Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d3336203d3e20323633383430.roa
File:                     323830343a323639343a3a2f33322d3336203d3e20323633383430.roa (raw, json)
Hash identifier:          ZjkF1pUkXBmEKQAO6ncC9SG9coykehR9f2eTUCha5/w=
Subject key identifier:   A0:3F:B2:CD:02:F2:E0:36:D0:3F:3F:7A:D8:E3:2F:C8:A0:CF:9D:FD
Certificate issuer:       /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial:       6AC3B8F9D457CBEE39193ABA9AB6D6EEC151CE23
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d3336203d3e20323633383430.roa
Signing time:             Mon 20 May 2024 14:52:57 +0000
ROA not before:           Mon 20 May 2024 14:47:57 +0000
ROA not after:            Mon 19 May 2025 14:52:57 +0000
asID:                     263840
IP address blocks:        2804:2694::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl
                          rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c3:b8:f9:d4:57:cb:ee:39:19:3a:ba:9a:b6:d6:ee:c1:51:ce:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
        Validity
            Not Before: May 20 14:47:57 2024 GMT
            Not After : May 19 14:52:57 2025 GMT
        Subject: CN=A03FB2CD02F2E036D03F3F7AD8E32FC8A0CF9DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:17:8e:ef:c0:af:21:43:e8:71:3d:d5:e6:
                    b1:2e:39:1d:a6:f9:10:85:f6:76:1f:3b:6f:af:2e:
                    a1:e2:bd:c9:26:33:f4:63:f2:c0:4c:27:80:9f:5a:
                    12:75:3d:bc:b8:34:b0:85:15:e1:bd:b8:5f:36:39:
                    98:9f:cd:44:7d:18:27:d9:d8:07:ce:28:13:5e:09:
                    fe:e0:91:f9:61:40:5e:59:2d:9a:a6:ef:22:44:26:
                    64:5f:d4:f8:de:82:72:32:9a:d9:72:aa:8b:b2:e3:
                    3d:0a:51:29:cd:34:70:2b:09:9f:34:12:bf:24:66:
                    a7:6c:e8:0e:65:09:9f:35:ea:1d:d6:a8:22:44:6f:
                    b9:c9:0c:98:bc:dd:82:9d:61:5e:9a:9f:d1:ba:40:
                    dd:61:e8:c7:c3:5f:3c:c5:ad:a7:ae:f8:d1:2f:19:
                    1e:8f:0d:54:3c:46:1f:9d:d9:68:1b:eb:93:84:67:
                    09:86:c1:cb:95:96:a0:3b:95:19:3a:9d:92:93:32:
                    f2:d9:b0:d6:35:ed:8a:26:99:a3:e9:c2:ae:70:53:
                    72:6f:eb:d6:f2:f6:97:0a:af:31:bb:32:06:3d:54:
                    4a:39:7f:a3:44:bb:62:ac:78:51:a0:b1:77:15:35:
                    f5:bc:27:28:14:b9:e1:db:7a:14:b5:a5:72:b3:17:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:B2:CD:02:F2:E0:36:D0:3F:3F:7A:D8:E3:2F:C8:A0:CF:9D:FD
            X509v3 Authority Key Identifier:
                keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d3336203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2694::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:1c:6a:7e:cb:c4:3b:91:5a:a1:60:e7:69:aa:05:42:ba:
         16:05:c2:83:5b:b5:83:57:57:35:5b:9b:e1:2e:e2:0b:5c:49:
         94:66:ae:5f:e1:61:c7:7e:8b:28:28:b4:10:db:fa:09:78:9a:
         55:52:24:71:22:d2:6f:0a:f5:fe:91:6e:d1:cd:d2:25:f8:e7:
         e2:ae:89:24:97:e1:bc:c6:96:6b:2c:65:fc:e4:97:d3:a9:a9:
         e1:6f:a4:0d:d6:cc:ce:6d:f2:1a:5b:d2:af:fa:dc:f0:54:00:
         40:11:74:89:4a:8a:82:e1:ef:e0:51:89:1e:7d:73:e0:f6:35:
         a3:2f:56:8c:38:e4:ac:93:79:2f:df:02:a4:98:60:f0:b0:c3:
         75:8a:3f:89:23:c3:8d:5c:75:e7:90:f3:ab:df:c5:da:c8:f7:
         f1:8b:a8:f5:fc:33:dd:10:9d:c5:7f:04:6b:41:6b:3c:e9:a5:
         b0:46:ea:03:62:6d:3c:31:af:1c:d0:90:bd:00:9e:c0:16:e6:
         65:43:97:77:cc:d3:b4:99:15:4e:e3:f6:92:e4:97:8d:36:cb:
         d7:e1:a7:35:04:09:59:13:ac:c6:c6:d1:e3:f3:3e:2c:14:29:
         66:53:94:b5:d9:fc:63:0f:4b:ec:d4:79:94:77:8a:35:f4:5d:
         e5:4d:1a:f6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUasO4+dRXy+45GTq6mrbW7sFRziMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBB
OERGNUJGRTAeFw0yNDA1MjAxNDQ3NTdaFw0yNTA1MTkxNDUyNTdaMDMxMTAvBgNV
BAMTKEEwM0ZCMkNEMDJGMkUwMzZEMDNGM0Y3QUQ4RTMyRkM4QTBDRjlERkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcReO78CvIUPocT3V5rEuOR2m
+RCF9nYfO2+vLqHivckmM/Rj8sBMJ4CfWhJ1Pby4NLCFFeG9uF82OZifzUR9GCfZ
2AfOKBNeCf7gkflhQF5ZLZqm7yJEJmRf1PjegnIymtlyqouy4z0KUSnNNHArCZ80
Er8kZqds6A5lCZ816h3WqCJEb7nJDJi83YKdYV6an9G6QN1h6MfDXzzFraeu+NEv
GR6PDVQ8Rh+d2Wgb65OEZwmGwcuVlqA7lRk6nZKTMvLZsNY17YommaPpwq5wU3Jv
69by9pcKrzG7MgY9VEo5f6NEu2KseFGgsXcVNfW8JygUueHbehS1pXKzF111AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoD+yzQLy4DbQPz962OMvyKDPnf0wHwYDVR0j
BBgwFoAUtlJ8tqOxK5+ash3MsFC1kKjfW/4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Bb0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERW
LzAvQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBBOERGNUJGRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjUyN0NCNkEzQjEyQjlGOUFC
MjFEQ0NCMDUwQjU5MEE4REY1QkZFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
b0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERWLzAvMzIz
ODMwMzQzYTMyMzYzOTM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjMzMzgz
NDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQmlDANBgkqhkiG9w0BAQsFAAOCAQEAfUgcan7LxDuR
WqFg52mqBUK6FgXCg1u1g1dXNVub4S7iC1xJlGauX+Fhx36LKCi0ENv6CXiaVVIk
cSLSbwr1/pFu0c3SJfjn4q6JJJfhvMaWayxl/OSX06mp4W+kDdbMzm3yGlvSr/rc
8FQAQBF0iUqKguHv4FGJHn1z4PY1oy9WjDjkrJN5L98CpJhg8LDDdYo/iSPDjVx1
55Dzq9/F2sj38Yuo9fwz3RCdxX8Ea0FrPOmlsEbqA2JtPDGvHNCQvQCewBbmZUOX
d8zTtJkVTuP2kuSXjTbL1+GnNQQJWROsxsbR4/M+LBQpZlOUtdn8Yw9L7NR5lHeK
NfRd5U0a9g==
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:15 2024 by rpki-client on console-ams.rpki-client.org