Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa
File:                     323830343a3663343a3a2f33362d313238203d3e20323632383933.roa (raw, json)
Hash identifier:          GT92ZRZ2XmFNzEu15HNTDI3uT0hgr9JmGv+RPhzmi/E=
Subject key identifier:   F3:18:9C:31:71:95:9F:CD:C2:D7:C6:FF:2B:0C:14:D0:A0:1A:C7:12
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       0DE8C5C5BC9AE63EFA29797A6ED6D7B67BD02BA9
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa
Signing time:             Fri 05 Apr 2024 04:37:28 +0000
ROA not before:           Fri 05 Apr 2024 04:32:28 +0000
ROA not after:            Fri 04 Apr 2025 04:37:28 +0000
asID:                     262893
IP address blocks:        2804:6c4::/36 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e8:c5:c5:bc:9a:e6:3e:fa:29:79:7a:6e:d6:d7:b6:7b:d0:2b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Apr  5 04:32:28 2024 GMT
            Not After : Apr  4 04:37:28 2025 GMT
        Subject: CN=F3189C3171959FCDC2D7C6FF2B0C14D0A01AC712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:f0:78:a2:7a:2c:ac:96:60:de:70:00:1d:
                    b4:c1:b2:a9:a5:19:c0:46:ca:d8:37:ed:18:f7:03:
                    02:1d:c5:36:51:52:03:a4:14:2f:39:ed:02:1b:e4:
                    89:40:31:b1:44:20:25:ff:b1:c0:41:48:09:10:fb:
                    2d:83:36:0e:fa:d6:95:22:d5:f8:76:a2:0e:cd:d4:
                    7b:41:c2:9f:6a:8a:e9:2b:30:84:b4:c5:00:c5:3c:
                    f8:95:1e:58:1f:35:bf:b9:c4:e5:8b:02:4f:6a:44:
                    98:a6:fb:51:d8:c6:07:7f:50:86:ae:cc:8a:f2:f0:
                    09:e2:3a:64:c5:5e:6b:f3:d1:37:0f:ab:d1:f1:5a:
                    45:f7:f1:86:09:54:a0:26:58:40:94:a5:98:dc:36:
                    04:c5:54:86:f0:33:e2:e6:d5:fc:b4:fb:76:4a:aa:
                    b7:3e:d8:ab:bd:16:2e:3a:ec:b2:a1:ef:c8:2f:d0:
                    01:e1:57:2b:77:d7:7c:5f:db:07:aa:bc:97:98:fe:
                    5f:9e:50:1a:17:82:06:30:b8:09:97:67:5f:bf:42:
                    2c:25:29:06:93:6e:a3:45:bc:ac:07:ce:e5:85:78:
                    0f:0b:7e:aa:c5:48:d8:c4:70:7e:d3:d8:65:81:0a:
                    40:16:48:ca:5d:f4:9c:28:65:9a:e0:c0:fe:4a:86:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:9C:31:71:95:9F:CD:C2:D7:C6:FF:2B:0C:14:D0:A0:1A:C7:12
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c4::/36

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:c6:5b:ae:64:46:16:c8:99:70:b1:16:23:3a:4b:10:13:
         7c:3a:c9:5e:89:f1:29:1f:6a:11:90:ed:b7:c3:02:e9:40:87:
         c4:44:0a:10:cd:df:1f:ff:fc:ef:3f:81:a1:1d:c2:9f:73:52:
