Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa
File:                     323830343a356331383a3a2f33322d3438203d3e20323638383837.roa (raw, json)
Hash identifier:          p/1lPbUA8ZOVm/D0CyKsbK6CPpoIsVG1ABXyg50xXHw=
Subject key identifier:   BB:5B:E8:E4:B9:7A:4E:F5:5B:A9:79:30:BB:E8:7E:F1:30:34:B5:9E
Certificate issuer:       /CN=931FE6808F2C81EEBE1507919DFA71A7524F4A48
Certificate serial:       5400A3BE69C2B961C54D62AC70AA77CA5F344CDF
Authority key identifier: 93:1F:E6:80:8F:2C:81:EE:BE:15:07:91:9D:FA:71:A7:52:4F:4A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931FE6808F2C81EEBE1507919DFA71A7524F4A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa
Signing time:             Mon 14 Oct 2024 12:54:38 +0000
ROA not before:           Mon 14 Oct 2024 12:49:38 +0000
ROA not after:            Mon 13 Oct 2025 12:54:38 +0000
asID:                     268887
IP address blocks:        2804:5c18::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/931FE6808F2C81EEBE1507919DFA71A7524F4A48.crl
                          rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/931FE6808F2C81EEBE1507919DFA71A7524F4A48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931FE6808F2C81EEBE1507919DFA71A7524F4A48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:00:a3:be:69:c2:b9:61:c5:4d:62:ac:70:aa:77:ca:5f:34:4c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931FE6808F2C81EEBE1507919DFA71A7524F4A48
        Validity
            Not Before: Oct 14 12:49:38 2024 GMT
            Not After : Oct 13 12:54:38 2025 GMT
        Subject: CN=BB5BE8E4B97A4EF55BA97930BBE87EF13034B59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:48:e3:69:ac:da:e0:2f:67:39:c8:f8:3f:
                    4a:bc:b3:4f:a9:96:6a:f5:3f:91:ea:73:c1:94:39:
                    49:cb:75:4a:ff:f6:42:7d:37:6e:67:54:3a:06:0a:
                    7d:47:32:bf:24:cd:de:17:30:3a:85:72:41:9a:54:
                    39:cc:13:7d:64:ce:6a:92:cd:0b:82:ce:e9:cb:f7:
                    88:51:02:6e:59:ad:a5:a5:5d:79:e8:e2:eb:34:d9:
                    cf:dd:11:f9:1c:9b:43:c1:3a:df:25:16:c4:d2:d6:
                    31:99:42:e9:e5:a0:ac:c0:5a:ad:6c:ac:1a:3a:cf:
                    f8:df:b0:be:9d:87:92:96:25:cd:58:0e:95:e8:ba:
                    1a:95:9f:06:9d:62:07:5f:c3:b9:5a:49:d2:83:ae:
                    f0:cf:79:b5:f0:03:65:e0:9d:e4:df:eb:df:f8:b2:
                    ea:cc:f6:9e:ee:7f:62:78:e1:e3:22:0a:5c:cc:be:
                    cf:6c:f1:ae:64:e8:19:d0:37:ae:96:26:fe:b7:b0:
                    9a:09:9c:38:4b:47:61:46:5d:04:b1:3d:81:78:4b:
                    b2:b8:8c:97:a7:94:a1:e4:9a:7c:0e:f6:7d:f9:11:
                    d3:f1:71:6d:41:a3:d0:c5:7b:b9:27:c1:38:f3:1d:
                    b6:66:d9:73:6c:1c:42:2c:8b:bf:65:88:94:e7:c6:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:E8:E4:B9:7A:4E:F5:5B:A9:79:30:BB:E8:7E:F1:30:34:B5:9E
            X509v3 Authority Key Identifier:
