Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3438203d3e20323638343334.roa
File:                     323830343a353132383a3a2f33322d3438203d3e20323638343334.roa (raw, json)
Hash identifier:          T3PRVG2ZLOGJnicZKkCVU0NtEvxhl13vcVojdWvA5QM=
Subject key identifier:   70:8F:80:0C:E5:63:8E:98:FF:70:0F:65:B6:B2:06:90:F6:0C:38:16
Certificate issuer:       /CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
Certificate serial:       07A9E0F15614EC36DEBA860CE7E254F0517A550C
Authority key identifier: C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3438203d3e20323638343334.roa
Signing time:             Fri 19 Apr 2024 22:33:47 +0000
ROA not before:           Fri 19 Apr 2024 22:28:47 +0000
ROA not after:            Fri 18 Apr 2025 22:33:47 +0000
asID:                     268434
IP address blocks:        2804:5128::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl
                          rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a9:e0:f1:56:14:ec:36:de:ba:86:0c:e7:e2:54:f0:51:7a:55:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
        Validity
            Not Before: Apr 19 22:28:47 2024 GMT
            Not After : Apr 18 22:33:47 2025 GMT
        Subject: CN=708F800CE5638E98FF700F65B6B20690F60C3816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:8e:39:7b:b7:55:5d:0d:06:4d:08:96:c0:
                    21:7b:55:a7:97:68:f8:6b:78:f8:59:c9:57:32:a6:
                    31:7e:a8:25:1b:c1:53:3e:bd:cc:4e:76:31:d3:c4:
                    f5:8d:95:c9:3d:bf:fa:d3:95:80:34:c1:7f:2f:33:
                    d4:5d:5b:22:f8:77:b0:83:1a:e2:df:e2:6a:19:7b:
                    18:9a:97:c3:36:eb:4b:98:0a:9d:7d:29:b5:03:2e:
                    8a:13:c2:34:ef:48:07:0e:4a:50:a0:b5:c6:c5:ec:
                    f3:d7:1c:bb:48:85:e6:97:14:39:ff:be:98:6e:28:
                    94:a4:86:cf:44:fc:7a:aa:26:f5:c1:ae:9e:8a:a2:
                    60:f5:5b:16:aa:65:ee:88:b8:bd:06:18:15:09:11:
                    d1:23:a6:b2:27:7b:cb:41:49:c6:49:0c:45:8f:82:
                    3a:1f:99:99:20:86:f7:ef:e7:b3:44:3c:1e:76:35:
                    ac:aa:23:01:d4:ea:bb:4e:fd:ac:7e:c1:4a:45:f7:
                    ca:6c:5b:56:af:45:89:81:3a:f5:d5:dd:37:24:3b:
                    81:42:5f:3e:c4:7b:d4:87:f9:d1:d9:d6:ff:32:45:
                    12:9b:4b:0e:59:22:6b:06:05:9c:a4:f8:df:82:ca:
                    a4:70:d8:3b:f0:96:96:38:f9:76:56:b2:23:fc:eb:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:80:0C:E5:63:8E:98:FF:70:0F:65:B6:B2:06:90:F6:0C:38:16
            X509v3 Authority Key Identifier:
                keyid:C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3438203d3e20323638343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5128::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:d6:ce:cd:f2:a9:27:80:b4:79:75:59:d6:6d:5a:0d:5f:c7:
         5a:48:36:20:9d:19:8e:d2:3d:99:55:58:40:8f:cd:de:a8:f4:
         66:3c:5f:4b:1f:97:4f:0b:c4:2c:67:ac:4b:29:5b:f3:c5:10:
         47:90:65:61:a1:34:9a:6c:2e:16:ef:32:4c:dc:00:f4:f0:a2:
         4f:87:4b:f4:2c:ea:da:3a:ae:06:cb:85:a9:13:29:8e:c5:8f:
         4a:de:2e:24:a5:e5:7b:14:77:1c:c2:4a:33:96:cd:76:4a:fb:
         2f:09:08:6a:5b:bc:94:f5:cd:c4:b9:a3:69:35:58:c8:2c:62:
         aa:e5:75:d6:55:95:7f:f4:ac:45:26:a1:3b:6d:e1:e2:90:07:
         3a:b3:9a:64:84:4b:c3:91:e1:7f:7a:af:ff:08:ed:9c:0a:fc:
         88:58:69:83:fb:70:58:da:3a:43:b6:f0:16:bd:f8:2f:d9:68:
         68:eb:28:17:4d:f9:43:fd:b2:f0:ae:6f:b3:8f:b9:e8:6d:23:
         ee:91:e0:ae:97:4e:8f:a2:8e:51:66:af:c7:38:d4:e1:f8:ae:
         60:e8:cb:7a:17:ea:7f:ec:da:7e:d2:1d:c7:67:58:10:2e:f1:
         30:04:a1:b2:fd:f2:60:72:50:d8:0f:6d:d0:d9:5b:9f:a1:51:
         89:6f:6f:50
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUB6ng8VYU7DbeuoYM5+JU8FF6VQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlBRkRBRkIzQUY3NEE4Q0EwODMyQjA3NjkxNEQ3QTRB
NDQyNTY0ODAeFw0yNDA0MTkyMjI4NDdaFw0yNTA0MTgyMjMzNDdaMDMxMTAvBgNV
BAMTKDcwOEY4MDBDRTU2MzhFOThGRjcwMEY2NUI2QjIwNjkwRjYwQzM4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Ko45e7dVXQ0GTQiWwCF7VaeX
aPhrePhZyVcypjF+qCUbwVM+vcxOdjHTxPWNlck9v/rTlYA0wX8vM9RdWyL4d7CD
GuLf4moZexial8M260uYCp19KbUDLooTwjTvSAcOSlCgtcbF7PPXHLtIheaXFDn/
vphuKJSkhs9E/HqqJvXBrp6KomD1WxaqZe6IuL0GGBUJEdEjprIne8tBScZJDEWP
gjofmZkghvfv57NEPB52NayqIwHU6rtO/ax+wUpF98psW1avRYmBOvXV3TckO4FC
Xz7Ee9SH+dHZ1v8yRRKbSw5ZImsGBZyk+N+CyqRw2DvwlpY4+XZWsiP867kzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcI+ADOVjjpj/cA9ltrIGkPYMOBYwHwYDVR0j
BBgwFoAUya/a+zr3SoyggysHaRTXpKRCVkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FhUFhDR3RORldqOG1DcThCS1djd0VDWWZWMWZVUmJ1YjRqRnkxUEFI
RHIvMC9DOUFGREFGQjNBRjc0QThDQTA4MzJCMDc2OTE0RDdBNEE0NDI1NjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QUZEQUZCM0FGNzRBOENB
MDgzMkIwNzY5MTREN0E0QTQ0MjU2NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dxYVBYQ0d0TkZXajhtQ3E4QktXY3dFQ1lmVjFmVVJidWI0akZ5MVBBSERyLzAv
MzIzODMwMzQzYTM1MzEzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzQzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARRKDANBgkqhkiG9w0BAQsFAAOCAQEAZtbOzfKp
J4C0eXVZ1m1aDV/HWkg2IJ0ZjtI9mVVYQI/N3qj0ZjxfSx+XTwvELGesSylb88UQ
R5BlYaE0mmwuFu8yTNwA9PCiT4dL9Czq2jquBsuFqRMpjsWPSt4uJKXlexR3HMJK
M5bNdkr7LwkIalu8lPXNxLmjaTVYyCxiquV11lWVf/SsRSahO23h4pAHOrOaZIRL
w5Hhf3qv/wjtnAr8iFhpg/twWNo6Q7bwFr34L9loaOsoF035Q/2y8K5vs4+56G0j
7pHgrpdOj6KOUWavxzjU4fiuYOjLehfqf+zaftIdx2dYEC7xMAShsv3yYHJQ2A9t
0Nlbn6FRiW9vUA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:45 2024 by rpki-client on console-ams.rpki-client.org