Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3438203d3e203631363937.roa
File:                     323830343a316165343a3a2f33322d3438203d3e203631363937.roa (raw, json)
Hash identifier:          8vlbZDj4jBTyvZmeRNfUFYqrqwm1AZaF6AXkOaAfpbc=
Subject key identifier:   50:12:3D:1F:BB:01:38:50:E1:EC:66:43:4E:DD:32:13:24:A2:74:95
Certificate issuer:       /CN=B013A454E9A72C207D10F4E43DB3D85A30D6F09A
Certificate serial:       342DBC2D4A473F0DA99729874488CBBE02E134A9
Authority key identifier: B0:13:A4:54:E9:A7:2C:20:7D:10:F4:E4:3D:B3:D8:5A:30:D6:F0:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3438203d3e203631363937.roa
Signing time:             Sat 02 Nov 2024 01:15:22 +0000
ROA not before:           Sat 02 Nov 2024 01:10:22 +0000
ROA not after:            Sat 01 Nov 2025 01:15:22 +0000
asID:                     61697
IP address blocks:        2804:1ae4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.crl
                          rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2d:bc:2d:4a:47:3f:0d:a9:97:29:87:44:88:cb:be:02:e1:34:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B013A454E9A72C207D10F4E43DB3D85A30D6F09A
        Validity
            Not Before: Nov  2 01:10:22 2024 GMT
            Not After : Nov  1 01:15:22 2025 GMT
        Subject: CN=50123D1FBB013850E1EC66434EDD321324A27495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:0b:44:96:43:be:3b:a7:c8:dd:bd:b1:5b:
                    fd:ed:7a:5d:55:25:d1:31:72:5f:ae:23:71:53:bc:
                    83:6d:f7:c4:18:05:44:4e:6a:11:37:52:42:cc:18:
                    9b:ea:a4:fa:a5:10:3e:63:d0:d5:40:50:b8:cb:ce:
                    d1:48:b2:c2:67:bf:5c:f4:93:a3:4c:13:37:cb:df:
                    e3:e5:0c:c5:0f:cb:97:d9:2d:07:72:b6:8c:d0:13:
                    3e:56:86:a4:a4:01:2c:86:ed:78:77:6a:36:58:fa:
                    79:92:ca:06:e3:7e:7c:11:20:c1:cf:15:7e:65:ea:
                    ad:51:92:da:28:b5:fd:19:39:25:69:f6:67:44:94:
                    07:9b:e1:07:65:b3:2a:fe:cb:49:ce:a9:e4:0f:58:
                    38:d2:db:cf:01:c1:6d:d8:5c:cb:35:16:fb:11:52:
                    96:ca:4c:53:8d:4c:33:83:29:a7:68:69:72:ec:f2:
                    0e:ca:b0:10:1f:ee:eb:e7:bc:23:4f:e2:61:5c:ff:
                    b8:55:56:61:24:97:2a:eb:b9:69:8d:95:9d:c9:2c:
                    bd:8f:05:40:66:23:fe:68:e5:da:38:f6:7a:f4:6f:
                    32:fd:32:3f:96:79:cd:31:62:6b:91:d4:8b:f6:7a:
                    1b:0f:88:49:c1:a0:f1:9e:06:a8:e7:eb:c4:df:41:
                    70:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:12:3D:1F:BB:01:38:50:E1:EC:66:43:4E:DD:32:13:24:A2:74:95
            X509v3 Authority Key Identifier:
                keyid:B0:13:A4:54:E9:A7:2C:20:7D:10:F4:E4:3D:B3:D8:5A:30:D6:F0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B013A454E9A72C207D10F4E43DB3D85A30D6F09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3438203d3e203631363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae4::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:8e:28:e7:22:3a:2a:ae:5b:11:fd:0e:c3:5e:2b:62:f8:
         1a:6d:44:be:ed:12:bd:88:bd:b2:78:4c:ac:a4:51:c9:28:1f:
         78:6e:90:a2:61:dc:d2:6f:f3:ee:86:bb:3d:d1:af:20:80:25:
         ce:48:65:63:94:d4:1e:68:f3:cc:5f:6d:72:e7:33:4e:05:5e:
         cf:e0:5f:ce:8c:d5:dc:29:92:05:94:4e:31:1b:64:9e:67:fd:
         6b:3e:75:c0:67:3f:b7:91:8e:a5:26:10:e5:cb:83:0a:a8:0a:
         f0:72:26:5c:87:e7:71:7e:6e:7d:e1:04:b0:0d:b8:6c:20:fe:
         58:7a:93:ae:94:ec:4b:15:57:da:83:ca:0f:11:2c:2a:b3:3a:
         91:7c:47:2b:62:75:b1:e7:54:2c:c3:74:53:82:d2:1e:06:ce:
         16:bf:0c:36:cc:b8:2b:c4:da:ef:48:b0:52:54:b2:f1:7f:14:
         ee:b4:a3:c0:bf:16:85:af:b2:ed:9e:d2:ca:58:a9:2e:1c:1e:
         95:66:1e:6e:08:1f:4c:a4:64:f3:a2:ec:af:48:bd:f0:48:f4:
         07:2a:7a:de:09:3d:cc:fa:64:a0:91:47:b0:a5:70:b7:31:d8:
         49:11:df:84:f3:31:9e:f5:c8:ef:5b:77:b9:e7:52:9c:09:0f:
         ef:0e:1a:ab
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNC28LUpHPw2plymHRIjLvgLhNKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAxM0E0NTRFOUE3MkMyMDdEMTBGNEU0M0RCM0Q4NUEz
MEQ2RjA5QTAeFw0yNDExMDIwMTEwMjJaFw0yNTExMDEwMTE1MjJaMDMxMTAvBgNV
BAMTKDUwMTIzRDFGQkIwMTM4NTBFMUVDNjY0MzRFREQzMjEzMjRBMjc0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRgtElkO+O6fI3b2xW/3tel1V
JdExcl+uI3FTvINt98QYBUROahE3UkLMGJvqpPqlED5j0NVAULjLztFIssJnv1z0
k6NMEzfL3+PlDMUPy5fZLQdytozQEz5WhqSkASyG7Xh3ajZY+nmSygbjfnwRIMHP
FX5l6q1Rktootf0ZOSVp9mdElAeb4Qdlsyr+y0nOqeQPWDjS288BwW3YXMs1FvsR
UpbKTFONTDODKadoaXLs8g7KsBAf7uvnvCNP4mFc/7hVVmEklyrruWmNlZ3JLL2P
BUBmI/5o5do49nr0bzL9Mj+Wec0xYmuR1Iv2ehsPiEnBoPGeBqjn68TfQXCBAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUBI9H7sBOFDh7GZDTt0yEySidJUwHwYDVR0j
BBgwFoAUsBOkVOmnLCB9EPTkPbPYWjDW8JowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1NQTWZVUUFiTEVrczlBd0trajdURmZqZlIzUlVLTDQ1eWdtRnk5QUxk
RWgvMC9CMDEzQTQ1NEU5QTcyQzIwN0QxMEY0RTQzREIzRDg1QTMwRDZGMDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMTNBNDU0RTlBNzJDMjA3
RDEwRjRFNDNEQjNEODVBMzBENkYwOUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dTUE1mVVFBYkxFa3M5QXdLa2o3VEZmamZSM1JVS0w0NXlnbUZ5OUFMZEVoLzAv
MzIzODMwMzQzYTMxNjE2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM2
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGuQwDQYJKoZIhvcNAQELBQADggEBACWrjijnIjoq
rlsR/Q7DXiti+BptRL7tEr2IvbJ4TKykUckoH3hukKJh3NJv8+6Guz3RryCAJc5I
ZWOU1B5o88xfbXLnM04FXs/gX86M1dwpkgWUTjEbZJ5n/Ws+dcBnP7eRjqUmEOXL
gwqoCvByJlyH53F+bn3hBLANuGwg/lh6k66U7EsVV9qDyg8RLCqzOpF8RytidbHn
VCzDdFOC0h4Gzha/DDbMuCvE2u9IsFJUsvF/FO60o8C/FoWvsu2e0spYqS4cHpVm
Hm4IH0ykZPOi7K9IvfBI9Acqet4JPcz6ZKCRR7ClcLcx2EkR34TzMZ71yO9bd7nn
UpwJD+8OGqs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:12 2024 by rpki-client on console-fra.rpki-client.org