Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/323830343a313236303a3a2f33322d313238203d3e20323633343733.roa
File:                     323830343a313236303a3a2f33322d313238203d3e20323633343733.roa (raw, json)
Hash identifier:          DJSfJ1I6VGfq2PYhzh2vqlwzW31QptT+P17jMbksYH8=
Subject key identifier:   D6:0B:FA:60:64:79:44:19:9F:49:86:14:51:65:C6:64:8A:F5:D1:F0
Certificate issuer:       /CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53
Certificate serial:       639A33D65719B4C40479D157D2E853A80227C72E
Authority key identifier: 19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/323830343a313236303a3a2f33322d313238203d3e20323633343733.roa
Signing time:             Tue 03 Sep 2024 22:40:20 +0000
ROA not before:           Tue 03 Sep 2024 22:35:20 +0000
ROA not after:            Tue 02 Sep 2025 22:40:20 +0000
asID:                     263473
IP address blocks:        2804:1260::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl
                          rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9a:33:d6:57:19:b4:c4:04:79:d1:57:d2:e8:53:a8:02:27:c7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53
        Validity
            Not Before: Sep  3 22:35:20 2024 GMT
            Not After : Sep  2 22:40:20 2025 GMT
        Subject: CN=D60BFA60647944199F4986145165C6648AF5D1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:3a:46:5b:fc:52:81:dd:5b:2b:36:e8:43:
                    a2:db:57:31:6b:2e:c8:5e:de:7b:03:d8:d6:55:e4:
                    66:c3:34:5a:2b:6b:01:55:85:7e:39:55:23:74:9e:
                    ee:62:42:95:89:a3:36:7b:b7:0c:0b:00:2e:ef:55:
                    0a:c8:df:06:1e:51:9d:88:91:da:4a:b2:2d:32:e5:
                    b3:34:0d:43:76:f1:90:90:5f:c4:18:80:d7:a4:32:
                    73:41:87:af:a6:04:ad:d1:98:58:71:d7:3a:4d:56:
                    07:8d:31:72:7a:e1:b2:08:0f:a0:7d:ba:58:0e:55:
                    ce:16:6e:db:9d:10:a2:a1:8e:9c:fc:14:2e:88:c4:
                    da:9a:56:52:fb:4e:04:11:a4:0f:4b:03:3f:17:46:
                    24:07:6e:e3:50:8e:a5:94:c1:f8:da:d9:41:3d:27:
                    63:a2:08:4a:6c:cd:88:5e:cf:6a:9f:43:5e:01:7c:
                    89:2c:c8:7f:d6:69:11:41:36:f3:03:c1:29:c8:cf:
                    d5:fd:2a:29:3d:05:3a:75:3a:6f:b5:46:50:b6:95:
                    fd:86:0f:7c:7f:ad:ab:8d:69:c0:11:b5:5a:fb:bc:
                    97:94:f2:5b:e8:ed:b8:af:e4:0b:e0:cc:ee:c9:77:
                    a7:6c:51:90:c7:e2:8a:2a:61:7e:ab:6f:10:d1:3c:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0B:FA:60:64:79:44:19:9F:49:86:14:51:65:C6:64:8A:F5:D1:F0
            X509v3 Authority Key Identifier:
                keyid:19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/323830343a313236303a3a2f33322d313238203d3e20323633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1260::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:c1:14:32:00:ca:5b:26:fe:6f:63:f5:b2:91:f7:f2:aa:
         3b:c3:54:61:9e:02:a0:43:dc:3e:a7:fa:8a:ba:dd:11:a9:96:
         5e:26:9d:16:d4:cc:ea:b7:40:53:b6:13:57:2c:11:f8:c0:37:
         23:8f:9f:5a:88:43:3f:32:2a:6f:76:e0:8f:3a:e3:8e:da:66:
         fb:0f:cd:52:08:53:1d:d9:71:42:52:ab:fd:45:06:5d:0a:e1:
         2f:3b:11:39:47:ea:43:61:3e:7e:92:61:bb:87:bb:95:3e:61:
         ea:53:9f:23:38:1f:73:7a:c1:e0:9c:93:82:e2:1a:61:72:21:
         69:af:6f:ea:82:5d:6c:4b:80:21:12:1f:d3:55:47:e8:34:bf:
         b8:64:95:21:a4:ff:55:c6:f7:67:d2:e7:9f:8d:cc:76:63:e3:
         fc:d2:f4:9b:5f:90:a7:f2:91:a5:be:39:d9:24:a4:94:97:96:
         87:51:85:ec:f4:3a:86:9b:d2:2b:6b:9f:9d:78:e3:44:d6:b7:
         0a:f0:d4:10:61:f0:a2:49:69:15:e3:73:8f:70:ea:39:22:52:
         ef:c5:c7:41:3b:61:c7:89:71:60:b0:3c:57:cb:0f:6c:87:11:
         f3:85:b7:29:6b:ce:77:d3:3a:ce:af:9d:9e:ed:6c:94:ad:ae:
         45:7b:7d:24
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUY5oz1lcZtMQEedFX0uhTqAInxy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyMEEwQUQyMjg2RUIyNkI1RDg4N0EwRTJEQTJFNTI5
MEY3QUQ1MzAeFw0yNDA5MDMyMjM1MjBaFw0yNTA5MDIyMjQwMjBaMDMxMTAvBgNV
BAMTKEQ2MEJGQTYwNjQ3OTQ0MTk5RjQ5ODYxNDUxNjVDNjY0OEFGNUQxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntTpGW/xSgd1bKzboQ6LbVzFr
Lshe3nsD2NZV5GbDNForawFVhX45VSN0nu5iQpWJozZ7twwLAC7vVQrI3wYeUZ2I
kdpKsi0y5bM0DUN28ZCQX8QYgNekMnNBh6+mBK3RmFhx1zpNVgeNMXJ64bIID6B9
ulgOVc4WbtudEKKhjpz8FC6IxNqaVlL7TgQRpA9LAz8XRiQHbuNQjqWUwfja2UE9
J2OiCEpszYhez2qfQ14BfIksyH/WaRFBNvMDwSnIz9X9Kik9BTp1Om+1RlC2lf2G
D3x/rauNacARtVr7vJeU8lvo7biv5AvgzO7Jd6dsUZDH4ooqYX6rbxDRPMVxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU1gv6YGR5RBmfSYYUUWXGZIr10fAwHwYDVR0j
BBgwFoAUGSCgrSKG6ya12Ieg4touUpD3rVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUQ0VGh2dUJzQllHRWpKS0hYSkh0NjMyWExhNTZUbVhneHB0SllmZzZi
VEUvMC8xOTIwQTBBRDIyODZFQjI2QjVEODg3QTBFMkRBMkU1MjkwRjdBRDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjBBMEFEMjI4NkVCMjZC
NUQ4ODdBMEUyREEyRTUyOTBGN0FENTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FENFRodnVCc0JZR0VqSktIWEpIdDYzMlhMYTU2VG1YZ3hwdEpZZmc2YlRFLzAv
MzIzODMwMzQzYTMxMzIzNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBJgMA0GCSqGSIb3DQEBCwUAA4IBAQA9IcEU
MgDKWyb+b2P1spH38qo7w1RhngKgQ9w+p/qKut0RqZZeJp0W1Mzqt0BTthNXLBH4
wDcjj59aiEM/MipvduCPOuOO2mb7D81SCFMd2XFCUqv9RQZdCuEvOxE5R+pDYT5+
kmG7h7uVPmHqU58jOB9zesHgnJOC4hphciFpr2/qgl1sS4AhEh/TVUfoNL+4ZJUh
pP9Vxvdn0uefjcx2Y+P80vSbX5Cn8pGlvjnZJKSUl5aHUYXs9DqGm9Ira5+deONE
1rcK8NQQYfCiSWkV43OPcOo5IlLvxcdBO2HHiXFgsDxXyw9shxHzhbcpa8530zrO
r52e7WyUra5Fe30k
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:47 2024 by rpki-client on console-fra.rpki-client.org