Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33322d3332203d3e20323636333230.roa
File:                     323830343a333630303a3a2f33322d3332203d3e20323636333230.roa (raw, json)
Hash identifier:          r29n4TKovYNetjy7CiLcbaVa2jxua6mWLUOfGX4l+m8=
Subject key identifier:   22:C4:F3:DF:E5:8F:F3:91:D1:42:B6:46:19:83:89:1F:BF:E4:3E:18
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       25200F4270EE540BDC373DBE644793C343601D56
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33322d3332203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     266320
IP address blocks:        2804:3600::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:20:0f:42:70:ee:54:0b:dc:37:3d:be:64:47:93:c3:43:60:1d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject: CN=22C4F3DFE58FF391D142B6461983891FBFE43E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:b0:50:b4:8e:48:a9:65:8d:e5:50:1d:92:
                    12:2f:65:2e:af:1b:db:e5:3e:ad:8d:1c:65:42:a7:
                    36:2b:83:c5:63:99:25:3f:db:f3:c8:83:ec:dc:22:
                    1c:06:cb:f4:52:c4:a1:e9:3a:39:42:a5:66:f8:29:
                    04:ef:9c:5c:ca:26:74:bc:c5:0a:d7:4f:39:b2:d5:
                    1e:16:5d:97:46:06:a8:1f:9f:0b:7a:e6:49:f7:82:
                    b3:17:78:c9:88:f0:ec:de:69:3c:89:9d:c4:14:08:
                    ab:ae:0e:b4:0b:e5:2d:77:61:2e:f7:76:20:30:2d:
                    c4:54:76:e0:3c:35:6a:0e:04:42:17:d1:a6:0e:94:
                    04:c6:88:8a:9f:92:10:d2:2b:0a:b2:1c:11:e8:b6:
                    9e:c3:6f:48:d5:55:b5:d6:2a:32:ad:fc:ca:21:0f:
                    59:fa:89:0f:62:d6:a1:af:38:de:3b:0f:42:b2:39:
                    de:4f:b3:57:2c:73:ab:fc:50:3e:69:bc:76:12:01:
                    07:2e:f9:ec:92:d5:c1:4b:88:99:8f:b6:89:f6:d7:
                    ad:cb:26:99:3b:ab:be:fb:72:b8:54:96:4b:d6:f9:
                    4a:d4:80:b8:58:f9:4a:38:ed:ba:53:43:ef:f2:05:
                    9a:c6:77:e0:e0:b1:0b:68:83:75:b0:6f:10:38:9f:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C4:F3:DF:E5:8F:F3:91:D1:42:B6:46:19:83:89:1F:BF:E4:3E:18
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33322d3332203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:11:0f:55:d9:d4:9c:b6:b6:66:20:7d:ab:1d:95:90:da:
         9b:79:80:df:13:bd:51:ec:ef:1b:ee:eb:79:65:e1:33:6c:15:
         41:57:99:ff:0b:67:9d:14:d3:d7:5b:b2:86:d8:46:34:17:03:
         c5:49:a0:95:45:c1:87:3c:98:6a:36:1e:d4:8c:55:1e:a0:61:
         97:10:26:ad:35:bd:51:2f:f6:92:67:ad:f9:5e:51:f0:80:43:
         8d:c0:48:f0:7d:b5:ec:50:51:a0:93:66:c2:f6:32:e6:90:17:
         a9:c7:57:2e:2d:54:69:3e:d2:b9:75:cd:69:b8:0f:d5:8d:af:
         e5:f2:77:e0:e3:a8:f2:56:0a:f7:53:32:b9:0b:53:73:cd:32:
         7d:08:d9:96:d5:2a:1c:22:49:3b:7e:60:34:43:95:8d:8e:60:
         4d:63:6b:f4:1e:d2:bc:c5:d9:49:b5:b3:e5:6f:98:a3:73:44:
         36:ce:8e:44:20:18:b4:e2:e9:f4:c5:2f:15:6a:2f:ea:12:0e:
         cf:bf:31:e9:b8:06:4f:5d:7a:9a:d3:09:03:cc:65:bd:d2:ce:
         f3:60:28:63:8f:40:4d:d8:14:68:88:8d:fc:c1:0d:ad:72:3d:
         8f:3d:18:33:c0:0b:f8:5f:7f:ae:3d:09:42:4c:1b:17:dc:b7:
         12:4e:7e:25
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJSAPQnDuVAvcNz2+ZEeTw0NgHVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3RDgzOEYxQjU5ODk5RDQ0QjRGQzQwMEZCQzFEREEz
QzBCM0QzMDAeFw0yNDA0MDMxODI2MDZaFw0yNTA0MDIxODMxMDZaMDMxMTAvBgNV
BAMTKDIyQzRGM0RGRTU4RkYzOTFEMTQyQjY0NjE5ODM4OTFGQkZFNDNFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5LBQtI5IqWWN5VAdkhIvZS6v
G9vlPq2NHGVCpzYrg8VjmSU/2/PIg+zcIhwGy/RSxKHpOjlCpWb4KQTvnFzKJnS8
xQrXTzmy1R4WXZdGBqgfnwt65kn3grMXeMmI8OzeaTyJncQUCKuuDrQL5S13YS73
diAwLcRUduA8NWoOBEIX0aYOlATGiIqfkhDSKwqyHBHotp7Db0jVVbXWKjKt/Moh
D1n6iQ9i1qGvON47D0KyOd5Ps1csc6v8UD5pvHYSAQcu+eyS1cFLiJmPton2163L
Jpk7q777crhUlkvW+UrUgLhY+Uo47bpTQ+/yBZrGd+DgsQtog3WwbxA4n9TjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIsTz3+WP85HRQrZGGYOJH7/kPhgwHwYDVR0j
BBgwFoAUHH2DjxtZiZ1EtPxAD7wd2jwLPTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZSTnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1
OFcvMS8xQzdEODM4RjFCNTk4OTlENDRCNEZDNDAwRkJDMUREQTNDMEIzRDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDN0Q4MzhGMUI1OTg5OUQ0
NEI0RkM0MDBGQkMxRERBM0MwQjNEMzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2Uk55VmppcVpIUUpzNHhlOTlQbmk1NVp3YzM2YXJXYXR6RFRSMzNCNThXLzEv
MzIzODMwMzQzYTMzMzYzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ2ADANBgkqhkiG9w0BAQsFAAOCAQEAUHwRD1XZ
1Jy2tmYgfasdlZDam3mA3xO9UezvG+7reWXhM2wVQVeZ/wtnnRTT11uyhthGNBcD
xUmglUXBhzyYajYe1IxVHqBhlxAmrTW9US/2kmet+V5R8IBDjcBI8H217FBRoJNm
wvYy5pAXqcdXLi1UaT7SuXXNabgP1Y2v5fJ34OOo8lYK91MyuQtTc80yfQjZltUq
HCJJO35gNEOVjY5gTWNr9B7SvMXZSbWz5W+Yo3NENs6ORCAYtOLp9MUvFWov6hIO
z78x6bgGT116mtMJA8xlvdLO82AoY49ATdgUaIiN/MENrXI9jz0YM8AL+F9/rj0J
QkwbF9y3Ek5+JQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org