Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/323830343a373836303a3a2f33322d3332203d3e20323731323338.roa
File:                     323830343a373836303a3a2f33322d3332203d3e20323731323338.roa (raw, json)
Hash identifier:          eGB7r75pDl6TjDZw7Qg6JmdFECljG+KPe7ygSgo6mfA=
Subject key identifier:   2C:21:18:62:01:E3:58:AF:91:CC:89:92:1C:6D:E1:13:C6:16:98:46
Certificate issuer:       /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial:       616AFE00EBE9F3443EB3F133419489FB641D7CC0
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/323830343a373836303a3a2f33322d3332203d3e20323731323338.roa
Signing time:             Wed 24 Apr 2024 14:35:06 +0000
ROA not before:           Wed 24 Apr 2024 14:30:06 +0000
ROA not after:            Wed 23 Apr 2025 14:35:06 +0000
asID:                     271238
IP address blocks:        2804:7860::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl
                          rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:fe:00:eb:e9:f3:44:3e:b3:f1:33:41:94:89:fb:64:1d:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
        Validity
            Not Before: Apr 24 14:30:06 2024 GMT
            Not After : Apr 23 14:35:06 2025 GMT
        Subject: CN=2C21186201E358AF91CC89921C6DE113C6169846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:a6:e1:81:8f:71:8f:c2:e4:52:b5:c1:6b:
                    e4:cb:03:aa:9e:a9:f9:2c:59:7c:1c:d2:37:e6:30:
                    f9:18:15:3d:ab:1a:88:b4:72:5c:27:4d:eb:e8:1b:
                    ad:5c:2d:6c:04:9d:8c:75:57:d4:df:f3:b9:70:24:
                    92:24:dd:2e:76:64:bf:a4:e9:2a:ec:35:b0:c5:17:
                    cf:a2:a1:a0:65:98:09:f4:7a:99:35:1c:cb:00:fd:
                    c7:27:ac:2d:57:f1:6d:ae:29:7b:f3:ae:a3:9d:03:
                    7d:de:2b:c0:00:21:57:2e:7c:b6:b5:38:56:9a:8e:
                    76:28:75:82:a5:c9:75:8d:5d:30:03:76:41:f6:4a:
                    14:3b:0b:54:54:0e:b5:81:fb:dc:5d:c0:7c:5c:90:
                    67:26:8e:76:21:f7:12:a6:60:18:ed:65:94:3e:35:
                    c7:dc:06:45:8e:e4:98:ad:9b:02:1a:21:c0:5b:84:
                    9a:68:2c:04:fd:ea:8f:b9:5d:d0:1f:10:3f:4e:98:
                    31:40:c4:c0:b6:3a:64:3a:9a:77:48:0f:f4:6c:46:
                    ba:42:f4:3c:d8:10:39:74:3d:b9:5b:96:00:5a:d9:
                    2e:cf:88:f4:08:9f:88:69:16:88:06:57:3f:d5:0b:
                    ff:56:c2:a7:29:87:fa:e0:7e:21:aa:cb:cc:78:3a:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:21:18:62:01:E3:58:AF:91:CC:89:92:1C:6D:E1:13:C6:16:98:46
            X509v3 Authority Key Identifier:
                keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/323830343a373836303a3a2f33322d3332203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7860::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:bf:70:b3:ad:c1:43:02:6a:cb:00:3d:55:e6:95:be:cc:
         55:b4:d3:8d:2e:bf:42:e1:c5:80:e1:af:0b:01:d1:39:c2:24:
         52:61:4e:42:74:45:44:a0:a0:ea:3a:95:2b:5d:c8:48:0b:ab:
         54:f0:8b:37:7b:c2:e7:e0:61:f0:08:1d:3b:78:06:ef:bf:d0:
         fb:29:c1:b8:71:2a:c2:6d:2c:4c:7d:37:81:b6:ea:3a:e7:b6:
         11:72:6c:c7:73:ab:51:cd:14:ed:d4:b3:a7:ed:e1:a0:c2:6c:
         e1:8a:34:3a:f1:39:36:19:02:15:0b:6f:bf:4a:1f:fd:d2:67:
         e1:0e:0b:22:68:09:0d:af:e4:40:63:4c:54:cf:79:e9:7f:2b:
         bb:bf:d8:88:a5:cb:a0:25:67:a3:c3:b2:36:db:02:89:8d:ba:
         10:f9:4d:e0:0a:6b:18:19:77:5f:8a:eb:be:ab:bd:5e:3c:68:
         02:13:25:bd:7c:0c:b4:e2:e1:be:bd:45:e4:ec:9c:95:81:61:
         e1:cd:76:c4:bb:10:ca:3e:d2:e0:df:56:da:15:df:7d:87:85:
         fa:31:d9:ca:f7:95:81:c2:c4:01:8d:b0:13:41:c3:13:d5:6a:
         d8:18:37:86:e6:4a:57:c0:75:78:3b:7e:f9:f4:77:69:0e:3a:
         aa:c0:8e:b3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYWr+AOvp80Q+s/EzQZSJ+2QdfMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0
OTYxQkU3MTAeFw0yNDA0MjQxNDMwMDZaFw0yNTA0MjMxNDM1MDZaMDMxMTAvBgNV
BAMTKDJDMjExODYyMDFFMzU4QUY5MUNDODk5MjFDNkRFMTEzQzYxNjk4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC616bhgY9xj8LkUrXBa+TLA6qe
qfksWXwc0jfmMPkYFT2rGoi0clwnTevoG61cLWwEnYx1V9Tf87lwJJIk3S52ZL+k
6SrsNbDFF8+ioaBlmAn0epk1HMsA/ccnrC1X8W2uKXvzrqOdA33eK8AAIVcufLa1
OFaajnYodYKlyXWNXTADdkH2ShQ7C1RUDrWB+9xdwHxckGcmjnYh9xKmYBjtZZQ+
NcfcBkWO5JitmwIaIcBbhJpoLAT96o+5XdAfED9OmDFAxMC2OmQ6mndID/RsRrpC
9DzYEDl0PblblgBa2S7PiPQIn4hpFogGVz/VC/9Wwqcph/rgfiGqy8x4OuoHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULCEYYgHjWK+RzImSHG3hE8YWmEYwHwYDVR0j
BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ
c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz
QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHWU5xZVFYR0N1cldkMXd2U2FBaGgxaU0zRXlDRXRtdlpERFM4VnQ0UHNnLzAv
MzIzODMwMzQzYTM3MzgzNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR4YDANBgkqhkiG9w0BAQsFAAOCAQEAW0S/cLOt
wUMCassAPVXmlb7MVbTTjS6/QuHFgOGvCwHROcIkUmFOQnRFRKCg6jqVK13ISAur
VPCLN3vC5+Bh8AgdO3gG77/Q+ynBuHEqwm0sTH03gbbqOue2EXJsx3OrUc0U7dSz
p+3hoMJs4Yo0OvE5NhkCFQtvv0of/dJn4Q4LImgJDa/kQGNMVM956X8ru7/YiKXL
oCVno8OyNtsCiY26EPlN4AprGBl3X4rrvqu9XjxoAhMlvXwMtOLhvr1F5OyclYFh
4c12xLsQyj7S4N9W2hXffYeF+jHZyveVgcLEAY2wE0HDE9Vq2Bg3huZKV8B1eDt+
+fR3aQ46qsCOsw==
-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:49 2024 by rpki-client on console-ams.rpki-client.org