Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/323830343a313761633a3a2f33322d3332203d3e20323633313634.roa
File:                     323830343a313761633a3a2f33322d3332203d3e20323633313634.roa (raw, json)
Hash identifier:          Mw8DCEdpgehg9zZZ1jpYjhAHuTxcCCvdWzFiUexz+fg=
Subject key identifier:   18:D0:E4:0C:C2:A8:62:C9:66:DB:8D:73:CA:3A:80:2D:71:4D:34:74
Certificate issuer:       /CN=D90441ECB74943D30081300B753529BADC36D40B
Certificate serial:       65A30CD03F8363D56691B8B9717F5E4D52F46F49
Authority key identifier: D9:04:41:EC:B7:49:43:D3:00:81:30:0B:75:35:29:BA:DC:36:D4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90441ECB74943D30081300B753529BADC36D40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/323830343a313761633a3a2f33322d3332203d3e20323633313634.roa
Signing time:             Sun 07 Apr 2024 22:17:50 +0000
ROA not before:           Sun 07 Apr 2024 22:12:50 +0000
ROA not after:            Sun 06 Apr 2025 22:17:50 +0000
asID:                     263164
IP address blocks:        2804:17ac::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.crl
                          rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90441ECB74943D30081300B753529BADC36D40B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a3:0c:d0:3f:83:63:d5:66:91:b8:b9:71:7f:5e:4d:52:f4:6f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90441ECB74943D30081300B753529BADC36D40B
        Validity
            Not Before: Apr  7 22:12:50 2024 GMT
            Not After : Apr  6 22:17:50 2025 GMT
        Subject: CN=18D0E40CC2A862C966DB8D73CA3A802D714D3474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:ae:a6:9b:34:37:34:44:a1:c3:b8:c6:1b:
                    a0:b0:0a:19:03:60:2d:07:89:cc:25:ca:4e:f4:34:
                    0d:65:4c:03:08:2f:0e:79:5a:83:b5:05:36:81:9c:
                    1c:a0:6a:b8:93:1a:24:7f:cd:2f:24:d7:31:44:7c:
                    ce:a2:8b:34:b8:f6:6f:d7:65:28:04:0b:e0:e0:f1:
                    11:b0:67:33:60:71:c3:52:dc:20:da:d2:ac:80:b6:
                    11:9c:8b:b8:0b:0e:1c:b7:4e:a8:2a:95:ce:b1:ae:
                    de:80:dc:e5:55:5c:4c:e4:c7:fc:5f:bb:92:4b:32:
                    05:d3:2b:62:34:ac:d1:88:7b:90:d6:22:cf:20:ba:
                    f4:43:6d:d0:ac:90:d1:30:de:a0:10:7b:38:28:eb:
                    07:4f:49:1f:d4:6a:0f:9b:38:b4:82:b1:d7:08:53:
                    96:fc:08:30:a2:e3:07:b4:6e:28:be:1f:f1:14:fc:
                    8b:c5:db:8a:57:54:ad:26:b4:94:db:b8:10:51:1f:
                    36:77:6e:b7:c4:9b:11:d5:8d:ae:c5:35:61:31:3b:
                    53:c9:8f:88:18:6c:20:7a:31:1f:75:84:57:62:4a:
                    6a:d0:f2:4a:b9:b5:7d:a3:8d:67:cd:de:ce:48:23:
                    98:3c:64:b5:dd:1e:af:19:50:27:fd:37:e7:03:1f:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D0:E4:0C:C2:A8:62:C9:66:DB:8D:73:CA:3A:80:2D:71:4D:34:74
            X509v3 Authority Key Identifier:
