:a5:25:92:bc:6d:1f:38:ed:f1:
         f2:fc:8a:43:a4:98:45:b0:d4:67:bf:c4:7b:19:94:5c:9d:41:
         a2:e9:3d:9d:77:93:f4:df:99:b2:de:a4:f6:d5:a8:0b:c7:00:
         9b:a4:93:40
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUaDzirmV/V7pfbmaXUAKqzqwdzLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxRDhDNzk2MDNFOTZEMTMwOURGQjlCQTg4QUVCNkE2
MkM3QzY0MjAeFw0yNDEwMDExNDAwNTFaFw0yNTA5MzAxNDA1NTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURBRTYwQjA5MzE1NzA3OTVG
NTIxOTdDN0M5RkQ3RkI1MzdGNjAwMUQ3MjEyNUNCRDJBNTZDNkY2OUREOEVCODg1
OEZDREU1NDE1OUE0RjkwMEIzRjc1QjgxRTE0REMzODA3NDMyREMwQ0ZGNkE5MEI2
MjhDQjVFOTYxOURFQkJDNzY0NUI2QzcyM0YxQTZCOUY2QTBCOEI0NzU4MzhDNzNF
OTc5MjRGMjI4MTVCN0QzQjQ3QjJENDlENEJGNENGQjY3OUNEMjk2OTRCMUY2NjND
NzVCRTRGNjgyNzUwNDVEOUFCNTdFQ0FCNDA1OUFFMUQzMDBBQjMzMkVCQjFCMUQ5
ODEyMTFGNDgyRDk0RjA4Q0YzMjQ0MTBGMzFFQkQ4RTA1QzQ3RkI1QkFCNjZDRkY1
ODBEREYyRkQ1ODI5RDlEOTQ4MjhGQzhEMzc4OEI1MEM5RUFCNDk5NTU1MzRDQjc4
M0Y3QjFEMjM3Rjg1QzcwMDAwQ0VBMEU3RUFFODhFMzhFMkZFREExQ0YwOUE2NkY2
NkQ0RTA3NjZCODFCRDk5OEI3MzY4Mzg5MDZDNTlGRDFFNDBCRkY5NjY3Qjk4RUI2
RUM0RUJERjlBQTFDMzE0MTZERTQwMTZDNzJBRTk3RjM3Nzg2RjQ1QzNEMDJERUI4
MTIwMUIwRDk3Rjc5NEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAra5gsJMVcHlfUhl8fJ/X+1N/YAHXISXL0qVsb2ndjriFj83lQVmk
+QCz91uB4U3DgHQy3Az/apC2KMtelhneu8dkW2xyPxprn2oLi0dYOMc+l5JPIoFb
fTtHstSdS/TPtnnNKWlLH2Y8db5PaCdQRdmrV+yrQFmuHTAKszLrsbHZgSEfSC2U
8IzzJEEPMevY4FxH+1urZs/1gN3y/Vgp2dlIKPyNN4i1DJ6rSZVVNMt4P3sdI3+F
xwAAzqDn6uiOOOL+2hzwmmb2bU4HZrgb2Zi3NoOJBsWf0eQL/5ZnuY627E69+aoc
MUFt5AFscq6X83eG9Fw9At64EgGw2X95SwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FA/rJu3cb5Nyo9+A9c4OI3W2iKkLMB8GA1UdIwQYMBaAFCMdjHlgPpbRMJ37m6iK
62pix8ZCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzEvMjMxRDhDNzk2MDNFOTZE
MTMwOURGQjlCQTg4QUVCNkE2MkM3QzY0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMzFEOEM3OTYwM0U5NkQxMzA5REZCOUJBODhBRUI2QTYyQzdD
NjQyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8xLzMyMzgzMDM0M2EzMjYyNjMzODNh
NjIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBCvIsDANBgkqhkiG9w0BAQsFAAOCAQEAK7JD/tb++lZr4WmnQdxu
xq0jqVPzLcJxLYm2QNm//I1kGJXe1H3cmSG/Ef6X9nnnV5xnmH0rk8zzT8WpPL4k
zslUhMzx20zay73aOFlcUqszZpveUr3LuLFwZzkJcnsazqzyZwyT3VLrjGcvlE5+
2y71aV0TvrZH/SdqMDi8QBLMIJoOySwcOCyjNVAAP1Qk3r/hodQvodTXBaCckqi0
w+owvcUJ2xqWZEPY9rpcq9ab29RVRe9zUmuPFGqyxWGQ4+6iiG3Df0gqMI9rGmwq
pSWSvG0fOO3x8vyKQ6SYRbDUZ7/EexmUXJ1Bouk9nXeT9N+Zst6k9tWoC8cAm6ST
QA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org