Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/323830343a376431383a3a2f33322d3334203d3e20323731353338.roa
File:                     323830343a376431383a3a2f33322d3334203d3e20323731353338.roa (raw, json)
Hash identifier:          +b9f+/ar67P+nsfxTIG+p6nT9iTkP1AnzvgNsTm9Mrc=
Subject key identifier:   64:19:45:40:D0:FA:82:F1:AE:44:3C:29:BE:E1:8B:FB:F6:43:75:2B
Certificate issuer:       /CN=46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED
Certificate serial:       66CF83C542204CFD8849A03B3609112246316E31
Authority key identifier: 46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/323830343a376431383a3a2f33322d3334203d3e20323731353338.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     271538
IP address blocks:        2804:7d18::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.crl
                          rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cf:83:c5:42:20:4c:fd:88:49:a0:3b:36:09:11:22:46:31:6e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:39:d3:c0:3e:fb:36:c9:9f:02:20:ee:7e:
                    0f:3f:93:6b:58:2d:75:cf:47:2d:c9:e1:58:2b:7e:
                    02:0f:06:ef:5d:f9:1f:84:c5:6c:c0:80:a0:6f:e0:
                    6c:c2:b0:01:2f:98:80:6e:32:1e:d3:52:5d:e8:fc:
                    b0:51:3d:f8:fc:5a:63:f9:bb:e5:43:9c:55:f0:27:
                    c1:fe:12:fa:13:7b:1e:b5:f6:c0:5b:40:5f:62:ce:
                    07:b0:56:7c:77:d1:ce:be:51:13:13:58:24:22:90:
                    b1:d7:cb:63:e5:7d:e2:29:ab:9f:7f:49:c4:b0:57:
                    80:6a:6e:04:72:c3:e8:c1:22:26:1b:02:44:b0:68:
                    60:00:f0:50:f7:78:d9:13:9d:35:b2:bb:1b:65:ff:
                    ff:90:af:a2:a3:b3:29:84:07:a6:90:31:d2:01:77:
                    f1:91:c5:99:51:5a:80:dc:df:89:bb:36:f1:26:d0:
                    28:22:bb:e9:6f:80:d6:ea:ce:05:54:5c:8c:09:f2:
                    fe:19:c5:e5:57:47:eb:9c:df:d4:20:cd:66:5b:c3:
                    45:b2:b7:27:57:76:7a:71:5d:a0:92:40:64:49:2f:
                    45:27:bd:3b:e9:16:7e:1b:de:a6:cf:95:77:5d:3e:
                    d1:21:1f:5d:8a:f2:89:46:77:b9:9d:d0:e9:02:35:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:19:45:40:D0:FA:82:F1:AE:44:3C:29:BE:E1:8B:FB:F6:43:75:2B
            X509v3 Authority Key Identifier:
                keyid:46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/323830343a376431383a3a2f33322d3334203d3e20323731353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:31:c7:7a:01:f9:ab:a5:f8:7a:a8:48:36:af:53:56:57:5c:
         12:1c:d6:21:42:f9:df:b1:ee:62:e2:2d:0c:f2:a3:b8:ab:e7:
         c4:0d:fb:5f:17:0e:b9:2f:80:7c:ce:87:d4:e8:bd:12:b2:0a:
         c3:35:26:e2:cc:7a:01:2a:55:56:e3:e0:1f:c7:12:e5:a0:eb:
         fc:39:1d:07:6e:f8:67:38:29:b7:33:71:d9:87:c1:6d:37:04:
         d8:b3:d2:d4:d1:92:54:13:e4:fa:9e:a1:5b:1e:ad:fe:7d:b2:
         63:40:b6:2a:89:aa:ab:d7:28:b9:be:a7:46:79:fa:01:ea:94:
         2f:0a:e1:a5:f3:d7:fb:d0:58:cf:cf:53:8e:d3:35:b2:dd:c2:
         05:e7:d8:64:52:4e:d2:e4:c8:c0:fe:65:09:1e:02:93:47:39:
         26:85:15:48:e7:23:fb:75:68:32:95:9c:f8:f3:b6:50:83:f7:
         d1:1c:4f:d5:a4:d7:3d:a8:d8:c7:da:88:8a:08:6a:22:ed:6d:
         bc:49:cc:3a:d8:42:02:93:27:66:52:70:1a:5c:87:2e:c0:c2:
         3e:22:68:d2:ec:4e:7c:b3:67:92:69:20:64:6e:d5:46:9d:31:
         97:fc:0d:3a:ae:2b:93:39:4e:e0:2f:04:e8:40:f5:3c:ad:9f:
         52:1b:50:ac
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUZs+DxUIgTP2ISaA7NgkRIkYxbjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZCNjFCQzRFMkI0MkNDMTFGMEM1RkRCMkUyQkE4NUMz
NTk0Q0ZFRDAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjU1MzM5RDNDMDNFRkIzNkM5
OUYwMjIwRUU3RTBGM0Y5MzZCNTgyRDc1Q0Y0NzJEQzlFMTU4MkI3RTAyMEYwNkVG
NURGOTFGODRDNTZDQzA4MEEwNkZFMDZDQzJCMDAxMkY5ODgwNkUzMjFFRDM1MjVE
RThGQ0IwNTEzREY4RkM1QTYzRjlCQkU1NDM5QzU1RjAyN0MxRkUxMkZBMTM3QjFF
QjVGNkMwNUI0MDVGNjJDRTA3QjA1NjdDNzdEMUNFQkU1MTEzMTM1ODI0MjI5MEIx
RDdDQjYzRTU3REUyMjlBQjlGN0Y0OUM0QjA1NzgwNkE2RTA0NzJDM0U4QzEyMjI2
MUIwMjQ0QjA2ODYwMDBGMDUwRjc3OEQ5MTM5RDM1QjJCQjFCNjVGRkZGOTBBRkEy
QTNCMzI5ODQwN0E2OTAzMUQyMDE3N0YxOTFDNTk5NTE1QTgwRENERjg5QkIzNkYx
MjZEMDI4MjJCQkU5NkY4MEQ2RUFDRTA1NTQ1QzhDMDlGMkZFMTlDNUU1NTc0N0VC
OUNERkQ0MjBDRDY2NUJDMzQ1QjJCNzI3NTc3NjdBNzE1REEwOTI0MDY0NDkyRjQ1
MjdCRDNCRTkxNjdFMUJERUE2Q0Y5NTc3NUQzRUQxMjExRjVEOEFGMjg5NDY3N0I5
OUREMEU5MDIzNURCMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtVM508A++zbJnwIg7n4PP5NrWC11z0ctyeFYK34CDwbvXfkfhMVs
wICgb+BswrABL5iAbjIe01Jd6PywUT34/Fpj+bvlQ5xV8CfB/hL6E3setfbAW0Bf
Ys4HsFZ8d9HOvlETE1gkIpCx18tj5X3iKauff0nEsFeAam4EcsPowSImGwJEsGhg
APBQ93jZE501srsbZf//kK+io7MphAemkDHSAXfxkcWZUVqA3N+JuzbxJtAoIrvp
b4DW6s4FVFyMCfL+GcXlV0frnN/UIM1mW8NFsrcnV3Z6cV2gkkBkSS9FJ7076RZ+
G96mz5V3XT7RIR9divKJRne5ndDpAjXbAQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FGQZRUDQ+oLxrkQ8Kb7hi/v2Q3UrMB8GA1UdIwQYMBaAFEa2G8TitCzBHwxf2y4r
qFw1lM/tMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RxQ1VnM0Vaa0pZeWVG
WHhQV1RUUkpTaGFCTG5EMmNRUDl5WjlrZTZyem1OLzEvNDZCNjFCQzRFMkI0MkND
MTFGMEM1RkRCMkUyQkE4NUMzNTk0Q0ZFRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80NkI2MUJDNEUyQjQyQ0MxMUYwQzVGREIyRTJCQTg1QzM1OTRD
RkVELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EcUNVZzNFWmtKWXllRlh4UFdU
VFJKU2hhQkxuRDJjUVA5eVo5a2U2cnptTi8xLzMyMzgzMDM0M2EzNzY0MzEzODNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMTM1MzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
fRgwDQYJKoZIhvcNAQELBQADggEBAMYxx3oB+aul+HqoSDavU1ZXXBIc1iFC+d+x
7mLiLQzyo7ir58QN+18XDrkvgHzOh9TovRKyCsM1JuLMegEqVVbj4B/HEuWg6/w5
HQdu+Gc4KbczcdmHwW03BNiz0tTRklQT5PqeoVserf59smNAtiqJqqvXKLm+p0Z5
+gHqlC8K4aXz1/vQWM/PU47TNbLdwgXn2GRSTtLkyMD+ZQkeApNHOSaFFUjnI/t1
aDKVnPjztlCD99EcT9Wk1z2o2MfaiIoIaiLtbbxJzDrYQgKTJ2ZScBpchy7Awj4i
aNLsTnyzZ5JpIGRu1UadMZf8DTquK5M5TuAvBOhA9Tytn1IbUKw=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:02 2024 by rpki-client on console-fra.rpki-client.org