                keyid:D9:04:41:EC:B7:49:43:D3:00:81:30:0B:75:35:29:BA:DC:36:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90441ECB74943D30081300B753529BADC36D40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/323830343a313761633a3a2f33322d3332203d3e20323633313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:37:e8:52:90:3e:0b:5a:fe:2e:77:d1:58:18:1a:24:2c:7d:
         da:a9:5d:77:0a:5c:b0:36:d3:b4:67:a7:f0:24:c4:0b:da:d6:
         c7:5a:ff:44:eb:79:9b:ba:75:89:5e:95:d7:5f:c3:da:83:c6:
         e8:2d:3e:49:17:78:62:d2:66:14:1f:4d:4f:8a:32:b1:2d:0b:
         fa:04:33:15:7c:4b:b3:7c:7f:64:58:b3:ca:89:06:78:60:28:
         83:91:8a:36:df:6b:c1:5e:90:1b:e2:9f:27:1b:3d:fb:82:24:
         f9:ce:de:e1:c7:f5:0e:3b:4e:32:6f:f2:00:2b:61:a9:8a:d7:
         1c:b8:07:fe:54:11:48:82:bc:d6:62:4c:67:39:22:c1:a7:f7:
         6b:12:ce:33:50:29:c0:1c:cf:82:ca:b1:c4:6b:74:87:3a:04:
         aa:3f:af:79:1d:41:66:66:dc:09:be:fe:f6:38:87:3f:24:14:
         4a:23:01:a1:31:82:21:4a:f8:5c:20:d9:f2:87:c0:58:d9:2e:
         fd:f4:41:52:95:a8:1d:df:d4:28:d6:6c:04:61:b2:c9:35:2e:
         2d:da:82:d9:f4:13:2a:6e:a4:88:64:5a:73:df:ce:02:30:43:
         e9:de:75:87:9b:b1:ad:72:92:ff:de:9c:08:48:17:80:3a:d0:
         4d:db:7b:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZaMM0D+DY9Vmkbi5cX9eTVL0b0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkwNDQxRUNCNzQ5NDNEMzAwODEzMDBCNzUzNTI5QkFE
QzM2RDQwQjAeFw0yNDA0MDcyMjEyNTBaFw0yNTA0MDYyMjE3NTBaMDMxMTAvBgNV
BAMTKDE4RDBFNDBDQzJBODYyQzk2NkRCOEQ3M0NBM0E4MDJENzE0RDM0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/a6mmzQ3NEShw7jGG6CwChkD
YC0Hicwlyk70NA1lTAMILw55WoO1BTaBnBygariTGiR/zS8k1zFEfM6iizS49m/X
ZSgEC+Dg8RGwZzNgccNS3CDa0qyAthGci7gLDhy3Tqgqlc6xrt6A3OVVXEzkx/xf
u5JLMgXTK2I0rNGIe5DWIs8guvRDbdCskNEw3qAQezgo6wdPSR/Uag+bOLSCsdcI
U5b8CDCi4we0bii+H/EU/IvF24pXVK0mtJTbuBBRHzZ3brfEmxHVja7FNWExO1PJ
j4gYbCB6MR91hFdiSmrQ8kq5tX2jjWfN3s5II5g8ZLXdHq8ZUCf9N+cDH225AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGNDkDMKoYslm241zyjqALXFNNHQwHwYDVR0j
BBgwFoAU2QRB7LdJQ9MAgTALdTUputw21AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF1SDZrSkU4VkhoeHhYVlU2bzdCS0R3ZXVLQ0tMaFhqYkJhR2UxUHR4
TEQvMC9EOTA0NDFFQ0I3NDk0M0QzMDA4MTMwMEI3NTM1MjlCQURDMzZENDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MDQ0MUVDQjc0OTQzRDMw
MDgxMzAwQjc1MzUyOUJBREMzNkQ0MEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdUg2a0pFOFZIaHh4WFZVNm83QktEd2V1S0NLTGhYamJCYUdlMVB0eExELzAv
MzIzODMwMzQzYTMxMzc2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQXrDANBgkqhkiG9w0BAQsFAAOCAQEARTfoUpA+
C1r+LnfRWBgaJCx92qlddwpcsDbTtGen8CTEC9rWx1r/ROt5m7p1iV6V11/D2oPG
6C0+SRd4YtJmFB9NT4oysS0L+gQzFXxLs3x/ZFizyokGeGAog5GKNt9rwV6QG+Kf
Jxs9+4Ik+c7e4cf1DjtOMm/yACthqYrXHLgH/lQRSIK81mJMZzkiwaf3axLOM1Ap
wBzPgsqxxGt0hzoEqj+veR1BZmbcCb7+9jiHPyQUSiMBoTGCIUr4XCDZ8ofAWNku
/fRBUpWoHd/UKNZsBGGyyTUuLdqC2fQTKm6kiGRac9/OAjBD6d51h5uxrXKS/96c
CEgXgDrQTdt7QA==
-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:22 2024 by rpki-client on console-fra.rpki-client.org