Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33322d3332203d3e20323734363933.roa
File:                     323830343a393232383a3a2f33322d3332203d3e20323734363933.roa (raw, json)
Hash identifier:          qsHD+pTyHXxQn0AxeGB/ikT3tdCrynkolpWVtGzicCU=
Subject key identifier:   5D:C5:DF:7F:45:91:E5:6B:F0:BB:50:16:75:6D:26:6A:86:1C:B1:8D
Certificate issuer:       /CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
Certificate serial:       3CF21E100316A62B2615D40994F8391B05EC2FC4
Authority key identifier: 9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33322d3332203d3e20323734363933.roa
Signing time:             Mon 11 Nov 2024 22:00:50 +0000
ROA not before:           Mon 11 Nov 2024 21:55:50 +0000
ROA not after:            Mon 10 Nov 2025 22:00:50 +0000
asID:                     274693
IP address blocks:        2804:9228::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl
                          rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f2:1e:10:03:16:a6:2b:26:15:d4:09:94:f8:39:1b:05:ec:2f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
        Validity
            Not Before: Nov 11 21:55:50 2024 GMT
            Not After : Nov 10 22:00:50 2025 GMT
        Subject: CN=5DC5DF7F4591E56BF0BB5016756D266A861CB18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:d1:8f:f4:a2:2d:bb:7b:22:fc:17:c7:5e:
                    5b:b4:9f:78:9d:ef:d8:ed:04:0e:8e:b9:38:1e:31:
                    08:5c:6e:05:0d:d1:fe:20:d4:02:6f:26:d4:53:29:
                    f7:92:f1:6d:19:5f:cf:4f:b1:d6:29:a8:33:b2:9c:
                    1e:46:e1:ee:89:10:c2:b9:2b:58:f6:30:4e:fa:49:
                    84:f8:d0:78:f2:e6:48:e0:51:32:81:56:ec:91:a4:
                    a2:fe:9e:7b:4b:d9:e9:0d:61:70:5c:a7:ba:22:3b:
                    24:3c:4f:37:c8:ee:b8:5b:67:9a:b8:a0:6d:7d:90:
                    d3:27:ba:ad:c5:60:e5:cf:e7:cc:1b:7f:14:01:e0:
                    e6:2a:32:6e:e4:f4:9a:ee:a8:bf:d5:4b:80:c5:19:
                    c1:c7:e1:f7:39:15:7f:1a:6a:e5:0f:d3:ad:2c:be:
                    c2:b4:7d:95:85:74:c9:74:d1:aa:90:3a:1f:52:c1:
                    e4:58:9d:e2:32:c1:b8:0a:a7:14:62:d6:99:88:de:
                    16:5d:25:dc:34:bb:72:3a:b4:46:e8:32:fe:8b:3b:
                    e7:0a:d3:f7:8b:d3:a4:0f:b1:64:2a:76:2a:b8:97:
                    74:26:d4:5b:e6:27:60:ef:82:13:ee:4e:97:28:6e:
                    2c:70:49:cf:c0:69:2e:6c:91:84:4d:b1:c6:06:d1:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C5:DF:7F:45:91:E5:6B:F0:BB:50:16:75:6D:26:6A:86:1C:B1:8D
            X509v3 Authority Key Identifier:
                keyid:9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33322d3332203d3e20323734363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9228::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:02:1d:28:cf:db:2c:9d:7e:dd:df:50:e1:08:cf:74:8a:38:
