Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa
File:                     323830343a323463303a3a2f33322d313238203d3e20323632323930.roa (raw, json)
Hash identifier:          TRi53+6T1dEuegzUWEPDfDquUbsO4HaWeZH3Zx3RvjU=
Subject key identifier:   64:57:A8:38:4C:29:DD:B4:40:DE:A2:14:E9:C7:24:CF:58:8E:3B:A3
Certificate issuer:       /CN=CC636745385A9BA13F5D3C7C8027EB2D6F4252D8
Certificate serial:       3986A175255AEF1520D8B5BBBC1BD33191CE402E
Authority key identifier: CC:63:67:45:38:5A:9B:A1:3F:5D:3C:7C:80:27:EB:2D:6F:42:52:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa
Signing time:             Mon 12 Aug 2024 17:31:33 +0000
ROA not before:           Mon 12 Aug 2024 17:26:33 +0000
ROA not after:            Mon 11 Aug 2025 17:31:33 +0000
asID:                     262290
IP address blocks:        2804:24c0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:a1:75:25:5a:ef:15:20:d8:b5:bb:bc:1b:d3:31:91:ce:40:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC636745385A9BA13F5D3C7C8027EB2D6F4252D8
        Validity
            Not Before: Aug 12 17:26:33 2024 GMT
            Not After : Aug 11 17:31:33 2025 GMT
        Subject: CN=6457A8384C29DDB440DEA214E9C724CF588E3BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:8c:d8:b4:30:c8:d8:b9:5c:e7:12:da:1c:
                    ba:2a:94:93:f8:fc:da:67:7c:e6:e0:df:d7:a0:3a:
                    a6:b8:91:40:63:9f:56:1b:99:f4:8b:0e:b9:0c:c6:
                    51:eb:5c:e7:16:9f:a9:bb:f8:c9:44:9e:53:a7:62:
                    5c:c4:c6:70:0c:0d:ac:f6:6b:48:23:72:62:e0:a3:
                    42:6e:90:37:9f:4b:d1:84:3e:eb:99:83:b4:22:f4:
                    28:5c:af:19:8f:fa:f7:c6:ba:0c:01:43:35:07:c8:
                    c8:19:12:e0:e8:ca:6e:bb:1e:8c:fe:58:53:0f:62:
                    62:44:c4:bf:a1:d3:82:4a:6a:d4:56:90:6c:56:1d:
                    73:82:18:6f:9d:f7:df:5b:5d:30:27:9c:d5:1f:5a:
                    f8:8b:17:be:4f:63:ad:28:43:b3:1e:92:a1:0c:3d:
                    ff:35:1f:bb:a2:f9:43:04:fc:8a:2a:a8:6a:28:27:
                    ea:60:f4:8d:00:62:07:04:60:f1:86:1d:c9:35:40:
                    cd:39:e7:e0:01:f5:01:ee:c3:57:7e:f0:a2:6b:34:
                    e5:f8:24:4a:82:fc:2e:60:a5:bd:76:6b:e6:3b:6a:
                    86:a5:9b:87:d4:eb:5a:fa:b4:b7:5c:0c:8b:4a:52:
                    21:ef:68:b1:46:73:99:19:e7:bf:ef:37:ab:14:1b:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:57:A8:38:4C:29:DD:B4:40:DE:A2:14:E9:C7:24:CF:58:8E:3B:A3
            X509v3 Authority Key Identifier:
                keyid:CC:63:67:45:38:5A:9B:A1:3F:5D:3C:7C:80:27:EB:2D:6F:42:52:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:c6:26:3b:f7:d1:4c:b5:43:9c:d4:07:12:8e:dc:80:43:52:
         0b:6a:89:e8:c1:87:74:7b:84:77:ae:a9:f7:bf:c0:eb:06:7d:
         17:39:2c:43:8b:43:7b:3d:ac:c5:c8:b7:65:7e:38:af:1e:ea:
         b8:68:55:7a:72:9c:a3:fa:7f:31:53:51:4f:51:57:89:c1:c8:
         81:e3:ca:31:91:ca:1f:69:03:b9:59:e2:82:7e:59:2f:e0:0b:
         04:9c:01:78:9f:7b:64:6f:8f:03:56:ae:ea:06:7c:b5:8f:df:
         78:81:fe:12:74:83:15:d5:35:73:22:b5:54:ce:7f:d3:42:ee:
         34:14:70:f6:2f:e4:7e:eb:82:37:12:a4:e6:d5:e6:92:72:d3:
         36:6a:04:97:ff:6f:99:02:4d:9d:e8:3a:f7:a2:13:82:dd:bd:
         9a:78:5e:34:8b:1d:cb:c5:57:fd:23:07:87:2b:12:40:0c:d2:
         e9:94:f4:3c:19:22:02:23:e5:39:42:98:a5:53:93:67:6c:e7:
         dd:7b:23:aa:65:98:91:a3:1f:31:b5:75:95:34:ec:b8:1e:02:
         8d:20:28:52:82:4b:1f:2f:16:9b:b7:e9:78:c1:16:64:e7:69:
         9b:08:36:4c:8f:26:97:e7:81:0d:ee:5c:62:da:98:18:83:90:
         41:fa:4f:85
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOYahdSVa7xUg2LW7vBvTMZHOQC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M2MzY3NDUzODVBOUJBMTNGNUQzQzdDODAyN0VCMkQ2
RjQyNTJEODAeFw0yNDA4MTIxNzI2MzNaFw0yNTA4MTExNzMxMzNaMDMxMTAvBgNV
BAMTKDY0NTdBODM4NEMyOUREQjQ0MERFQTIxNEU5QzcyNENGNTg4RTNCQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CYzYtDDI2Llc5xLaHLoqlJP4
/NpnfObg39egOqa4kUBjn1YbmfSLDrkMxlHrXOcWn6m7+MlEnlOnYlzExnAMDaz2
a0gjcmLgo0JukDefS9GEPuuZg7Qi9ChcrxmP+vfGugwBQzUHyMgZEuDoym67Hoz+
WFMPYmJExL+h04JKatRWkGxWHXOCGG+d999bXTAnnNUfWviLF75PY60oQ7MekqEM
Pf81H7ui+UME/IoqqGooJ+pg9I0AYgcEYPGGHck1QM055+AB9QHuw1d+8KJrNOX4
JEqC/C5gpb12a+Y7aoalm4fU61r6tLdcDItKUiHvaLFGc5kZ57/vN6sUG8v3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUZFeoOEwp3bRA3qIU6cckz1iOO6MwHwYDVR0j
BBgwFoAUzGNnRTham6E/XTx8gCfrLW9CUtgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVi
cG4vMC9DQzYzNjc0NTM4NUE5QkExM0Y1RDNDN0M4MDI3RUIyRDZGNDI1MkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNjM2NzQ1Mzg1QTlCQTEz
RjVEM0M3QzgwMjdFQjJENkY0MjUyRDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dNOVVQaldTUVJHTTgxTWFjYmY2dDhxVEZlVDhSR2lSUUhSdUhtcHFlYnBuLzAv
MzIzODMwMzQzYTMyMzQ2MzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzMjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCTAMA0GCSqGSIb3DQEBCwUAA4IBAQDPxiY7
99FMtUOc1AcSjtyAQ1ILaonowYd0e4R3rqn3v8DrBn0XOSxDi0N7PazFyLdlfjiv
Huq4aFV6cpyj+n8xU1FPUVeJwciB48oxkcofaQO5WeKCflkv4AsEnAF4n3tkb48D
Vq7qBny1j994gf4SdIMV1TVzIrVUzn/TQu40FHD2L+R+64I3EqTm1eaSctM2agSX
/2+ZAk2d6Dr3ohOC3b2aeF40ix3LxVf9IweHKxJADNLplPQ8GSICI+U5QpilU5Nn
bOfdeyOqZZiRox8xtXWVNOy4HgKNIChSgksfLxabt+l4wRZk52mbCDZMjyaX54EN
7lxi2pgYg5BB+k+F
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:57 2024 by rpki-client on console-fra.rpki-client.org