Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/323830343a363039633a3a2f33322d3438203d3e20323639313830.roa
File:                     323830343a363039633a3a2f33322d3438203d3e20323639313830.roa (raw, json)
Hash identifier:          EioxO974U1XOYpMcgy3Ihv28yjwB9iJ1tD839o9S0+4=
Subject key identifier:   B0:DF:D1:72:68:BE:E9:C2:20:CF:1A:56:AD:69:D7:23:80:0A:00:9E
Certificate issuer:       /CN=695731EDFF54F578E90830237184310A6E30F74C
Certificate serial:       5DC794F7AD8BB8627E4C6FF0688A10C8002FC59F
Authority key identifier: 69:57:31:ED:FF:54:F5:78:E9:08:30:23:71:84:31:0A:6E:30:F7:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/323830343a363039633a3a2f33322d3438203d3e20323639313830.roa
Signing time:             Thu 04 Apr 2024 17:33:14 +0000
ROA not before:           Thu 04 Apr 2024 17:28:14 +0000
ROA not after:            Thu 03 Apr 2025 17:33:14 +0000
asID:                     269180
IP address blocks:        2804:609c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.crl
                          rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c7:94:f7:ad:8b:b8:62:7e:4c:6f:f0:68:8a:10:c8:00:2f:c5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695731EDFF54F578E90830237184310A6E30F74C
        Validity
            Not Before: Apr  4 17:28:14 2024 GMT
            Not After : Apr  3 17:33:14 2025 GMT
        Subject: CN=B0DFD17268BEE9C220CF1A56AD69D723800A009E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:3f:c6:38:d3:36:91:f7:6e:fa:e9:38:8d:
                    b5:88:b6:54:b2:ba:a9:6a:90:0d:dc:23:1d:45:52:
                    2f:81:d8:a7:28:ca:14:ab:2b:09:fa:f6:6e:2b:e4:
                    69:ab:58:12:64:a4:ed:0e:09:2a:1f:e8:66:55:d5:
                    0b:42:5c:c4:1e:de:17:35:2a:0b:98:8f:34:87:b0:
                    20:3d:55:2e:18:67:ac:11:5a:12:86:13:09:60:91:
                    60:22:6f:c0:19:9a:60:ea:81:01:28:2e:70:65:d3:
                    6a:f1:98:c3:dc:5b:87:9c:fe:f4:be:dd:e5:15:d7:
                    a9:71:c6:7f:c5:df:f6:a7:c9:f8:5e:bb:aa:e9:ce:
                    94:db:d3:85:9b:41:a0:bf:c2:bf:cc:43:22:ad:00:
                    e4:a2:a4:ea:30:1f:bb:4b:35:ec:56:49:41:a1:28:
                    ae:eb:00:18:ae:63:78:9f:e7:7e:1b:b7:1b:7c:d0:
                    81:8c:6e:c7:be:88:bc:6e:d4:0b:d4:13:de:2b:8f:
                    49:7c:9b:87:1a:75:bd:72:9f:8c:bf:5a:3f:93:42:
                    9e:fa:b8:10:53:27:d9:f2:a6:c5:c2:0a:91:1f:c2:
                    d0:66:43:a4:60:98:52:d7:48:ab:b0:dd:80:29:0a:
                    52:6a:c5:b0:f5:f3:70:38:56:88:32:27:4a:d2:16:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DF:D1:72:68:BE:E9:C2:20:CF:1A:56:AD:69:D7:23:80:0A:00:9E
            X509v3 Authority Key Identifier:
