Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3438203d3e20323639323139.roa
File:                     323830343a363133303a3a2f33322d3438203d3e20323639323139.roa (raw, json)
Hash identifier:          FHfF3WisFuzqJ6Q4+6XQvRYX7oha5auMHA9tUHC9AQ4=
Subject key identifier:   90:DC:C2:94:EB:5F:1F:38:6E:1E:84:0B:2F:C5:89:98:93:31:E7:E2
Certificate issuer:       /CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Certificate serial:       5581065DE70F3EFB19855304D418684831203125
Authority key identifier: 97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3438203d3e20323639323139.roa
Signing time:             Tue 23 Apr 2024 17:53:01 +0000
ROA not before:           Tue 23 Apr 2024 17:48:01 +0000
ROA not after:            Tue 22 Apr 2025 17:53:01 +0000
asID:                     269219
IP address blocks:        2804:6130::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
                          rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:81:06:5d:e7:0f:3e:fb:19:85:53:04:d4:18:68:48:31:20:31:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
        Validity
            Not Before: Apr 23 17:48:01 2024 GMT
            Not After : Apr 22 17:53:01 2025 GMT
        Subject: CN=90DCC294EB5F1F386E1E840B2FC589989331E7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:13:b3:84:cb:81:f4:1e:10:70:6f:16:28:
                    18:76:1b:86:69:59:d2:f4:58:bd:e6:0d:8a:8a:84:
                    68:57:41:d0:73:cc:56:b4:99:c0:b1:9d:0b:6a:5f:
                    33:e3:db:71:82:2a:2d:02:32:de:3c:12:8e:97:bf:
                    ad:ff:43:a6:ac:b2:56:be:26:22:7a:78:43:dd:88:
                    bd:9b:82:24:c5:eb:16:7e:c9:bd:a3:59:fb:59:64:
                    c8:4b:b5:0b:ba:22:ab:fb:4b:3b:2c:01:fd:4d:fc:
                    9d:68:5f:88:08:f0:35:0f:e4:f9:24:eb:32:dd:ae:
                    f5:df:f4:a7:d3:00:28:80:ec:31:45:e5:0d:6e:f8:
                    6d:8d:c6:b1:af:12:3d:d7:10:4a:2b:f0:be:32:bb:
                    cc:69:db:28:0d:08:b7:84:13:96:f3:4f:63:33:86:
                    f6:90:3b:3f:9c:b6:8c:e0:5d:6a:cd:25:6c:aa:85:
                    1f:f2:b5:8e:b4:cc:a9:21:12:28:5a:34:1e:4c:08:
                    cd:5f:3d:d7:2c:14:3c:63:c3:58:a9:37:c7:bd:ff:
                    ea:48:0b:a7:37:82:b9:df:da:74:33:1e:63:cb:df:
                    d0:de:7f:fa:35:93:21:a6:89:fb:4c:de:04:9e:32:
                    e3:eb:05:b7:58:de:9c:b2:e2:9d:d3:ca:e3:3b:31:
                    e6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:C2:94:EB:5F:1F:38:6E:1E:84:0B:2F:C5:89:98:93:31:E7:E2
            X509v3 Authority Key Identifier:
                keyid:97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3438203d3e20323639323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6130::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:71:7c:7a:99:1b:48:8f:ed:e7:70:7b:81:74:d4:c4:70:f8:
