Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/1/323830343a326633383a3a2f33322d3438203d3e20323634383738.roa
File:                     323830343a326633383a3a2f33322d3438203d3e20323634383738.roa (raw, json)
Hash identifier:          kp2i92AK8CuufOPxfPP4T+2MWV7NxxJXWR3wOLtHSL0=
Subject key identifier:   CF:77:6B:20:9C:9E:47:15:D6:B6:3D:D2:42:7A:38:DF:0B:69:91:99
Certificate issuer:       /CN=C6701CA01BAC9643EAC3D424DB9295A231D4E61A
Certificate serial:       12681358D0D2E2E6389F9DCB241943719B1CB93A
Authority key identifier: C6:70:1C:A0:1B:AC:96:43:EA:C3:D4:24:DB:92:95:A2:31:D4:E6:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6701CA01BAC9643EAC3D424DB9295A231D4E61A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/1/323830343a326633383a3a2f33322d3438203d3e20323634383738.roa
Signing time:             Thu 04 Apr 2024 13:11:27 +0000
ROA not before:           Thu 04 Apr 2024 13:06:27 +0000
ROA not after:            Thu 03 Apr 2025 13:11:27 +0000
asID:                     264878
IP address blocks:        2804:2f38::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/1/C6701CA01BAC9643EAC3D424DB9295A231D4E61A.crl
                          rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/1/C6701CA01BAC9643EAC3D424DB9295A231D4E61A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6701CA01BAC9643EAC3D424DB9295A231D4E61A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 11:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:68:13:58:d0:d2:e2:e6:38:9f:9d:cb:24:19:43:71:9b:1c:b9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6701CA01BAC9643EAC3D424DB9295A231D4E61A
        Validity
            Not Before: Apr  4 13:06:27 2024 GMT
            Not After : Apr  3 13:11:27 2025 GMT
        Subject: CN=CF776B209C9E4715D6B63DD2427A38DF0B699199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:7c:84:8e:c3:ae:a3:91:d6:c7:62:94:8e:
                    c3:dd:9d:6b:2d:60:4f:61:13:d6:35:9b:20:b4:62:
                    fa:2b:70:a5:d1:1d:0c:73:6c:aa:0b:66:31:6e:bc:
                    86:c0:d1:62:4a:33:de:18:3c:5d:50:17:21:5e:e6:
                    86:65:9c:81:33:23:92:58:57:57:6d:ee:19:c4:2e:
                    55:65:8d:cc:e3:71:e1:09:4c:10:50:3a:1a:40:13:
                    66:66:c9:79:42:3b:0c:0e:65:8b:a7:d2:f0:29:35:
                    bf:ed:53:6c:9c:76:a5:da:e4:ea:5c:ec:31:a2:03:
                    2b:bc:d1:e2:8e:b0:ae:f1:54:1f:48:8d:f1:8b:8b:
                    23:79:51:22:75:e5:57:68:ef:57:d9:c6:ab:23:90:
                    91:00:36:4e:ae:fb:10:26:6d:b2:29:13:88:45:4a:
                    7b:e5:3f:d5:74:10:b8:c4:c3:d7:ca:09:07:89:1a:
                    b2:3c:a5:fb:6c:4c:7f:cd:d6:a8:8c:a0:7b:7c:c8:
                    6f:78:c7:cf:94:3e:77:34:00:79:00:99:68:e0:49:
                    ba:ed:8e:8c:fe:5b:6d:8d:72:58:3b:c8:77:a6:de:
                    7a:29:30:76:b6:8b:6b:ae:ba:3b:f7:6f:46:11:f0:
                    d9:f1:34:c8:9d:49:7c:19:24:ed:31:b8:1b:fe:3a:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:77:6B:20:9C:9E:47:15:D6:B6:3D:D2:42:7A:38:DF:0B:69:91:99
            X509v3 Authority Key Identifier:
                keyid:C6:70:1C:A0:1B:AC:96:43:EA:C3:D4:24:DB:92:95:A2:31:D4:E6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/1/C6701CA01BAC9643EAC3D424DB9295A231D4E61A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6701CA01BAC9643EAC3D424DB9295A231D4E61A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/1/323830343a326633383a3a2f33322d3438203d3e20323634383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f38::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:12:ef:c9:af:b3:12:15:03:c7:31:ce:48:3b:c5:37:15:
         5f:a8:1a:3b:c1:b7:f8:27:9e:67:fc:69:24:df:6b:7e:3c:89:
         7a:3a:fc:95:4f:f3:2f:f7:be:5a:84:a3:f1:9f:bf:33:f5:a7:
         ab:90:6b:b3:7a:24:d3:c2:c3:cd:09:87:f1:96:0f:9a:64:36:
         02:48:b0:d7:d1:5c:7a:15:03:b3:89:0d:9b:f6:2b:94:72:be:
         6e:6f:57:75:07:c5:79:71:dd:f2:d6:3f:50:3a:23:32:ad:35:
         2e:d4:76:29:20:25:d4:bd:c2:69:95:61:57:63:d8:ab:86:f8:
         ee:51:00:99:bd:13:66:53:66:b5:a1:d1:2a:a3:c7:e0:ec:d5:
         8a:be:1f:fe:37:68:10:d7:ca:9e:90:75:fb:16:56:f0:59:dd:
         e9:c8:ff:33:fb:35:ea:b2:b7:f2:a0:cc:c6:53:11:1a:e2:d3:
         9b:77:b2:31:ed:11:d7:03:37:22:4b:05:ec:48:93:62:de:a8:
         5e:d3:10:a1:d8:75:19:ef:d1:a7:a0:63:39:7f:18:a5:b1:1c:
         7d:be:73:8d:61:0d:1a:61:ed:4a:8b:a8:c3:2a:bd:25:47:b0:
         b7:84:0e:cf:52:57:d4:ca:09:f0:33:11:00:60:cf:34:ec:12:
         6e:45:92:23
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEmgTWNDS4uY4n53LJBlDcZscuTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3MDFDQTAxQkFDOTY0M0VBQzNENDI0REI5Mjk1QTIz
MUQ0RTYxQTAeFw0yNDA0MDQxMzA2MjdaFw0yNTA0MDMxMzExMjdaMDMxMTAvBgNV
BAMTKENGNzc2QjIwOUM5RTQ3MTVENkI2M0REMjQyN0EzOERGMEI2OTkxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNHyEjsOuo5HWx2KUjsPdnWst
YE9hE9Y1myC0YvorcKXRHQxzbKoLZjFuvIbA0WJKM94YPF1QFyFe5oZlnIEzI5JY
V1dt7hnELlVljczjceEJTBBQOhpAE2ZmyXlCOwwOZYun0vApNb/tU2ycdqXa5Opc
7DGiAyu80eKOsK7xVB9IjfGLiyN5USJ15Vdo71fZxqsjkJEANk6u+xAmbbIpE4hF
SnvlP9V0ELjEw9fKCQeJGrI8pftsTH/N1qiMoHt8yG94x8+UPnc0AHkAmWjgSbrt
joz+W22Nclg7yHem3nopMHa2i2uuujv3b0YR8NnxNMidSXwZJO0xuBv+OiA7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUz3drIJyeRxXWtj3SQno43wtpkZkwHwYDVR0j
BBgwFoAUxnAcoBuslkPqw9Qk25KVojHU5howDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRThKWmJzMVY3ZjNwUW1oWm5qczNuZlpxWnAzWmVIdFl0UWlEVG95RjE2
cVIvMS9DNjcwMUNBMDFCQUM5NjQzRUFDM0Q0MjREQjkyOTVBMjMxRDRFNjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2NzAxQ0EwMUJBQzk2NDNF
QUMzRDQyNERCOTI5NUEyMzFENEU2MUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U4SlpiczFWN2YzcFFtaFpuanMzbmZacVpwM1plSHRZdFFpRFRveUYxNnFSLzEv
MzIzODMwMzQzYTMyNjYzMzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQvODANBgkqhkiG9w0BAQsFAAOCAQEAWY8S78mv
sxIVA8cxzkg7xTcVX6gaO8G3+CeeZ/xpJN9rfjyJejr8lU/zL/e+WoSj8Z+/M/Wn
q5Brs3ok08LDzQmH8ZYPmmQ2Akiw19FcehUDs4kNm/YrlHK+bm9XdQfFeXHd8tY/
UDojMq01LtR2KSAl1L3CaZVhV2PYq4b47lEAmb0TZlNmtaHRKqPH4OzVir4f/jdo
ENfKnpB1+xZW8Fnd6cj/M/s16rK38qDMxlMRGuLTm3eyMe0R1wM3IksF7EiTYt6o
XtMQodh1Ge/Rp6BjOX8YpbEcfb5zjWENGmHtSouowyq9JUewt4QOz1JX1MoJ8DMR
AGDPNOwSbkWSIw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:10:06 2024 by rpki-client on console-ams.rpki-client.org