Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa
File:                     323830343a356639383a3a2f33332d3333203d3e20323639313131.roa (raw, json)
Hash identifier:          HKI9kKeImzHJD2OYPcTqLzkf0P5qqChVsxiADdFJoRo=
Subject key identifier:   DF:42:BC:B2:FA:E0:B9:C2:B6:D4:D1:52:05:90:2E:49:BE:34:32:78
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       0E4560BAACAB796A954594C590F86B0BFA4351E1
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa
Signing time:             Wed 03 Apr 2024 23:23:19 +0000
ROA not before:           Wed 03 Apr 2024 23:18:19 +0000
ROA not after:            Wed 02 Apr 2025 23:23:19 +0000
asID:                     269111
IP address blocks:        2804:5f98::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl
                          rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:45:60:ba:ac:ab:79:6a:95:45:94:c5:90:f8:6b:0b:fa:43:51:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Apr  3 23:18:19 2024 GMT
            Not After : Apr  2 23:23:19 2025 GMT
        Subject: CN=DF42BCB2FAE0B9C2B6D4D15205902E49BE343278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:16:3d:3a:50:f9:16:00:59:a8:8c:82:19:
                    c9:22:82:db:e1:6c:39:a1:ee:e4:ed:22:0d:1a:6e:
                    2a:83:30:8d:38:de:6e:1f:c7:e6:ca:49:c3:36:e1:
                    36:49:f2:e4:05:1c:d6:38:62:f1:ca:b4:d5:81:50:
                    23:fb:8d:1d:e6:93:25:aa:74:a1:bd:3f:5a:4c:77:
                    43:b9:3a:d2:b8:3a:07:0e:83:ea:9c:ed:47:2a:e8:
                    34:09:4f:be:e1:9f:14:7e:8d:82:63:23:d0:2c:42:
                    4e:10:3b:41:01:67:3b:c2:65:5d:2a:c7:d0:6a:00:
                    d5:11:ab:d2:a1:5d:93:d1:23:0d:c7:3a:19:7b:79:
                    79:b4:75:bd:c8:21:f5:a1:c7:b8:de:82:6b:03:d2:
                    5d:da:6c:71:06:12:2f:bc:51:39:15:7e:0b:53:26:
                    ad:74:2a:64:5c:a1:f8:b9:ff:5d:6f:f1:db:d8:5c:
                    49:52:47:0d:7f:87:76:f2:aa:b0:fe:dd:61:6f:5b:
                    f9:4c:73:6b:bc:f4:77:dc:64:d7:20:c9:f7:19:80:
                    3f:cb:33:58:e6:c4:fb:9c:5a:0f:30:70:82:34:ea:
                    bf:9c:8c:56:ed:85:51:65:32:85:3e:7b:90:b3:b8:
                    76:96:7c:8f:da:11:e9:a7:c8:ba:e8:85:6b:c0:1b:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:BC:B2:FA:E0:B9:C2:B6:D4:D1:52:05:90:2E:49:BE:34:32:78
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f98::/33

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:20:ec:e0:5d:fe:c9:f5:0d:03:47:33:17:03:8a:fb:9b:
         85:51:0b:68:40:0a:4b:2e:a5:49:97:ee:1f:57:6d:f4:ef:af:
         ce:59:bd:5b:1d:14:cd:2b:6a:2c:4d:3a:10:b5:be:aa:c2:0b:
         85:c2:f2:dc:f0:83:2b:b3:db:f0:3d:dc:94:ac:6e:fb:f0:2d:
         35:40:85:f9:1c:fc:c5:63:dc:cb:f9:32:de:05:c9:7a:0f:62:
         ef:d8:30:ea:22:45:fe:3f:c9:d6:02:e3:87:a1:0f:e8:81:f3:
         91:f5:bf:ef:18:e0:8f:eb:75:de:bb:59:b9:18:c1:84:f8:bd:
         f5:5a:32:5a:92:77:9f:ee:8b:dd:80:ba:89:05:d0:8a:b1:b3:
         ec:6f:88:ce:5d:ee:86:c9:a1:c5:ba:3c:da:1a:f5:c7:7d:b6:
         8c:22:b0:d6:49:b7:bf:c9:8e:8b:74:27:19:26:b1:fc:d8:d1:
         f6:1f:04:a6:98:96:c0:a7:72:ce:78:b7:56:09:e7:59:4e:ea:
         2e:b5:5c:34:7d:fa:a0:10:ba:0e:24:c9:60:8c:c3:db:b0:58:
         e9:61:05:4d:5f:9c:ef:cc:11:a1:03:c7:97:7e:d3:02:6e:a1:
         cb:56:bc:50:41:4b:61:ed:01:08:ad:d4:02:2b:53:3a:1e:3f:
         7d:0c:41:23
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDkVguqyreWqVRZTFkPhrC/pDUeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1RDQyRDkzRTU4QzAwMjQ1QTY1MDFFOUMwMUM4MzNC
Qjc4MjIxNzAeFw0yNDA0MDMyMzE4MTlaFw0yNTA0MDIyMzIzMTlaMDMxMTAvBgNV
BAMTKERGNDJCQ0IyRkFFMEI5QzJCNkQ0RDE1MjA1OTAyRTQ5QkUzNDMyNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWRY9OlD5FgBZqIyCGckigtvh
bDmh7uTtIg0abiqDMI043m4fx+bKScM24TZJ8uQFHNY4YvHKtNWBUCP7jR3mkyWq
dKG9P1pMd0O5OtK4OgcOg+qc7Ucq6DQJT77hnxR+jYJjI9AsQk4QO0EBZzvCZV0q
x9BqANURq9KhXZPRIw3HOhl7eXm0db3IIfWhx7jegmsD0l3abHEGEi+8UTkVfgtT
Jq10KmRcofi5/11v8dvYXElSRw1/h3byqrD+3WFvW/lMc2u89HfcZNcgyfcZgD/L
M1jmxPucWg8wcII06r+cjFbthVFlMoU+e5CzuHaWfI/aEemnyLrohWvAG3v9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU30K8svrgucK21NFSBZAuSb40MngwHwYDVR0j
BBgwFoAUa11C2T5YwAJFplAenAHIM7t4IhcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZLdU43NjhlTTNrb3Q0SndESEFDOUhWNGNhd0hXY1l5bUNmbkp2ZFlX
b3AvMi82QjVENDJEOTNFNThDMDAyNDVBNjUwMUU5QzAxQzgzM0JCNzgyMjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCNUQ0MkQ5M0U1OEMwMDI0
NUE2NTAxRTlDMDFDODMzQkI3ODIyMTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2S3VONzY4ZU0za290NEp3REhBQzlIVjRjYXdIV2NZeW1DZm5KdmRZV29wLzIv
MzIzODMwMzQzYTM1NjYzOTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARfmAAwDQYJKoZIhvcNAQELBQADggEBAHmxIOzg
Xf7J9Q0DRzMXA4r7m4VRC2hACksupUmX7h9XbfTvr85ZvVsdFM0raixNOhC1vqrC
C4XC8tzwgyuz2/A93JSsbvvwLTVAhfkc/MVj3Mv5Mt4FyXoPYu/YMOoiRf4/ydYC
44ehD+iB85H1v+8Y4I/rdd67WbkYwYT4vfVaMlqSd5/ui92AuokF0Iqxs+xviM5d
7obJocW6PNoa9cd9towisNZJt7/Jjot0JxkmsfzY0fYfBKaYlsCncs54t1YJ51lO
6i61XDR9+qAQug4kyWCMw9uwWOlhBU1fnO/MEaEDx5d+0wJuoctWvFBBS2HtAQit
1AIrUzoeP30MQSM=
-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:41 2024 by rpki-client on console-fra.rpki-client.org