                keyid:93:1F:E6:80:8F:2C:81:EE:BE:15:07:91:9D:FA:71:A7:52:4F:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/931FE6808F2C81EEBE1507919DFA71A7524F4A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931FE6808F2C81EEBE1507919DFA71A7524F4A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:df:c9:57:f4:85:aa:24:6f:13:26:91:6e:9b:f2:67:90:14:
         f9:9a:06:a2:cf:08:3b:71:a4:b9:65:c8:8a:a9:58:e0:3d:17:
         e8:fd:64:12:93:ff:4c:e7:64:54:03:a2:ff:ef:cc:12:ad:5c:
         3a:c2:50:1d:0c:15:36:e8:1e:f7:1c:ec:4b:3c:70:df:46:3c:
         33:34:0d:08:4c:3f:dd:6b:96:4a:03:5e:3e:07:91:11:d9:9a:
         b7:2e:f3:12:dd:c0:26:1b:ad:ec:b0:f9:18:7e:94:36:58:40:
         83:61:39:95:8b:59:36:00:8d:3b:f0:6e:a2:9d:33:78:43:78:
         93:b0:46:c4:28:e9:df:ba:c8:ed:a1:bc:c8:e5:00:83:4a:1c:
         99:eb:6c:8b:cb:f4:96:e5:53:e8:08:50:2a:87:3c:de:5e:df:
         58:de:0e:ba:92:f1:77:0c:3f:3e:72:6c:96:c3:21:18:44:16:
         ca:00:c7:c6:7f:52:69:15:7d:37:4d:c4:e3:ce:d7:66:93:58:
         3d:42:63:7e:1d:9d:12:2a:da:fb:8d:37:0b:6c:53:c8:9e:8a:
         fe:fd:0f:a5:70:9b:83:28:0c:c2:ff:d2:c7:90:1f:44:f7:c9:
         6e:4e:8d:54:3c:19:d1:3c:4c:62:5a:f1:c4:68:5b:c7:55:df:
         9c:75:8f:f8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVACjvmnCuWHFTWKscKp3yl80TN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxRkU2ODA4RjJDODFFRUJFMTUwNzkxOURGQTcxQTc1
MjRGNEE0ODAeFw0yNDEwMTQxMjQ5MzhaFw0yNTEwMTMxMjU0MzhaMDMxMTAvBgNV
BAMTKEJCNUJFOEU0Qjk3QTRFRjU1QkE5NzkzMEJCRTg3RUYxMzAzNEI1OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8Ejjaaza4C9nOcj4P0q8s0+p
lmr1P5Hqc8GUOUnLdUr/9kJ9N25nVDoGCn1HMr8kzd4XMDqFckGaVDnME31kzmqS
zQuCzunL94hRAm5ZraWlXXno4us02c/dEfkcm0PBOt8lFsTS1jGZQunloKzAWq1s
rBo6z/jfsL6dh5KWJc1YDpXouhqVnwadYgdfw7laSdKDrvDPebXwA2XgneTf69/4
surM9p7uf2J44eMiClzMvs9s8a5k6BnQN66WJv63sJoJnDhLR2FGXQSxPYF4S7K4
jJenlKHkmnwO9n35EdPxcW1Bo9DFe7knwTjzHbZm2XNsHEIsi79liJTnxjKPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUu1vo5Ll6TvVbqXkwu+h+8TA0tZ4wHwYDVR0j
BBgwFoAUkx/mgI8sge6+FQeRnfpxp1JPSkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1ZpZEZ2QXFScU5BbW9taWpBZnhmenpwRXR0djdzUTMzSllEQng4WDh4
ZXAvMC85MzFGRTY4MDhGMkM4MUVFQkUxNTA3OTE5REZBNzFBNzUyNEY0QTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMUZFNjgwOEYyQzgxRUVC
RTE1MDc5MTlERkE3MUE3NTI0RjRBNDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWaWRGdkFxUnFOQW1vbWlqQWZ4Znp6cEV0dHY3c1EzM0pZREJ4OFg4eGVwLzAv
MzIzODMwMzQzYTM1NjMzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARcGDANBgkqhkiG9w0BAQsFAAOCAQEAZt/JV/SF
qiRvEyaRbpvyZ5AU+ZoGos8IO3GkuWXIiqlY4D0X6P1kEpP/TOdkVAOi/+/MEq1c
OsJQHQwVNuge9xzsSzxw30Y8MzQNCEw/3WuWSgNePgeREdmaty7zEt3AJhut7LD5
GH6UNlhAg2E5lYtZNgCNO/Buop0zeEN4k7BGxCjp37rI7aG8yOUAg0ocmetsi8v0
luVT6AhQKoc83l7fWN4OupLxdww/PnJslsMhGEQWygDHxn9SaRV9N03E487XZpNY
PUJjfh2dEira+403C2xTyJ6K/v0PpXCbgygMwv/Sx5AfRPfJbk6NVDwZ0TxMYlrx
xGhbx1XfnHWP+A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:51 2024 by rpki-client on console-fra.rpki-client.org