Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa
File:                     323830343a3663383a3a2f33322d3438203d3e20323632363036.roa (raw, json)
Hash identifier:          gtmFn0UtiD83GJlRyUZEtPBZ1nCnzs4oIJR2KMRN03Q=
Subject key identifier:   9F:D3:DE:B7:E2:6C:52:18:E8:9A:C6:77:D8:D7:28:7D:17:0B:10:BF
Certificate issuer:       /CN=D8523FD1200EADCEDDA631988A12B3199DE27864
Certificate serial:       506295A0C752B62A5E39CBD738D64C7BCE2472C7
Authority key identifier: D8:52:3F:D1:20:0E:AD:CE:DD:A6:31:98:8A:12:B3:19:9D:E2:78:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8523FD1200EADCEDDA631988A12B3199DE27864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa
Signing time:             Wed 04 Sep 2024 14:42:09 +0000
ROA not before:           Wed 04 Sep 2024 14:37:09 +0000
ROA not after:            Wed 03 Sep 2025 14:42:09 +0000
asID:                     262606
IP address blocks:        2804:6c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/D8523FD1200EADCEDDA631988A12B3199DE27864.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/D8523FD1200EADCEDDA631988A12B3199DE27864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8523FD1200EADCEDDA631988A12B3199DE27864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:62:95:a0:c7:52:b6:2a:5e:39:cb:d7:38:d6:4c:7b:ce:24:72:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8523FD1200EADCEDDA631988A12B3199DE27864
        Validity
            Not Before: Sep  4 14:37:09 2024 GMT
            Not After : Sep  3 14:42:09 2025 GMT
        Subject: CN=9FD3DEB7E26C5218E89AC677D8D7287D170B10BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:e4:b0:d4:c8:73:b5:3e:e7:66:0b:f9:de:
                    c6:c1:bb:2e:4e:d3:ec:68:f3:44:5a:a3:aa:98:2a:
                    ef:38:ea:2a:94:e0:80:5f:e8:41:57:74:0c:e4:66:
                    01:5d:a2:3c:b8:83:9a:97:07:5a:d2:03:ae:8a:95:
                    c7:df:0a:3a:4a:91:1f:e3:cb:c6:94:81:db:b9:e8:
                    d5:97:a4:02:1d:ae:12:ff:3e:9a:90:cd:c8:0a:f4:
                    12:20:fc:21:d9:6d:68:82:d8:70:1e:33:af:aa:d0:
                    60:ac:67:5e:a5:80:82:f8:2a:2a:8b:8c:a5:df:79:
                    27:95:69:0a:43:6a:40:66:95:75:f5:da:4d:77:36:
                    ce:c7:bc:57:d4:99:05:2a:a8:c4:50:8d:0f:d8:c2:
                    2a:e4:64:1d:9e:c8:70:1e:c9:e1:00:9f:e5:6e:d3:
                    28:62:5d:44:40:79:a4:3f:2a:95:59:32:c4:9d:e5:
                    7c:8d:45:8e:1c:c6:3e:96:74:0a:5a:c7:2e:61:64:
                    0b:29:2d:37:e9:1e:e9:8e:fc:db:34:68:03:55:31:
                    97:6c:11:a4:7d:da:f6:47:2f:de:96:83:71:d9:52:
                    ea:52:60:8f:b6:6f:35:e6:5f:0c:b8:41:ea:bd:96:
                    5f:ea:4c:3d:b0:dc:8e:b6:7d:63:05:f2:9c:08:e9:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D3:DE:B7:E2:6C:52:18:E8:9A:C6:77:D8:D7:28:7D:17:0B:10:BF
            X509v3 Authority Key Identifier:
                keyid:D8:52:3F:D1:20:0E:AD:CE:DD:A6:31:98:8A:12:B3:19:9D:E2:78:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/D8523FD1200EADCEDDA631988A12B3199DE27864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8523FD1200EADCEDDA631988A12B3199DE27864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:f4:da:92:e0:7d:0d:66:be:16:f4:df:f3:59:f5:3e:e3:
         90:eb:ad:19:43:07:02:c7:14:f3:6f:84:ba:9c:bb:ee:16:81:
         48:4f:ea:b9:00:f7:72:26:20:27:6e:d7:34:ab:00:89:ad:0b:
         49:35:6a:f1:6c:04:10:d8:96:6f:bd:00:c1:72:49:14:bc:af:
         ee:5d:5d:34:15:62:d9:59:0e:41:f6:ff:ef:69:d7:2c:a8:f8:
         84:96:49:2d:cf:83:7c:f0:d9:0d:2d:36:4f:e7:02:09:35:93:
         36:20:00:d9:b4:4a:36:9c:76:dd:93:1d:f0:b0:c6:37:96:60:
         78:72:1d:d3:8c:fb:9a:e2:c5:70:13:57:b0:b5:3f:a9:e5:d9:
         1e:9a:39:ae:b1:b8:1e:a2:d9:8e:dd:c8:74:bc:7e:3b:a2:6a:
         98:a5:e1:c1:71:29:26:49:0c:4c:66:ae:54:ee:9f:77:bb:f9:
         58:31:d6:9f:71:76:88:96:0e:72:97:72:d6:c2:ff:ee:99:8d:
         34:95:50:42:31:86:e5:fc:1b:11:04:14:54:42:b3:11:01:6a:
         20:41:6d:70:f0:37:54:70:08:e1:b6:5f:b6:f3:e1:df:2c:83:
         1d:15:1e:0b:ec:f4:6d:49:aa:58:33:fa:d3:13:e7:e3:23:5e:
         57:34:c1:54
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUGKVoMdStipeOcvXONZMe84kcscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1MjNGRDEyMDBFQURDRUREQTYzMTk4OEExMkIzMTk5
REUyNzg2NDAeFw0yNDA5MDQxNDM3MDlaFw0yNTA5MDMxNDQyMDlaMDMxMTAvBgNV
BAMTKDlGRDNERUI3RTI2QzUyMThFODlBQzY3N0Q4RDcyODdEMTcwQjEwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFR+Sw1MhztT7nZgv53sbBuy5O
0+xo80Rao6qYKu846iqU4IBf6EFXdAzkZgFdojy4g5qXB1rSA66KlcffCjpKkR/j
y8aUgdu56NWXpAIdrhL/PpqQzcgK9BIg/CHZbWiC2HAeM6+q0GCsZ16lgIL4KiqL
jKXfeSeVaQpDakBmlXX12k13Ns7HvFfUmQUqqMRQjQ/YwirkZB2eyHAeyeEAn+Vu
0yhiXURAeaQ/KpVZMsSd5XyNRY4cxj6WdApaxy5hZAspLTfpHumO/Ns0aANVMZds
EaR92vZHL96Wg3HZUupSYI+2bzXmXwy4Qeq9ll/qTD2w3I62fWMF8pwI6aeDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUn9Pet+JsUhjomsZ32NcofRcLEL8wHwYDVR0j
BBgwFoAU2FI/0SAOrc7dpjGYihKzGZ3ieGQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJKdGUxSGNoY0N2Z0pQcDg4d3FVM0hCZnF5Y0xNNTgzd3VSekhVTHE0
RGQvMC9EODUyM0ZEMTIwMEVBRENFRERBNjMxOTg4QTEyQjMxOTlERTI3ODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4NTIzRkQxMjAwRUFEQ0VE
REE2MzE5ODhBMTJCMzE5OURFMjc4NjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSSnRlMUhjaGNDdmdKUHA4OHdxVTNIQmZxeWNMTTU4M3d1UnpIVUxxNERkLzAv
MzIzODMwMzQzYTM2NjMzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM2
MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBsgwDQYJKoZIhvcNAQELBQADggEBAHuj9NqS4H0N
Zr4W9N/zWfU+45DrrRlDBwLHFPNvhLqcu+4WgUhP6rkA93ImICdu1zSrAImtC0k1
avFsBBDYlm+9AMFySRS8r+5dXTQVYtlZDkH2/+9p1yyo+ISWSS3Pg3zw2Q0tNk/n
Agk1kzYgANm0Sjacdt2THfCwxjeWYHhyHdOM+5rixXATV7C1P6nl2R6aOa6xuB6i
2Y7dyHS8fjuiapil4cFxKSZJDExmrlTun3e7+Vgx1p9xdoiWDnKXctbC/+6ZjTSV
UEIxhuX8GxEEFFRCsxEBaiBBbXDwN1RwCOG2X7bz4d8sgx0VHgvs9G1Jqlgz+tMT
5+MjXlc0wVQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:09 2024 by rpki-client on console-fra.rpki-client.org