         12:ee:c4:e4:a7:d9:d0:68:d7:b4:89:81:cb:11:6b:05:83:b5:
         3f:61:ca:f9:83:74:7b:af:1f:6e:26:7b:64:1b:cc:f1:e2:05:
         f7:91:17:57:86:a7:6d:4c:a6:31:fa:1a:fb:30:6a:85:98:fc:
         75:60:d4:7c:f0:cc:e4:5c:be:54:24:30:88:9c:45:c3:6e:02:
         da:83:7c:3e:b0:f0:b5:f3:c4:2e:ff:16:e1:81:3e:16:b9:ad:
         68:7d:8b:32:2e:16:2e:70:cb:05:49:6b:c9:a3:d4:62:b7:ef:
         ca:74:97:f4:29:b2:44:21:42:3b:72:d2:c8:3d:d7:7d:43:17:
         e8:35:7f:0c:7b:72:40:54:2e:28:73:c3:ea:f8:af:f0:fa:35:
         29:c2:b6:ce:cd:d1:5e:23:c7:99:ea:fe:f4:56:9d:da:95:44:
         63:ee:07:46:65:77:51:80:97:4b:99:19:33:75:49:2a:11:44:
         92:48:ae:42:41:5d:60:66:8e:03:24:91:aa:53:ac:24:21:73:
         51:42:0e:2e:a3:18:3d:01:ad:0f:58:82:6e:21:32:fe:1a:a2:
         e9:0e:40:6d:8d:a5:df:fb:a4:00:8d:88:c4:bf:68:d0:d6:9f:
         d0:36:a4:05
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVYEGXecPPvsZhVME1BhoSDEgMSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc3MEQ3NDREQTU2RjkyOTVBOUM5QjJGMTJBQ0NCOURD
QUI2N0NFOTAeFw0yNDA0MjMxNzQ4MDFaFw0yNTA0MjIxNzUzMDFaMDMxMTAvBgNV
BAMTKDkwRENDMjk0RUI1RjFGMzg2RTFFODQwQjJGQzU4OTk4OTMzMUU3RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+hOzhMuB9B4QcG8WKBh2G4Zp
WdL0WL3mDYqKhGhXQdBzzFa0mcCxnQtqXzPj23GCKi0CMt48Eo6Xv63/Q6assla+
JiJ6eEPdiL2bgiTF6xZ+yb2jWftZZMhLtQu6Iqv7SzssAf1N/J1oX4gI8DUP5Pkk
6zLdrvXf9KfTACiA7DFF5Q1u+G2NxrGvEj3XEEor8L4yu8xp2ygNCLeEE5bzT2Mz
hvaQOz+ctozgXWrNJWyqhR/ytY60zKkhEihaNB5MCM1fPdcsFDxjw1ipN8e9/+pI
C6c3grnf2nQzHmPL39Def/o1kyGmiftM3gSeMuPrBbdY3pyy4p3TyuM7Mea3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkNzClOtfHzhuHoQLL8WJmJMx5+IwHwYDVR0j
BBgwFoAUl3DXRNpW+SlanJsvEqzLncq2fOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2hXYU5IUTJ2bjg1YzdqTG9EVHZnY01raUN4NWJwdEJKQjJ3YlJIRTZ6
NlovMS85NzcwRDc0NERBNTZGOTI5NUE5QzlCMkYxMkFDQ0I5RENBQjY3Q0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NzBENzQ0REE1NkY5Mjk1
QTlDOUIyRjEyQUNDQjlEQ0FCNjdDRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0doV2FOSFEydm44NWM3akxvRFR2Z2NNa2lDeDVicHRCSkIyd2JSSEU2ejZaLzEv
MzIzODMwMzQzYTM2MzEzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzIzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARhMDANBgkqhkiG9w0BAQsFAAOCAQEACHF8epkb
SI/t53B7gXTUxHD4Eu7E5KfZ0GjXtImByxFrBYO1P2HK+YN0e68fbiZ7ZBvM8eIF
95EXV4anbUymMfoa+zBqhZj8dWDUfPDM5Fy+VCQwiJxFw24C2oN8PrDwtfPELv8W
4YE+FrmtaH2LMi4WLnDLBUlryaPUYrfvynSX9CmyRCFCO3LSyD3XfUMX6DV/DHty
QFQuKHPD6viv8Po1KcK2zs3RXiPHmer+9Fad2pVEY+4HRmV3UYCXS5kZM3VJKhFE
kkiuQkFdYGaOAySRqlOsJCFzUUIOLqMYPQGtD1iCbiEy/hqi6Q5AbY2l3/ukAI2I
xL9o0Naf0DakBQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org