Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/323830343a333631383a3a2f33322d3438203d3e20323636333236.roa
File:                     323830343a333631383a3a2f33322d3438203d3e20323636333236.roa (raw, json)
Hash identifier:          e+FgIlrZCAA7DOAsAkH9c4Nv4kEo7hqcIFi1TEmPrCA=
Subject key identifier:   28:0B:1D:CA:F0:4A:41:BE:B4:EC:38:60:7E:E8:C9:E7:84:29:03:C2
Certificate issuer:       /CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
Certificate serial:       198AFC6F9CA2B09FA3ADCF8DDE8FC0948BE69198
Authority key identifier: 6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/323830343a333631383a3a2f33322d3438203d3e20323636333236.roa
Signing time:             Wed 24 Jul 2024 20:16:28 +0000
ROA not before:           Wed 24 Jul 2024 20:11:28 +0000
ROA not after:            Wed 23 Jul 2025 20:16:28 +0000
asID:                     266326
IP address blocks:        2804:3618::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl
                          rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8a:fc:6f:9c:a2:b0:9f:a3:ad:cf:8d:de:8f:c0:94:8b:e6:91:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
        Validity
            Not Before: Jul 24 20:11:28 2024 GMT
            Not After : Jul 23 20:16:28 2025 GMT
        Subject: CN=280B1DCAF04A41BEB4EC38607EE8C9E7842903C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:d1:ec:56:e3:cf:c8:e8:a9:5f:32:df:3e:
                    cf:f2:4a:f7:c0:f7:cb:85:38:c7:0d:35:88:f3:79:
                    4b:52:92:1f:97:59:67:a9:37:9f:35:6f:f5:e3:98:
                    e8:ce:89:13:3a:9e:cd:6e:1e:85:5c:ff:f7:54:17:
                    98:fb:14:4c:67:0c:13:a5:4c:b0:2c:78:bd:91:8f:
                    09:a7:bd:59:56:61:73:e0:3b:d1:2d:3b:7b:a9:40:
                    5a:49:60:5e:92:b3:cf:1d:95:16:2b:ad:f4:e7:bc:
                    df:65:d0:af:1d:6e:08:68:e9:8a:36:f5:84:4c:d2:
                    48:1b:1c:d3:06:ff:77:3c:37:b5:b0:a8:62:8d:6d:
                    f0:ba:50:95:e5:e1:61:e8:db:af:e9:1b:0e:f2:91:
                    40:85:85:b9:d1:be:0b:ad:3a:4d:ea:78:d0:99:f7:
                    7c:7e:48:be:2f:ba:55:15:26:95:3e:db:aa:28:36:
                    55:f6:a2:b3:29:e9:87:d2:72:ad:7c:87:ad:e2:6d:
                    c7:18:fc:b1:1e:a4:b7:ec:05:63:17:44:bf:1e:37:
                    71:eb:da:f9:3c:28:c2:a5:8d:e3:02:0a:d2:6f:1b:
                    26:f9:73:ed:9d:d7:4e:23:da:e0:ca:81:11:5c:31:
                    de:95:cb:6d:04:01:88:6f:71:83:4d:d4:c1:2b:c5:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0B:1D:CA:F0:4A:41:BE:B4:EC:38:60:7E:E8:C9:E7:84:29:03:C2
            X509v3 Authority Key Identifier:
                keyid:6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/323830343a333631383a3a2f33322d3438203d3e20323636333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3618::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:fd:4c:9e:e0:ef:63:a0:3a:51:59:0d:8a:ad:6a:1b:2c:82:
         39:ac:0e:67:73:03:36:fe:97:55:70:d1:ea:58:92:82:7f:df:
         29:f5:e3:bd:b1:06:9f:65:82:dc:17:4a:ae:67:87:d7:b9:92:
         99:5c:c8:08:6b:85:6e:5f:ef:f6:75:bf:10:6e:ee:c6:ba:5b:
         62:66:9a:29:75:73:a2:03:e2:16:a2:29:d8:50:5b:89:e6:24:
         ac:88:67:4d:d0:78:39:9a:fb:e9:97:cf:44:05:e9:41:c9:1e:
         47:c6:91:48:62:8a:dd:8e:59:b2:85:ae:a2:2f:00:fb:79:99:
         1e:15:c9:7f:78:b7:19:58:a8:3e:0f:01:ff:2e:d9:b7:55:78:
         3f:29:3c:d1:f1:bd:50:e2:8e:d6:41:a0:bc:b5:7e:45:e9:55:
         85:fd:3d:f5:bb:ae:91:70:b2:f7:3c:48:4f:2e:1b:46:f7:c4:
         5e:a1:6d:7c:00:22:3b:79:69:63:59:49:77:e3:12:c0:1c:50:
         b1:3d:12:76:f6:2f:27:65:f8:8d:81:83:6f:05:1d:f8:df:f5:
         a3:81:50:3d:f4:79:2c:6d:0f:15:f7:46:04:d2:de:de:f1:54:
         fe:11:fe:a4:7f:3f:4b:4c:49:ed:fb:80:cf:f2:17:b6:1c:d0:
         d4:66:a6:d1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGYr8b5yisJ+jrc+N3o/AlIvmkZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI5M0JFMUMxODU0MkE0OEQ3QzRFMzFEMkU3M0JFMjE2
NEFGNkM3OTAeFw0yNDA3MjQyMDExMjhaFw0yNTA3MjMyMDE2MjhaMDMxMTAvBgNV
BAMTKDI4MEIxRENBRjA0QTQxQkVCNEVDMzg2MDdFRThDOUU3ODQyOTAzQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CNHsVuPPyOipXzLfPs/ySvfA
98uFOMcNNYjzeUtSkh+XWWepN581b/XjmOjOiRM6ns1uHoVc//dUF5j7FExnDBOl
TLAseL2RjwmnvVlWYXPgO9EtO3upQFpJYF6Ss88dlRYrrfTnvN9l0K8dbgho6Yo2
9YRM0kgbHNMG/3c8N7WwqGKNbfC6UJXl4WHo26/pGw7ykUCFhbnRvgutOk3qeNCZ
93x+SL4vulUVJpU+26ooNlX2orMp6YfScq18h63ibccY/LEepLfsBWMXRL8eN3Hr
2vk8KMKljeMCCtJvGyb5c+2d104j2uDKgRFcMd6Vy20EAYhvcYNN1MErxem7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUKAsdyvBKQb607DhgfujJ54QpA8IwHwYDVR0j
BBgwFoAUa5O+HBhUKkjXxOMdLnO+IWSvbHkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJXNWFCV0VLWnhFTEZNZW5nU1liOTdtZWdVN1lMcEFrbUNkcDlydkNy
bmovMC82QjkzQkUxQzE4NTQyQTQ4RDdDNEUzMUQyRTczQkUyMTY0QUY2Qzc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCOTNCRTFDMTg1NDJBNDhE
N0M0RTMxRDJFNzNCRTIxNjRBRjZDNzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyVzVhQldFS1p4RUxGTWVuZ1NZYjk3bWVnVTdZTHBBa21DZHA5cnZDcm5qLzAv
MzIzODMwMzQzYTMzMzYzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzMzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ2GDANBgkqhkiG9w0BAQsFAAOCAQEAwf1MnuDv
Y6A6UVkNiq1qGyyCOawOZ3MDNv6XVXDR6liSgn/fKfXjvbEGn2WC3BdKrmeH17mS
mVzICGuFbl/v9nW/EG7uxrpbYmaaKXVzogPiFqIp2FBbieYkrIhnTdB4OZr76ZfP
RAXpQckeR8aRSGKK3Y5ZsoWuoi8A+3mZHhXJf3i3GVioPg8B/y7Zt1V4Pyk80fG9
UOKO1kGgvLV+RelVhf099buukXCy9zxITy4bRvfEXqFtfAAiO3lpY1lJd+MSwBxQ
sT0SdvYvJ2X4jYGDbwUd+N/1o4FQPfR5LG0PFfdGBNLe3vFU/hH+pH8/S0xJ7fuA
z/IXthzQ1Gam0Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:54 2024 by rpki-client on console-fra.rpki-client.org