Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          kM+536xmZV7xfyAt3eub+3NiBYPTTXzfX2nuyXfPdIo=
Subject key identifier:   9A:6C:A2:9F:12:93:C6:08:AC:F3:B3:E6:70:BE:6B:BB:D6:AC:F0:98
Certificate issuer:       /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial:       49C376B716042C07C7BD9527B34D401008CF8001
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
Signing time:             Tue 08 Oct 2024 13:03:04 +0000
ROA not before:           Tue 08 Oct 2024 12:58:04 +0000
ROA not after:            Tue 07 Oct 2025 13:03:04 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl
                          rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c3:76:b7:16:04:2c:07:c7:bd:95:27:b3:4d:40:10:08:cf:80:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
        Validity
            Not Before: Oct  8 12:58:04 2024 GMT
            Not After : Oct  7 13:03:04 2025 GMT
        Subject: CN=9A6CA29F1293C608ACF3B3E670BE6BBBD6ACF098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:29:61:28:43:a2:90:bd:d2:64:41:23:10:
                    e9:35:28:75:2c:e5:69:65:e6:28:40:f2:09:be:c7:
                    57:c3:9f:a2:91:be:f2:6b:69:49:79:a7:ba:69:96:
                    43:ed:22:06:6d:ca:ed:1f:31:5a:08:bb:e2:78:ae:
                    be:a9:d6:41:dc:35:56:4f:0b:a0:dd:af:fc:b7:a7:
                    04:8f:7f:8d:49:a8:ae:0c:6d:cd:68:cd:d9:7a:72:
                    ee:c0:b8:93:a2:24:27:35:81:4f:ca:1c:4a:7f:91:
                    f9:eb:19:a4:04:bc:58:a8:f2:e5:43:92:7c:82:87:
                    36:32:48:a3:07:37:7e:45:a8:6d:e6:e3:d9:26:6b:
                    78:5e:42:36:44:9d:23:c0:12:92:7a:d0:42:f8:aa:
                    03:be:d0:c2:1f:75:e6:4d:5d:7e:58:35:8a:e8:d6:
                    20:80:a1:67:df:c5:82:8c:71:2d:4e:9f:3f:c9:e5:
                    92:98:ab:12:86:4c:f5:98:a0:66:07:4d:75:6a:17:
                    81:a6:dc:0d:58:5d:26:4f:be:ee:8e:f7:58:bd:4c:
                    2b:af:f6:e1:75:b7:f3:b8:14:ea:02:b0:39:36:f2:
                    f8:33:34:a7:eb:7d:45:0f:f3:f4:03:9f:2f:42:ff:
                    d4:03:fd:97:b4:a9:f4:7c:b1:ea:6e:3b:53:14:6a:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6C:A2:9F:12:93:C6:08:AC:F3:B3:E6:70:BE:6B:BB:D6:AC:F0:98
            X509v3 Authority Key Identifier:
                keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:b0:31:f2:0b:e4:ec:31:23:79:20:0a:b3:8b:83:a0:68:4e:
         5a:f4:11:e1:ce:8a:c8:70:4e:bf:08:63:1b:07:3d:d4:b0:37:
         eb:90:b7:b0:87:f1:79:56:03:7e:57:bd:91:05:c0:16:af:b6:
         95:e6:32:d6:bd:3e:fd:36:ac:94:82:2a:ea:85:8a:8e:dc:ae:
         f3:bc:5b:82:ca:8c:38:78:42:77:64:05:91:8c:88:fa:a8:95:
         31:a3:44:9d:5f:4f:c5:85:c4:6e:ee:45:f9:b5:e7:78:c8:ad:
         30:63:94:0c:f0:47:ea:bf:c6:8d:3a:ff:c2:3e:aa:5f:7f:b9:
         79:54:41:ae:b8:f0:7b:c1:2c:fe:0c:94:ba:cb:f6:a3:c9:b1:
         7e:83:ee:a7:55:4c:52:fa:95:54:5b:df:da:c7:b2:af:5e:ee:
         0e:9d:07:cf:90:54:dc:ff:07:7e:d8:09:ef:ce:20:9e:86:a3:
         8b:a8:f7:8e:e5:eb:df:29:7b:c0:b1:89:75:cb:4c:7f:9b:ab:
         e8:dd:c5:38:65:1a:5c:79:45:bb:df:6b:b0:b7:05:e0:14:69:
         3a:35:69:c7:e7:fd:b2:9d:d6:84:03:4b:24:61:4b:af:82:52:
         ac:a7:5c:eb:58:37:fc:9d:5d:e4:24:f8:6c:44:67:43:3f:fd:
         fa:f7:15:5a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUScN2txYELAfHvZUns01AEAjPgAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk2RDU2MUQ0NjZBNTY2MzdDQ0E0RTQ5QjQzRjVBQTk5
QTNDRjg0MDAeFw0yNDEwMDgxMjU4MDRaFw0yNTEwMDcxMzAzMDRaMDMxMTAvBgNV
BAMTKDlBNkNBMjlGMTI5M0M2MDhBQ0YzQjNFNjcwQkU2QkJCRDZBQ0YwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBSlhKEOikL3SZEEjEOk1KHUs
5Wll5ihA8gm+x1fDn6KRvvJraUl5p7pplkPtIgZtyu0fMVoIu+J4rr6p1kHcNVZP
C6Ddr/y3pwSPf41JqK4Mbc1ozdl6cu7AuJOiJCc1gU/KHEp/kfnrGaQEvFio8uVD
knyChzYySKMHN35FqG3m49kma3heQjZEnSPAEpJ60EL4qgO+0MIfdeZNXX5YNYro
1iCAoWffxYKMcS1Onz/J5ZKYqxKGTPWYoGYHTXVqF4Gm3A1YXSZPvu6O91i9TCuv
9uF1t/O4FOoCsDk28vgzNKfrfUUP8/QDny9C/9QD/Ze0qfR8sepuO1MUal11AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmmyinxKTxgis87PmcL5ru9as8JgwHwYDVR0j
BBgwFoAUiW1WHUZqVmN8yk5JtD9aqZo8+EAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMC84OTZENTYxRDQ2NkE1NjYzN0NDQTRFNDlCNDNGNUFBOTlBM0NGODQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NkQ1NjFENDY2QTU2NjM3
Q0NBNEU0OUI0M0Y1QUE5OUEzQ0Y4NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzYzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARvyDANBgkqhkiG9w0BAQsFAAOCAQEAwLAx8gvk
7DEjeSAKs4uDoGhOWvQR4c6KyHBOvwhjGwc91LA365C3sIfxeVYDfle9kQXAFq+2
leYy1r0+/TaslIIq6oWKjtyu87xbgsqMOHhCd2QFkYyI+qiVMaNEnV9PxYXEbu5F
+bXneMitMGOUDPBH6r/GjTr/wj6qX3+5eVRBrrjwe8Es/gyUusv2o8mxfoPup1VM
UvqVVFvf2seyr17uDp0Hz5BU3P8HftgJ784gnoaji6j3juXr3yl7wLGJdctMf5ur
6N3FOGUaXHlFu99rsLcF4BRpOjVpx+f9sp3WhANLJGFLr4JSrKdc61g3/J1d5CT4
bERnQz/9+vcVWg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:54 2024 by rpki-client on console-fra.rpki-client.org