         64:cf:d9:9b:c2:4c:94:64:f9:72:db:8d:33:69:19:56:db:d6:
         7b:86:85:f5:a6:f1:97:85:2e:5c:85:e5:c4:f1:3b:18:bc:a7:
         91:30:c7:d0:86:36:9c:9c:01:38:6e:cd:4c:f2:90:50:b2:21:
         44:b2:18:b3:ca:80:94:fc:4b:75:53:6f:19:91:ef:d3:28:f0:
         4c:68:03:13:ed:76:76:12:f6:25:db:69:90:fa:5c:94:db:4a:
         9d:42:a8:e9:aa:45:de:74:66:d8:ea:ee:ee:5f:66:7c:c4:b8:
         2b:70:ae:b2:d4:d4:8e:ca:3a:c6:5a:c9:5b:26:4e:3a:c4:43:
         28:da:39:ee:27:47:f8:da:6d:51:ed:46:d1:e3:49:ce:47:75:
         87:a7:50:a1:e3:38:d0:66:7e:cb:c4:d3:f8:62:17:79:f0:5a:
         67:83:e8:f4:3e:9f:c9:49:58:a7:86:32:0e:f9:6d:8e:68:b3:
         8a:a6:b3:59:7d:1a:cc:94:77:24:9a:4b:41:91:2d:66:db:8b:
         76:c2:44:f6:74:0f:85:e9:fc:a3:b0:1c:40:35:1d:14:8b:0e:
         10:1e:47:44:30:73:1b:fa:ab:c3:a8:a5:f6:a7:86:fd:a5:72:
         cf:5a:5c:87
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPPIeEAMWpismFdQJlPg5GwXsL8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUyNDk5OUM3RDUxNTk3RDUyNzUxMEY2Q0ZERDAxRUI4
QzgxQjRDOTAeFw0yNDExMTEyMTU1NTBaFw0yNTExMTAyMjAwNTBaMDMxMTAvBgNV
BAMTKDVEQzVERjdGNDU5MUU1NkJGMEJCNTAxNjc1NkQyNjZBODYxQ0IxOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1a9GP9KItu3si/BfHXlu0n3id
79jtBA6OuTgeMQhcbgUN0f4g1AJvJtRTKfeS8W0ZX89PsdYpqDOynB5G4e6JEMK5
K1j2ME76SYT40Hjy5kjgUTKBVuyRpKL+nntL2ekNYXBcp7oiOyQ8TzfI7rhbZ5q4
oG19kNMnuq3FYOXP58wbfxQB4OYqMm7k9JruqL/VS4DFGcHH4fc5FX8aauUP060s
vsK0fZWFdMl00aqQOh9SweRYneIywbgKpxRi1pmI3hZdJdw0u3I6tEboMv6LO+cK
0/eL06QPsWQqdiq4l3Qm1FvmJ2DvghPuTpcobixwSc/AaS5skYRNscYG0dVlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXcXff0WR5Wvwu1AWdW0maoYcsY0wHwYDVR0j
BBgwFoAUniSZnH1RWX1SdRD2z90B64yBtMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0NwV2dkWFpRTEFNSEM4V1JoOUFBYmhtTlNpamR0R3k4eWc2blJQUzZV
UXkvMC85RTI0OTk5QzdENTE1OTdENTI3NTEwRjZDRkREMDFFQjhDODFCNEM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMjQ5OTlDN0Q1MTU5N0Q1
Mjc1MTBGNkNGREQwMUVCOEM4MUI0QzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dDcFdnZFhaUUxBTUhDOFdSaDlBQWJobU5TaWpkdEd5OHlnNm5SUFM2VVF5LzAv
MzIzODMwMzQzYTM5MzIzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0
MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASSKDANBgkqhkiG9w0BAQsFAAOCAQEAVQIdKM/b
LJ1+3d9Q4QjPdIo4ZM/Zm8JMlGT5ctuNM2kZVtvWe4aF9abxl4UuXIXlxPE7GLyn
kTDH0IY2nJwBOG7NTPKQULIhRLIYs8qAlPxLdVNvGZHv0yjwTGgDE+12dhL2Jdtp
kPpclNtKnUKo6apF3nRm2Oru7l9mfMS4K3CustTUjso6xlrJWyZOOsRDKNo57idH
+NptUe1G0eNJzkd1h6dQoeM40GZ+y8TT+GIXefBaZ4Po9D6fyUlYp4YyDvltjmiz
iqazWX0azJR3JJpLQZEtZtuLdsJE9nQPhen8o7AcQDUdFIsOEB5HRDBzG/qrw6il
9qeG/aVyz1pchw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org