                keyid:69:57:31:ED:FF:54:F5:78:E9:08:30:23:71:84:31:0A:6E:30:F7:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/323830343a363039633a3a2f33322d3438203d3e20323639313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:609c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:9e:02:e2:cd:99:fe:1a:f0:d9:57:d1:b2:57:d2:7a:ae:fb:
         c1:1e:9d:7d:9e:09:5a:48:75:2d:91:9b:5b:d6:38:0e:d7:6d:
         0e:73:7d:11:ed:4e:86:7d:c4:7e:26:8f:ed:85:d5:e7:39:a6:
         1a:61:b5:5a:6d:10:f0:c8:14:a1:97:96:fd:28:0e:df:bd:e6:
         40:38:35:41:fe:fb:7a:25:fa:bd:2d:e6:42:ad:89:9f:b4:c2:
         94:78:83:da:83:1a:9a:d1:62:e1:dc:88:7b:3c:2a:f3:f8:39:
         19:e4:50:e8:c8:a9:32:a6:a7:44:9a:61:2d:35:63:57:3c:af:
         f4:87:47:8a:9d:2b:fd:30:70:47:24:68:df:3d:91:74:fa:f6:
         3f:0e:a3:5a:03:28:5e:b9:2f:c2:af:7c:79:66:5c:81:11:00:
         0d:52:2a:91:75:0a:3f:c2:93:ef:7f:39:38:6d:b4:f0:56:29:
         94:f4:34:53:1c:62:a5:d5:24:9c:df:a2:71:53:e1:37:cc:19:
         fd:fa:7d:50:35:0d:6f:70:20:86:e6:a1:0a:2f:6f:3a:78:e2:
         3d:0c:53:8d:c5:f3:01:be:d2:ed:9f:0b:db:8b:07:46:6f:6a:
         64:68:4a:8c:59:8d:bc:20:25:4a:7a:49:98:3e:05:98:a7:b6:
         1e:8c:ed:12
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXceU962LuGJ+TG/waIoQyAAvxZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk1NzMxRURGRjU0RjU3OEU5MDgzMDIzNzE4NDMxMEE2
RTMwRjc0QzAeFw0yNDA0MDQxNzI4MTRaFw0yNTA0MDMxNzMzMTRaMDMxMTAvBgNV
BAMTKEIwREZEMTcyNjhCRUU5QzIyMENGMUE1NkFENjlENzIzODAwQTAwOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nz/GONM2kfdu+uk4jbWItlSy
uqlqkA3cIx1FUi+B2KcoyhSrKwn69m4r5GmrWBJkpO0OCSof6GZV1QtCXMQe3hc1
KguYjzSHsCA9VS4YZ6wRWhKGEwlgkWAib8AZmmDqgQEoLnBl02rxmMPcW4ec/vS+
3eUV16lxxn/F3/anyfheu6rpzpTb04WbQaC/wr/MQyKtAOSipOowH7tLNexWSUGh
KK7rABiuY3if534btxt80IGMbse+iLxu1AvUE94rj0l8m4cadb1yn4y/Wj+TQp76
uBBTJ9nypsXCCpEfwtBmQ6RgmFLXSKuw3YApClJqxbD183A4VogyJ0rSFkQbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsN/Rcmi+6cIgzxpWrWnXI4AKAJ4wHwYDVR0j
BBgwFoAUaVcx7f9U9XjpCDAjcYQxCm4w90wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yUG9aVVRWWGt1YXREVXlNYXRjZlVaQkcySFBadENtZFJ3OVl3RUpF
NGQvMS82OTU3MzFFREZGNTRGNTc4RTkwODMwMjM3MTg0MzEwQTZFMzBGNzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NTczMUVERkY1NEY1NzhF
OTA4MzAyMzcxODQzMTBBNkUzMEY3NEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duMlBvWlVUVlhrdWF0RFV5TWF0Y2ZVWkJHMkhQWnRDbWRSdzlZd0VKRTRkLzEv
MzIzODMwMzQzYTM2MzAzOTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzEzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARgnDANBgkqhkiG9w0BAQsFAAOCAQEAoJ4C4s2Z
/hrw2VfRslfSeq77wR6dfZ4JWkh1LZGbW9Y4DtdtDnN9Ee1Ohn3EfiaP7YXV5zmm
GmG1Wm0Q8MgUoZeW/SgO373mQDg1Qf77eiX6vS3mQq2Jn7TClHiD2oMamtFi4dyI
ezwq8/g5GeRQ6MipMqanRJphLTVjVzyv9IdHip0r/TBwRyRo3z2RdPr2Pw6jWgMo
Xrkvwq98eWZcgREADVIqkXUKP8KT7385OG208FYplPQ0UxxipdUknN+icVPhN8wZ
/fp9UDUNb3AghuahCi9vOnjiPQxTjcXzAb7S7Z8L24sHRm9qZGhKjFmNvCAlSnpJ
mD4FmKe2HoztEg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:33 2024 by rpki-client on console-fra.rpki-client.org