Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/323830343a353930633a3a2f33322d3332203d3e20323638313636.roa
File:                     323830343a353930633a3a2f33322d3332203d3e20323638313636.roa (raw, json)
Hash identifier:          D/iyPFfl5iccUiCT1Gchl/5GbbujHUm6QVDfI/LWK0g=
Subject key identifier:   AD:D0:62:95:AB:5C:5B:FA:62:52:F4:FA:7B:0F:E1:08:43:2E:05:48
Certificate issuer:       /CN=944D7F16EF33CF24B63038B95B06199620AA80DB
Certificate serial:       391F3D943517C522507AFB928D6353AD69DB53D8
Authority key identifier: 94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/323830343a353930633a3a2f33322d3332203d3e20323638313636.roa
Signing time:             Mon 18 Nov 2024 18:12:54 +0000
ROA not before:           Mon 18 Nov 2024 18:07:54 +0000
ROA not after:            Mon 17 Nov 2025 18:12:54 +0000
asID:                     268166
IP address blocks:        2804:590c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.crl
                          rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1f:3d:94:35:17:c5:22:50:7a:fb:92:8d:63:53:ad:69:db:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944D7F16EF33CF24B63038B95B06199620AA80DB
        Validity
            Not Before: Nov 18 18:07:54 2024 GMT
            Not After : Nov 17 18:12:54 2025 GMT
        Subject: CN=ADD06295AB5C5BFA6252F4FA7B0FE108432E0548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:65:14:27:59:5a:b7:1a:e7:5c:04:35:a7:
                    fc:66:95:2a:1d:36:e9:e9:b0:82:91:30:f1:09:6f:
                    f4:c7:7d:b5:62:36:f8:f7:36:ce:63:b0:cf:15:7f:
                    4d:67:19:24:59:58:42:ca:da:90:e1:61:34:51:3f:
                    db:39:4c:cc:99:0a:01:d7:f1:16:a4:c7:0f:c3:82:
                    f0:76:dc:10:cc:d6:39:80:9e:e2:e4:c6:4f:a2:f8:
                    e9:0f:ff:97:f0:b0:ea:97:fd:59:7b:9d:03:b6:04:
                    f2:d7:06:fe:35:08:68:85:a6:cc:92:73:f8:3f:59:
                    7c:eb:f7:07:6b:82:c3:d6:4c:02:f6:4e:cc:97:ac:
                    3e:09:5b:bc:52:62:24:fe:f1:77:1f:5b:49:a8:a5:
                    93:bd:28:1e:ad:aa:98:c8:97:ce:a9:20:a9:c6:12:
                    5d:20:d3:ea:bb:b6:b4:67:cd:e1:d8:43:f5:e9:d9:
                    00:6d:30:31:cb:01:5d:9e:be:93:29:d7:a2:83:9e:
                    83:cc:ab:c9:9a:d4:6d:66:28:d6:80:f9:5f:47:7f:
                    e5:71:87:9c:e9:6f:b3:f1:b6:f3:9d:bb:ad:6b:33:
                    79:99:a0:81:cd:29:26:8f:d4:b5:ad:87:f4:e5:59:
                    fa:47:1a:3f:22:d5:42:4c:0c:21:f5:b7:c9:c4:80:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:62:95:AB:5C:5B:FA:62:52:F4:FA:7B:0F:E1:08:43:2E:05:48
            X509v3 Authority Key Identifier:
                keyid:94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/323830343a353930633a3a2f33322d3332203d3e20323638313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:590c::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:67:0e:5c:5c:aa:45:ba:dc:3d:7b:77:01:6c:53:3c:69:
         93:65:14:ef:6a:8a:01:a6:65:d0:9a:61:f6:c9:5c:96:dc:4f:
         65:63:28:4e:fc:2a:c3:5a:3f:05:2b:81:63:50:eb:bb:c8:5d:
         de:ac:27:e7:2a:47:79:44:a3:39:b9:fc:a3:c2:8c:3b:f3:7c:
         01:55:f7:8d:6b:20:2d:37:22:1e:52:73:92:a0:03:ec:03:90:
         de:61:a5:d1:7b:d9:c6:9a:ca:53:5a:b4:8e:54:b7:75:4d:11:
         a3:e0:11:b1:e1:ff:fe:06:30:e8:32:93:70:05:cd:56:f1:e7:
         b8:29:11:b7:15:16:07:eb:00:f2:2f:79:04:f4:a7:69:09:25:
         b4:99:7a:81:67:20:0b:97:ad:21:de:ea:ec:53:cf:98:b0:7e:
         9f:29:7c:d5:8f:2e:81:4e:79:8b:d6:d3:b4:f4:aa:13:af:4f:
         4e:37:bb:48:1c:7b:02:18:8f:cf:6a:53:c1:26:c6:53:c3:d0:
         32:95:0e:1b:6c:5c:2b:2c:b5:d6:ff:c2:bf:f0:61:09:25:5a:
         f3:53:c4:ec:f3:ea:ea:4c:40:2e:45:7e:8f:75:c7:3e:98:a7:
         ec:c5:31:7c:3f:10:73:b2:73:c0:7c:b1:67:c2:16:56:6a:04:
         22:58:62:75
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOR89lDUXxSJQevuSjWNTrWnbU9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0RDdGMTZFRjMzQ0YyNEI2MzAzOEI5NUIwNjE5OTYy
MEFBODBEQjAeFw0yNDExMTgxODA3NTRaFw0yNTExMTcxODEyNTRaMDMxMTAvBgNV
BAMTKEFERDA2Mjk1QUI1QzVCRkE2MjUyRjRGQTdCMEZFMTA4NDMyRTA1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2i2UUJ1latxrnXAQ1p/xmlSod
NunpsIKRMPEJb/THfbViNvj3Ns5jsM8Vf01nGSRZWELK2pDhYTRRP9s5TMyZCgHX
8Rakxw/DgvB23BDM1jmAnuLkxk+i+OkP/5fwsOqX/Vl7nQO2BPLXBv41CGiFpsyS
c/g/WXzr9wdrgsPWTAL2TsyXrD4JW7xSYiT+8XcfW0mopZO9KB6tqpjIl86pIKnG
El0g0+q7trRnzeHYQ/Xp2QBtMDHLAV2evpMp16KDnoPMq8ma1G1mKNaA+V9Hf+Vx
h5zpb7PxtvOdu61rM3mZoIHNKSaP1LWth/TlWfpHGj8i1UJMDCH1t8nEgMWHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrdBilatcW/piUvT6ew/hCEMuBUgwHwYDVR0j
BBgwFoAUlE1/Fu8zzyS2MDi5WwYZliCqgNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BDS1RTVlZWSmN2YnlVd29MQjV6YVFhbjh3M3hUUkFGYmdhNWN2U1Zi
UWsvMi85NDREN0YxNkVGMzNDRjI0QjYzMDM4Qjk1QjA2MTk5NjIwQUE4MERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0NEQ3RjE2RUYzM0NGMjRC
NjMwMzhCOTVCMDYxOTk2MjBBQTgwREIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwQ0tUU1ZWVkpjdmJ5VXdvTEI1emFRYW44dzN4VFJBRmJnYTVjdlNWYlFrLzIv
MzIzODMwMzQzYTM1MzkzMDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARZDDANBgkqhkiG9w0BAQsFAAOCAQEAhrJnDlxc
qkW63D17dwFsUzxpk2UU72qKAaZl0Jph9slcltxPZWMoTvwqw1o/BSuBY1Dru8hd
3qwn5ypHeUSjObn8o8KMO/N8AVX3jWsgLTciHlJzkqAD7AOQ3mGl0XvZxprKU1q0
jlS3dU0Ro+ARseH//gYw6DKTcAXNVvHnuCkRtxUWB+sA8i95BPSnaQkltJl6gWcg
C5etId7q7FPPmLB+nyl81Y8ugU55i9bTtPSqE69PTje7SBx7AhiPz2pTwSbGU8PQ
MpUOG2xcKyy11v/Cv/BhCSVa81PE7PPq6kxALkV+j3XHPpin7MUxfD8Qc7JzwHyx
Z8IWVmoEIlhidQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:09 2024 by rpki-client on console-ams.rpki-client.org