Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/323830343a343465633a3a2f33322d3438203d3e20323637363631.roa
File:                     323830343a343465633a3a2f33322d3438203d3e20323637363631.roa (raw, json)
Hash identifier:          cj+u3D64gjauaksTIn8LZyLgB4UfNcswz9tlOO5eTzs=
Subject key identifier:   9D:A5:EA:8C:B6:14:62:4C:CA:CF:3A:84:1F:C2:2B:8A:F5:01:D6:0E
Certificate issuer:       /CN=B6D80FE3D906262A28CF60595613CE6FB40B607C
Certificate serial:       753C3550CDED5933EB305BFBE108D6FBF778C668
Authority key identifier: B6:D8:0F:E3:D9:06:26:2A:28:CF:60:59:56:13:CE:6F:B4:0B:60:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D80FE3D906262A28CF60595613CE6FB40B607C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/323830343a343465633a3a2f33322d3438203d3e20323637363631.roa
Signing time:             Fri 15 Nov 2024 00:20:18 +0000
ROA not before:           Fri 15 Nov 2024 00:15:18 +0000
ROA not after:            Fri 14 Nov 2025 00:20:18 +0000
asID:                     267661
IP address blocks:        2804:44ec::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.crl
                          rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D80FE3D906262A28CF60595613CE6FB40B607C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3c:35:50:cd:ed:59:33:eb:30:5b:fb:e1:08:d6:fb:f7:78:c6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D80FE3D906262A28CF60595613CE6FB40B607C
        Validity
            Not Before: Nov 15 00:15:18 2024 GMT
            Not After : Nov 14 00:20:18 2025 GMT
        Subject: CN=9DA5EA8CB614624CCACF3A841FC22B8AF501D60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:18:19:aa:37:ee:87:af:a5:11:2d:16:30:
                    f6:f5:7d:c3:a7:7a:ec:4f:59:05:e0:48:41:57:39:
                    51:e6:5f:12:e0:60:04:4f:ae:31:d7:ce:a3:0b:ef:
                    54:6a:66:17:bd:a0:e7:79:b2:84:34:d8:12:44:9e:
                    88:10:e7:8a:23:6b:8e:fb:ac:97:30:f8:fb:1d:95:
                    c0:2f:b5:19:8e:51:a0:fa:6f:18:43:20:eb:d4:a1:
                    b9:e9:6d:fd:17:72:72:11:84:af:a5:e4:26:f6:33:
                    b0:5b:43:aa:48:86:37:94:0d:19:0d:a5:80:2e:cd:
                    1f:07:f7:50:d8:58:0f:59:da:95:a9:8d:e1:9f:32:
                    b4:09:94:19:75:0e:90:9b:c7:e4:76:e6:33:d6:2a:
                    d3:52:00:d0:48:a2:4b:27:8e:59:85:7d:b7:38:56:
                    08:ed:89:5f:e4:b6:c5:82:13:18:a8:b4:97:30:d1:
                    62:d3:bd:cb:36:31:98:c7:28:52:bb:49:99:af:32:
                    4a:b1:fb:58:de:3a:0d:55:3f:19:82:eb:35:e3:4d:
                    60:a3:dc:0f:e8:2c:d3:bb:34:1a:36:0f:37:e3:e3:
                    02:23:af:34:4e:5f:84:a0:76:d3:50:b2:4c:e8:57:
                    6f:64:f8:13:52:be:b0:a5:2c:36:2f:a5:32:bd:07:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A5:EA:8C:B6:14:62:4C:CA:CF:3A:84:1F:C2:2B:8A:F5:01:D6:0E
            X509v3 Authority Key Identifier:
                keyid:B6:D8:0F:E3:D9:06:26:2A:28:CF:60:59:56:13:CE:6F:B4:0B:60:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D80FE3D906262A28CF60595613CE6FB40B607C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/323830343a343465633a3a2f33322d3438203d3e20323637363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:32:9d:0d:d8:91:a6:60:7e:99:bf:4b:36:f7:8b:97:82:43:
         63:9b:da:1b:0e:1e:79:18:a0:24:e2:76:68:14:b9:3a:b5:0d:
         84:43:7c:d4:b8:57:38:26:fc:b4:c2:6e:87:b3:16:56:ef:98:
         7c:45:b8:bd:fa:ef:aa:10:3f:0e:12:b1:8b:93:ac:c5:d9:58:
         95:64:6b:e7:d6:24:4a:af:87:99:f8:a4:0c:01:93:d1:68:02:
         3b:c6:51:0d:66:5e:ab:3f:a6:81:19:66:06:d4:43:09:5d:92:
         e1:1d:28:eb:9f:05:1a:78:40:77:b6:59:97:b4:82:12:64:0e:
         cb:3e:38:6f:b0:6a:20:c5:ea:c0:d0:f6:38:89:ad:80:23:da:
         0b:4e:97:9a:73:37:d1:be:6d:ac:eb:bb:b3:c1:c0:78:a3:f2:
         66:99:cc:ee:1b:f3:ce:61:c1:b3:90:02:9e:24:bc:17:c6:42:
         6a:48:2c:af:d3:b3:2b:73:b2:65:db:be:88:2a:0b:6c:d2:62:
         30:c9:dc:02:54:cb:bb:f9:0b:84:4e:40:22:2d:d6:66:25:b9:
         93:44:f7:d8:a6:0d:9d:67:cc:f2:67:4c:4b:00:39:7e:e8:33:
         01:a3:f9:7b:13:91:b5:49:5e:fd:80:fd:f9:c3:fc:c3:80:a4:
         ee:0c:c1:6a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdTw1UM3tWTPrMFv74QjW+/d4xmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZEODBGRTNEOTA2MjYyQTI4Q0Y2MDU5NTYxM0NFNkZC
NDBCNjA3QzAeFw0yNDExMTUwMDE1MThaFw0yNTExMTQwMDIwMThaMDMxMTAvBgNV
BAMTKDlEQTVFQThDQjYxNDYyNENDQUNGM0E4NDFGQzIyQjhBRjUwMUQ2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcxgZqjfuh6+lES0WMPb1fcOn
euxPWQXgSEFXOVHmXxLgYARPrjHXzqML71RqZhe9oOd5soQ02BJEnogQ54oja477
rJcw+PsdlcAvtRmOUaD6bxhDIOvUobnpbf0XcnIRhK+l5Cb2M7BbQ6pIhjeUDRkN
pYAuzR8H91DYWA9Z2pWpjeGfMrQJlBl1DpCbx+R25jPWKtNSANBIoksnjlmFfbc4
VgjtiV/ktsWCExiotJcw0WLTvcs2MZjHKFK7SZmvMkqx+1jeOg1VPxmC6zXjTWCj
3A/oLNO7NBo2Dzfj4wIjrzROX4SgdtNQskzoV29k+BNSvrClLDYvpTK9BwLrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnaXqjLYUYkzKzzqEH8IrivUB1g4wHwYDVR0j
BBgwFoAUttgP49kGJiooz2BZVhPOb7QLYHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTd1NlFMVlZVNVVySFFEN3hSeG1LUnFrVzJwa0FEYVJ1Ump0RFJiWlFU
Q1MvMC9CNkQ4MEZFM0Q5MDYyNjJBMjhDRjYwNTk1NjEzQ0U2RkI0MEI2MDdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2RDgwRkUzRDkwNjI2MkEy
OENGNjA1OTU2MTNDRTZGQjQwQjYwN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U3dTZRTFZWVTVVckhRRDd4UnhtS1Jxa1cycGtBRGFSdVJqdERSYlpRVENTLzAv
MzIzODMwMzQzYTM0MzQ2NTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzYzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARE7DANBgkqhkiG9w0BAQsFAAOCAQEAZTKdDdiR
pmB+mb9LNveLl4JDY5vaGw4eeRigJOJ2aBS5OrUNhEN81LhXOCb8tMJuh7MWVu+Y
fEW4vfrvqhA/DhKxi5OsxdlYlWRr59YkSq+HmfikDAGT0WgCO8ZRDWZeqz+mgRlm
BtRDCV2S4R0o658FGnhAd7ZZl7SCEmQOyz44b7BqIMXqwND2OImtgCPaC06XmnM3
0b5trOu7s8HAeKPyZpnM7hvzzmHBs5ACniS8F8ZCakgsr9OzK3OyZdu+iCoLbNJi
MMncAlTLu/kLhE5AIi3WZiW5k0T32KYNnWfM8mdMSwA5fugzAaP5exORtUle/YD9
+cP8w4Ck7gzBag==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:54 2024 by rpki-client on console-fra.rpki-client.org