Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/323830343a323565633a3a2f33322d3438203d3e20323634333039.roa
File:                     323830343a323565633a3a2f33322d3438203d3e20323634333039.roa (raw, json)
Hash identifier:          Z+aiTlJ1y2NvsPEqdgIZUVgBvuLbHlmdpFMklv7fKWI=
Subject key identifier:   33:A1:B9:82:79:22:2F:C3:10:F0:3C:33:BF:75:63:FD:4D:77:9E:86
Certificate issuer:       /CN=176B3690663CF65C508445E492B49E2E328AF9DA
Certificate serial:       6B5D20B56A4768137C29F4D824AD7F9BA5D6A9DF
Authority key identifier: 17:6B:36:90:66:3C:F6:5C:50:84:45:E4:92:B4:9E:2E:32:8A:F9:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/176B3690663CF65C508445E492B49E2E328AF9DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/323830343a323565633a3a2f33322d3438203d3e20323634333039.roa
Signing time:             Thu 04 Apr 2024 13:15:00 +0000
ROA not before:           Thu 04 Apr 2024 13:10:00 +0000
ROA not after:            Thu 03 Apr 2025 13:15:00 +0000
asID:                     264309
IP address blocks:        2804:25ec::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/176B3690663CF65C508445E492B49E2E328AF9DA.crl
                          rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/176B3690663CF65C508445E492B49E2E328AF9DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/176B3690663CF65C508445E492B49E2E328AF9DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5d:20:b5:6a:47:68:13:7c:29:f4:d8:24:ad:7f:9b:a5:d6:a9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176B3690663CF65C508445E492B49E2E328AF9DA
        Validity
            Not Before: Apr  4 13:10:00 2024 GMT
            Not After : Apr  3 13:15:00 2025 GMT
        Subject: CN=33A1B98279222FC310F03C33BF7563FD4D779E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:b0:8d:8a:0f:bd:91:7f:13:40:e6:ef:f1:
                    34:61:4b:f4:d4:07:bd:a4:66:8c:f3:ac:88:3f:43:
                    52:e5:e4:86:24:3f:59:7f:fd:49:df:ee:18:bd:99:
                    a2:0a:a9:6b:bd:85:43:72:29:d3:32:df:b4:0b:58:
                    c8:1e:36:e8:ee:55:94:71:63:e6:7e:e0:13:08:44:
                    b0:29:30:22:7c:11:8b:1f:1d:e7:91:b1:3c:51:ea:
                    fc:92:d6:f6:ea:8b:e4:a8:df:f4:6d:9a:ac:59:27:
                    69:9b:65:d7:5e:3a:53:3b:4b:c6:33:be:b8:4d:53:
                    cc:d3:11:77:47:5c:f4:6a:a8:4f:9b:47:ff:67:f2:
                    17:1a:83:c5:6b:8c:c2:9c:b8:4b:c7:a0:99:9b:0d:
                    12:4e:dd:86:6c:c4:18:2c:07:30:4f:16:6a:d9:0e:
                    c3:76:a6:3b:0e:ae:21:23:01:83:9f:6c:d3:35:64:
                    fc:56:00:60:33:05:ec:cf:ac:20:67:37:61:89:0c:
                    23:d7:e2:af:c6:3f:d6:dd:b7:d8:ee:99:33:f3:9b:
                    c9:22:57:61:98:1d:5c:23:23:87:af:fd:5d:35:d0:
                    4b:45:90:32:76:0c:b0:64:dc:91:0c:0b:23:56:18:
                    60:3c:88:aa:0b:15:2c:de:2d:b1:b0:f5:a7:ff:bc:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A1:B9:82:79:22:2F:C3:10:F0:3C:33:BF:75:63:FD:4D:77:9E:86
            X509v3 Authority Key Identifier:
                keyid:17:6B:36:90:66:3C:F6:5C:50:84:45:E4:92:B4:9E:2E:32:8A:F9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/176B3690663CF65C508445E492B49E2E328AF9DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/176B3690663CF65C508445E492B49E2E328AF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/323830343a323565633a3a2f33322d3438203d3e20323634333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:3f:70:9d:c3:56:e8:60:47:04:83:cc:65:a6:0b:2b:fb:
         41:02:e6:ff:df:c8:ac:ba:e6:3c:9a:13:7c:db:13:af:bb:48:
         9e:a1:f2:51:e4:0d:b2:1e:b5:c9:03:d0:f1:de:96:54:ce:b7:
         77:df:db:27:e6:3e:b7:b1:bc:81:45:9b:05:22:2f:be:f7:26:
         78:4e:7a:23:de:31:b1:0d:5a:f8:37:03:57:5a:f2:7b:61:84:
         2a:d4:0b:a7:ab:6d:2d:5c:d8:ae:bb:88:03:6a:fe:b4:7f:cb:
         d1:da:18:3f:1a:8f:bb:a2:13:67:50:80:c1:20:e3:9f:92:8f:
         2f:df:96:27:d5:0e:b9:96:33:58:f0:e9:c5:10:9c:70:4a:67:
         d1:82:ed:d9:e1:a7:92:26:e2:6d:d4:ea:fb:89:ba:0e:77:07:
         6a:58:89:8f:5d:d0:02:32:3f:ee:be:06:94:cb:ee:a8:95:74:
         14:13:aa:db:68:0e:e0:80:ef:b6:80:27:83:31:af:c7:f2:d5:
         41:d0:48:a3:d7:2b:e5:4d:71:ea:83:0e:69:bb:17:ff:88:0c:
         62:79:f7:71:4a:77:2f:e1:c1:01:e6:aa:5f:6d:24:16:f2:6f:
         27:57:66:ed:65:9a:94:91:42:68:2c:6c:0b:26:4f:a6:e5:a1:
         19:73:e3:26
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUa10gtWpHaBN8KfTYJK1/m6XWqd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc2QjM2OTA2NjNDRjY1QzUwODQ0NUU0OTJCNDlFMkUz
MjhBRjlEQTAeFw0yNDA0MDQxMzEwMDBaFw0yNTA0MDMxMzE1MDBaMDMxMTAvBgNV
BAMTKDMzQTFCOTgyNzkyMjJGQzMxMEYwM0MzM0JGNzU2M0ZENEQ3NzlFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7LCNig+9kX8TQObv8TRhS/TU
B72kZozzrIg/Q1Ll5IYkP1l//Unf7hi9maIKqWu9hUNyKdMy37QLWMgeNujuVZRx
Y+Z+4BMIRLApMCJ8EYsfHeeRsTxR6vyS1vbqi+So3/RtmqxZJ2mbZddeOlM7S8Yz
vrhNU8zTEXdHXPRqqE+bR/9n8hcag8VrjMKcuEvHoJmbDRJO3YZsxBgsBzBPFmrZ
DsN2pjsOriEjAYOfbNM1ZPxWAGAzBezPrCBnN2GJDCPX4q/GP9bdt9jumTPzm8ki
V2GYHVwjI4ev/V010EtFkDJ2DLBk3JEMCyNWGGA8iKoLFSzeLbGw9af/vM9TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUM6G5gnkiL8MQ8Dwzv3Vj/U13noYwHwYDVR0j
BBgwFoAUF2s2kGY89lxQhEXkkrSeLjKK+dowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlN3aVJ0V1Q5NmVwM3d4RWZQNWJBMjVlWU42TEdEdHZuY0ZxNjR1azZI
REEvMS8xNzZCMzY5MDY2M0NGNjVDNTA4NDQ1RTQ5MkI0OUUyRTMyOEFGOURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3NkIzNjkwNjYzQ0Y2NUM1
MDg0NDVFNDkyQjQ5RTJFMzI4QUY5REEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTd2lSdFdUOTZlcDN3eEVmUDViQTI1ZVlONkxHRHR2bmNGcTY0dWs2SERBLzEv
MzIzODMwMzQzYTMyMzU2NTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQl7DANBgkqhkiG9w0BAQsFAAOCAQEAXUU/cJ3D
VuhgRwSDzGWmCyv7QQLm/9/IrLrmPJoTfNsTr7tInqHyUeQNsh61yQPQ8d6WVM63
d9/bJ+Y+t7G8gUWbBSIvvvcmeE56I94xsQ1a+DcDV1rye2GEKtQLp6ttLVzYrruI
A2r+tH/L0doYPxqPu6ITZ1CAwSDjn5KPL9+WJ9UOuZYzWPDpxRCccEpn0YLt2eGn
kibibdTq+4m6DncHaliJj13QAjI/7r4GlMvuqJV0FBOq22gO4IDvtoAngzGvx/LV
QdBIo9cr5U1x6oMOabsX/4gMYnn3cUp3L+HBAeaqX20kFvJvJ1dm7WWalJFCaCxs
CyZPpuWhGXPjJg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:44 2024 by rpki-client on console-ams.rpki-client.org