Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33332d3333203d3e20323639343136.roa
File:                     323830343a363434303a3a2f33332d3333203d3e20323639343136.roa (raw, json)
Hash identifier:          dsj3arDd4Dly13bZ0GDmbVqBCY1DEYK+wQOpHSNmXUA=
Subject key identifier:   1A:E8:2E:19:D5:37:15:0D:B0:B1:D8:4B:B3:F8:96:7D:E4:80:AB:F2
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       3320B1DC4387471AF843CACC4C55940B1D0E1E98
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33332d3333203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:52 +0000
ROA not before:           Wed 30 Oct 2024 14:57:52 +0000
ROA not after:            Wed 29 Oct 2025 15:02:52 +0000
asID:                     269416
IP address blocks:        2804:6440::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:b1:dc:43:87:47:1a:f8:43:ca:cc:4c:55:94:0b:1d:0e:1e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:52 2024 GMT
            Not After : Oct 29 15:02:52 2025 GMT
        Subject: CN=1AE82E19D537150DB0B1D84BB3F8967DE480ABF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:23:a0:cc:80:41:57:84:42:50:df:30:cc:
                    b4:66:80:77:98:35:a1:ba:71:35:62:b7:f6:3c:04:
                    5d:2c:2c:09:76:3e:56:41:4c:3b:bb:4f:b6:45:db:
                    fe:27:39:c7:ca:10:e8:97:bf:0d:ea:fa:f2:2d:b1:
                    8d:98:3f:5d:f7:d5:3f:70:7d:03:b5:3e:17:99:d5:
                    58:67:01:14:79:5b:0f:c1:1f:ce:81:80:7d:ec:67:
                    e0:2d:ff:76:17:72:4a:4d:d8:45:59:3e:e9:87:f5:
                    80:a5:b9:16:a0:e5:5d:c6:56:d4:d7:b1:b7:24:09:
                    aa:af:65:cb:b8:85:15:5c:0c:81:bf:b7:37:6e:69:
                    63:33:2e:67:4f:d5:29:55:94:2e:54:c8:e0:5c:fd:
                    26:9e:4a:ab:3f:31:64:45:a5:ef:f0:45:ac:df:87:
                    d4:1b:b0:be:b5:a0:81:bf:f2:e5:44:74:2f:04:23:
                    11:73:f7:77:a3:a7:61:0c:98:19:5e:d4:5d:b2:cb:
                    6a:c0:1e:71:7e:e0:87:97:29:4c:2e:f7:6d:d3:17:
                    6a:0f:8e:3d:fd:9a:f6:b0:b8:9d:a6:12:0b:6d:b3:
                    e6:85:14:99:2e:66:0a:37:32:73:a3:83:12:52:fa:
                    42:4b:41:f3:83:84:da:c4:fa:5a:fe:96:ec:34:32:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E8:2E:19:D5:37:15:0D:B0:B1:D8:4B:B3:F8:96:7D:E4:80:AB:F2
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33332d3333203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:56:ee:0e:30:fc:12:de:1a:bb:41:ee:77:7e:63:c5:b3:a3:
         de:ad:d9:12:4e:fe:79:46:45:07:b2:67:9b:95:e4:85:db:0a:
         99:09:e2:7e:b5:b4:d9:37:14:53:d4:e0:21:52:9d:46:35:ae:
         97:5f:9d:f0:c7:ec:87:b4:2e:bb:e0:49:58:60:68:18:27:17:
         8f:81:9b:e4:15:3f:4c:67:1b:62:93:64:4e:7c:72:77:13:55:
         b6:76:52:43:c7:e0:88:f1:58:ce:cf:1d:50:b4:87:18:bd:4b:
         0d:94:1e:b4:01:b1:e1:b7:49:53:31:6b:02:b9:4e:5e:d9:de:
         a7:a9:0d:c4:04:ac:f7:79:d8:69:ab:66:6c:e7:f4:17:86:13:
         6e:45:92:8a:8f:89:0d:24:41:9a:d5:62:64:cd:86:aa:ac:b6:
         43:37:1a:73:b3:a7:1b:b6:0a:4b:a5:c6:7e:f5:a5:cd:49:b2:
         39:ea:8b:04:ca:7c:7e:ba:e1:19:e6:8a:e5:8e:ea:8f:c1:15:
         06:bb:57:84:be:43:81:1c:ef:ee:91:1f:f0:0c:e0:09:71:4b:
         0a:69:c3:bc:0d:e9:fe:78:f8:82:bc:f0:35:15:32:66:81:e2:
         e1:f9:37:3c:ef:4d:d1:52:29:a8:db:07:43:0b:d5:f0:55:46:
         57:37:fe:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMyCx3EOHRxr4Q8rMTFWUCx0OHpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMUI5MUIyNDk4RjAxQzI1QzAwOUM5MzQ1RUU2MjJC
MTU1MTAwQjAeFw0yNDEwMzAxNDU3NTJaFw0yNTEwMjkxNTAyNTJaMDMxMTAvBgNV
BAMTKDFBRTgyRTE5RDUzNzE1MERCMEIxRDg0QkIzRjg5NjdERTQ4MEFCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTCOgzIBBV4RCUN8wzLRmgHeY
NaG6cTVit/Y8BF0sLAl2PlZBTDu7T7ZF2/4nOcfKEOiXvw3q+vItsY2YP1331T9w
fQO1PheZ1VhnARR5Ww/BH86BgH3sZ+At/3YXckpN2EVZPumH9YCluRag5V3GVtTX
sbckCaqvZcu4hRVcDIG/tzduaWMzLmdP1SlVlC5UyOBc/SaeSqs/MWRFpe/wRazf
h9QbsL61oIG/8uVEdC8EIxFz93ejp2EMmBle1F2yy2rAHnF+4IeXKUwu923TF2oP
jj39mvawuJ2mEgtts+aFFJkuZgo3MnOjgxJS+kJLQfODhNrE+lr+luw0MnxDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGuguGdU3FQ2wsdhLs/iWfeSAq/IwHwYDVR0j
BBgwFoAUJDG5GySY8BwlwAnJNF7mIrFVEAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhVWDM1Wk1VQ2JSaFl1RUNMUXVRaXlpcUNYNHo5THZSaXJKdzNiQlV3
eVgvMC8yNDMxQjkxQjI0OThGMDFDMjVDMDA5QzkzNDVFRTYyMkIxNTUxMDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCOTFCMjQ5OEYwMUMy
NUMwMDlDOTM0NUVFNjIyQjE1NTEwMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoVVgzNVpNVUNiUmhZdUVDTFF1UWl5aXFDWDR6OUx2UmlySnczYkJVd3lYLzAv
MzIzODMwMzQzYTM2MzQzNDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARkQAAwDQYJKoZIhvcNAQELBQADggEBAKZW7g4w
/BLeGrtB7nd+Y8Wzo96t2RJO/nlGRQeyZ5uV5IXbCpkJ4n61tNk3FFPU4CFSnUY1
rpdfnfDH7Ie0LrvgSVhgaBgnF4+Bm+QVP0xnG2KTZE58cncTVbZ2UkPH4IjxWM7P
HVC0hxi9Sw2UHrQBseG3SVMxawK5Tl7Z3qepDcQErPd52GmrZmzn9BeGE25FkoqP
iQ0kQZrVYmTNhqqstkM3GnOzpxu2Ckulxn71pc1JsjnqiwTKfH664RnmiuWO6o/B
FQa7V4S+Q4Ec7+6RH/AM4AlxSwppw7wN6f54+IK88DUVMmaB4uH5NzzvTdFSKajb
B0ML1fBVRlc3/lo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:53 2024 by rpki-client on console-fra.rpki-client.org