         12:0b:d7:df:34:96:48:15:2b:23:33:10:27:5a:22:d9:01:7a:
         87:9e:17:bf:05:7e:57:9c:78:77:b1:c3:09:d8:91:6c:b9:b5:
         5f:73:6b:17:3e:8b:dc:cf:d3:da:71:ba:a6:6f:fd:20:6f:15:
         e3:ad:15:d7:84:da:77:91:67:59:82:90:df:a7:98:5b:93:d7:
         ba:58:7e:ea:db:1e:74:18:d2:a2:2b:83:44:8e:62:9b:80:f3:
         74:5e:33:65:bd:44:5b:3f:94:39:54:ab:f9:d1:be:9e:d1:1d:
         a3:7f:c3:68:41:52:6c:c0:10:ce:f6:ca:dc:d9:c4:53:66:11:
         e5:54:84:ae:2a:ba:95:dd:82:41:bf:c4:3f:d4:b8:51:42:51:
         3f:09:b4:09:c3:92:16:87:03:10:c7:9f:06:4d:8d:1e:11:f0:
         20:35:95:a1:88:52:39:52:b9:04:de:ba:85:f3:1a:48:77:cb:
         76:19:02:f0:5e:2a:0f:45:8b:fe:83:91:a7:22:6d:83:5c:bc:
         7b:b3:33:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDejFxbya5j76KXl6btbXtnvQK6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlCMzUwODFFMDY0NTYzNUFENEQ4QkU3MEUzNEYwMzU5
MTBGQjc2NDAeFw0yNDA0MDUwNDMyMjhaFw0yNTA0MDQwNDM3MjhaMDMxMTAvBgNV
BAMTKEYzMTg5QzMxNzE5NTlGQ0RDMkQ3QzZGRjJCMEMxNEQwQTAxQUM3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8efB4onosrJZg3nAAHbTBsqml
GcBGytg37Rj3AwIdxTZRUgOkFC857QIb5IlAMbFEICX/scBBSAkQ+y2DNg761pUi
1fh2og7N1HtBwp9qiukrMIS0xQDFPPiVHlgfNb+5xOWLAk9qRJim+1HYxgd/UIau
zIry8AniOmTFXmvz0TcPq9HxWkX38YYJVKAmWECUpZjcNgTFVIbwM+Lm1fy0+3ZK
qrc+2Ku9Fi467LKh78gv0AHhVyt313xf2weqvJeY/l+eUBoXggYwuAmXZ1+/Qiwl
KQaTbqNFvKwHzuWFeA8LfqrFSNjEcH7T2GWBCkAWSMpd9JwoZZrgwP5KhkANAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8xicMXGVn83C18b/KwwU0KAaxxIwHwYDVR0j
BBgwFoAUmbNQgeBkVjWtTYvnDjTwNZEPt2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU1GRm5vcGdkR0xjM0hRcTM1Sk1ZcFVNRkhEU01reUFLOFNrSzFZdjI3
bzcvMS85OUIzNTA4MUUwNjQ1NjM1QUQ0RDhCRTcwRTM0RjAzNTkxMEZCNzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QjM1MDgxRTA2NDU2MzVB
RDREOEJFNzBFMzRGMDM1OTEwRkI3NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FNRkZub3BnZEdMYzNIUXEzNUpNWXBVTUZIRFNNa3lBSzhTa0sxWXYyN283LzEv
MzIzODMwMzQzYTM2NjMzNDNhM2EyZjMzMzYyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzgzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKAQGxAAwDQYJKoZIhvcNAQELBQADggEBALBfxluu
ZEYWyJlwsRYjOksQE3w6yV6J8SkfahGQ7bfDAulAh8REChDN3x///O8/gaEdwp9z
UhIL1980lkgVKyMzECdaItkBeoeeF78FfleceHexwwnYkWy5tV9zaxc+i9zP09px
uqZv/SBvFeOtFdeE2neRZ1mCkN+nmFuT17pYfurbHnQY0qIrg0SOYpuA83ReM2W9
RFs/lDlUq/nRvp7RHaN/w2hBUmzAEM72ytzZxFNmEeVUhK4qupXdgkG/xD/UuFFC
UT8JtAnDkhaHAxDHnwZNjR4R8CA1laGIUjlSuQTeuoXzGkh3y3YZAvBeKg9Fi/6D
kacibYNcvHuzM58=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org