Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/323830343a363234303a3a2f33322d3438203d3e20323639323836.roa
File:                     323830343a363234303a3a2f33322d3438203d3e20323639323836.roa (raw, json)
Hash identifier:          jbLX2V8GCiwXq58Q9qsaoDNTVc4YQNoEyEqHVpgSJNw=
Subject key identifier:   60:C6:20:FD:97:38:C5:2F:40:05:68:82:1E:35:FE:D7:28:66:CB:43
Certificate issuer:       /CN=98EA20A009301C2358E08E395002F34F079AC9D0
Certificate serial:       2F155A8AE2AEF0F52B13A0FC2249C16997FB0AC8
Authority key identifier: 98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/323830343a363234303a3a2f33322d3438203d3e20323639323836.roa
Signing time:             Thu 04 Apr 2024 01:06:07 +0000
ROA not before:           Thu 04 Apr 2024 01:01:07 +0000
ROA not after:            Thu 03 Apr 2025 01:06:07 +0000
asID:                     269286
IP address blocks:        2804:6240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl
                          rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:15:5a:8a:e2:ae:f0:f5:2b:13:a0:fc:22:49:c1:69:97:fb:0a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98EA20A009301C2358E08E395002F34F079AC9D0
        Validity
            Not Before: Apr  4 01:01:07 2024 GMT
            Not After : Apr  3 01:06:07 2025 GMT
        Subject: CN=60C620FD9738C52F400568821E35FED72866CB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:09:0f:41:f4:65:d2:09:f6:0b:6d:e5:a7:
                    21:5a:ef:50:c9:2e:f5:a9:60:8b:39:14:8c:5a:dc:
                    6f:52:07:81:72:a4:4e:64:9d:d3:71:da:be:c1:b8:
                    02:01:76:fe:38:f1:26:6a:25:ae:da:67:ae:db:61:
                    72:61:02:f9:dd:92:16:9a:b9:4c:cf:d7:e8:91:91:
                    ad:06:4d:76:58:2f:fe:49:60:5a:f1:a9:af:97:c6:
                    3f:70:59:3e:97:f8:0d:a3:3f:9d:94:ed:8d:37:37:
                    00:89:77:8d:e7:e7:c7:4b:0f:12:b0:e6:59:53:3b:
                    9e:b2:17:a3:ee:4d:a3:38:ea:f5:1a:d4:ef:7e:5d:
                    46:61:c4:32:f2:de:03:37:32:07:df:0d:c8:c1:be:
                    3a:83:0f:07:07:47:39:39:4d:4b:13:cc:1f:70:7c:
                    1e:aa:2f:f8:e2:67:13:e6:d8:29:64:6d:86:cc:3b:
                    85:72:92:3f:5b:c6:19:fa:ac:08:1b:05:c5:5b:c9:
                    35:5e:e6:a4:f0:f2:22:44:16:62:d7:12:12:fc:a1:
                    cb:be:88:e2:1f:ed:47:86:60:e0:31:dc:3d:b5:18:
                    19:0a:89:67:ba:db:aa:3a:82:19:a5:cc:a5:8f:d9:
                    a7:ad:a5:ba:45:cd:8c:6c:05:15:b2:87:de:5f:4c:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C6:20:FD:97:38:C5:2F:40:05:68:82:1E:35:FE:D7:28:66:CB:43
            X509v3 Authority Key Identifier:
                keyid:98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/323830343a363234303a3a2f33322d3438203d3e20323639323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6240::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:02:62:41:57:a8:5c:7b:ce:1c:66:77:ec:3d:3c:94:e0:
         a1:57:ac:9c:a7:93:c1:0b:97:fc:32:74:e5:66:46:91:93:1e:
         91:32:a7:d7:ea:10:95:5a:49:6d:49:c7:0c:17:ac:d3:cf:21:
         01:1e:88:c7:f9:aa:96:97:ec:7a:d9:53:13:c1:7f:9e:b9:ae:
         b9:c7:6f:b2:b3:43:95:b2:b0:68:5e:96:60:bf:44:a8:52:23:
         94:39:d6:fd:f1:8a:e2:ad:d8:52:3e:a0:4c:34:b1:34:ad:2b:
         b1:a6:0d:9f:9f:4f:44:6f:b9:e3:29:b8:c5:9f:3a:bc:c1:d2:
         c2:d2:12:99:88:62:26:8e:57:f9:32:bb:38:4c:e0:35:06:66:
         32:ea:fe:b6:96:db:77:85:6d:36:00:53:89:51:46:7d:e7:db:
         d6:d3:27:a7:ca:ce:bb:e0:e0:34:f1:65:4f:a3:80:da:33:5d:
         26:10:58:f6:b7:ff:92:1b:3b:eb:7a:47:0d:4a:3a:0b:74:23:
         4e:ec:2e:a5:c5:0e:9b:70:2e:58:b1:40:53:e2:3d:4c:11:bc:
         2e:82:7c:95:67:d7:33:33:5f:37:d2:06:ff:40:6a:9f:bd:da:
         9b:d4:cc:bb:c6:01:21:bc:0f:d0:28:a9:c3:cb:90:72:47:a0:
         bb:4c:ae:b0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULxVaiuKu8PUrE6D8IknBaZf7CsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThFQTIwQTAwOTMwMUMyMzU4RTA4RTM5NTAwMkYzNEYw
NzlBQzlEMDAeFw0yNDA0MDQwMTAxMDdaFw0yNTA0MDMwMTA2MDdaMDMxMTAvBgNV
BAMTKDYwQzYyMEZEOTczOEM1MkY0MDA1Njg4MjFFMzVGRUQ3Mjg2NkNCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCgkPQfRl0gn2C23lpyFa71DJ
LvWpYIs5FIxa3G9SB4FypE5kndNx2r7BuAIBdv448SZqJa7aZ67bYXJhAvndkhaa
uUzP1+iRka0GTXZYL/5JYFrxqa+Xxj9wWT6X+A2jP52U7Y03NwCJd43n58dLDxKw
5llTO56yF6PuTaM46vUa1O9+XUZhxDLy3gM3MgffDcjBvjqDDwcHRzk5TUsTzB9w
fB6qL/jiZxPm2ClkbYbMO4Vykj9bxhn6rAgbBcVbyTVe5qTw8iJEFmLXEhL8ocu+
iOIf7UeGYOAx3D21GBkKiWe626o6ghmlzKWP2aetpbpFzYxsBRWyh95fTCR/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYMYg/Zc4xS9ABWiCHjX+1yhmy0MwHwYDVR0j
BBgwFoAUmOogoAkwHCNY4I45UALzTweaydAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVpWY1ZIS282S3ExQWIyYTI5SGVnNU5zcTZlTTllTXlBNDE3aDc1SDRr
N2kvMS85OEVBMjBBMDA5MzAxQzIzNThFMDhFMzk1MDAyRjM0RjA3OUFDOUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RUEyMEEwMDkzMDFDMjM1
OEUwOEUzOTUwMDJGMzRGMDc5QUM5RDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FaVmNWSEtvNktxMUFiMmEyOUhlZzVOc3E2ZU05ZU15QTQxN2g3NUg0azdpLzEv
MzIzODMwMzQzYTM2MzIzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARiQDANBgkqhkiG9w0BAQsFAAOCAQEAXZICYkFX
qFx7zhxmd+w9PJTgoVesnKeTwQuX/DJ05WZGkZMekTKn1+oQlVpJbUnHDBes088h
AR6Ix/mqlpfsetlTE8F/nrmuucdvsrNDlbKwaF6WYL9EqFIjlDnW/fGK4q3YUj6g
TDSxNK0rsaYNn59PRG+54ym4xZ86vMHSwtISmYhiJo5X+TK7OEzgNQZmMur+tpbb
d4VtNgBTiVFGfefb1tMnp8rOu+DgNPFlT6OA2jNdJhBY9rf/khs763pHDUo6C3Qj
TuwupcUOm3AuWLFAU+I9TBG8LoJ8lWfXMzNfN9IG/0Bqn73am9TMu8YBIbwP0Cip
w8uQckegu0yusA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:16 2024 by rpki-client on console-ams.rpki-client.org