Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa
File:                     323830343a316163383a3a2f33322d3334203d3e203631383835.roa (raw, json)
Hash identifier:          otWaAQ35cSOPfki3jYAn6BHH5zL3qEFKCvIcTLGK0qU=
Subject key identifier:   64:88:65:FA:11:23:05:89:02:73:23:60:05:A6:11:32:18:52:F0:78
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       196287191E3061064DAB49A7FF34608909159DD0
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa
Signing time:             Mon 03 Jun 2024 18:37:27 +0000
ROA not before:           Mon 03 Jun 2024 18:32:27 +0000
ROA not after:            Mon 02 Jun 2025 18:37:27 +0000
asID:                     61885
IP address blocks:        2804:1ac8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:62:87:19:1e:30:61:06:4d:ab:49:a7:ff:34:60:89:09:15:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Jun  3 18:32:27 2024 GMT
            Not After : Jun  2 18:37:27 2025 GMT
        Subject: CN=648865FA112305890273236005A611321852F078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:bc:de:ac:f7:2b:11:d9:4c:d4:1f:4b:78:
                    df:5e:2d:1a:a5:08:45:c0:1f:b6:1d:2e:2f:31:1d:
                    fc:2b:58:a2:b9:3d:7a:f2:4e:6a:c3:66:11:d4:73:
                    ff:3c:e1:25:68:cf:30:17:19:00:9a:37:20:ea:ea:
                    d4:b3:26:ea:c3:26:95:53:e9:e2:b3:e9:84:4b:4f:
                    3a:06:ad:49:10:83:cf:93:2e:e7:b0:c1:19:71:53:
                    e0:df:83:f3:06:a2:8e:b2:5c:76:74:a0:39:35:76:
                    e4:f6:00:c7:41:c0:80:09:1a:1a:25:70:ca:fa:b2:
                    42:c0:4a:3c:db:8c:04:ce:a9:f5:49:96:3a:b0:f3:
                    85:20:f6:8f:63:f7:73:98:d5:58:89:b1:c3:c9:bc:
                    3b:c6:a7:25:a3:55:4a:38:c5:6d:a0:df:72:40:b7:
                    c5:bc:c9:5f:63:52:cb:c2:13:e9:d2:b6:a8:13:ba:
                    95:93:e2:c8:99:32:a1:32:7b:49:4b:c1:55:60:b0:
                    cf:14:75:6e:0b:9c:9d:e5:2c:cb:41:17:e1:72:27:
                    07:f6:1c:53:6d:6d:5e:21:0d:f9:43:9b:e8:d2:e0:
                    b8:f6:bb:7a:91:7b:7f:57:3d:75:49:30:74:4d:df:
                    50:b6:e2:8f:49:45:6b:3f:df:31:f7:12:de:9c:cc:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:65:FA:11:23:05:89:02:73:23:60:05:A6:11:32:18:52:F0:78
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:da:8f:3b:15:00:d9:20:44:59:70:24:a1:2b:7f:3c:1b:fc:
         04:81:8f:b8:cc:ea:cc:14:ff:9e:8e:42:85:24:a4:01:38:48:
         ee:cf:78:25:24:47:87:50:a1:7c:ef:2e:36:fb:9e:e8:3c:80:
         fb:3b:38:33:e1:78:d8:a9:69:5f:67:2d:6b:62:9e:eb:af:24:
         c4:24:2b:84:f0:da:7f:cf:f1:16:f4:cd:a2:dd:51:0f:3a:1e:
         61:9c:a6:72:7a:b0:19:d2:b2:65:66:08:e4:0f:ae:ed:28:69:
         08:e2:d2:37:e7:94:f0:f2:0f:e4:f2:ac:a5:7d:6a:7d:4b:9c:
         e8:10:7c:ad:8c:19:31:b8:a3:3c:ce:95:ed:19:0a:c3:d0:3d:
         6f:6a:61:0c:38:18:50:f9:6a:10:94:78:20:36:39:7f:27:58:
         fb:96:93:56:9c:83:0d:c4:fb:0e:e6:1f:0b:d9:38:7b:12:92:
         2d:6a:0e:a1:b3:2f:21:e2:ad:28:cf:73:76:82:da:9a:f5:66:
         54:31:4b:37:69:8e:26:a1:6f:1a:c9:61:e2:9b:bc:7a:7e:71:
         d8:f3:34:ad:4e:e8:45:c0:57:e7:4e:53:50:d3:11:3e:80:5a:
         2f:b0:64:8f:67:a3:13:aa:3b:38:c3:17:72:3d:cb:5d:9d:7e:
         d3:17:ed:bd
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUGWKHGR4wYQZNq0mn/zRgiQkVndAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3RkE3NENERkYxRTQ3NTI0Nzk2MDI2NzJGMjZBODgz
QzdBNjA1MjAeFw0yNDA2MDMxODMyMjdaFw0yNTA2MDIxODM3MjdaMDMxMTAvBgNV
BAMTKDY0ODg2NUZBMTEyMzA1ODkwMjczMjM2MDA1QTYxMTMyMTg1MkYwNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WbzerPcrEdlM1B9LeN9eLRql
CEXAH7YdLi8xHfwrWKK5PXryTmrDZhHUc/884SVozzAXGQCaNyDq6tSzJurDJpVT
6eKz6YRLTzoGrUkQg8+TLuewwRlxU+Dfg/MGoo6yXHZ0oDk1duT2AMdBwIAJGhol
cMr6skLASjzbjATOqfVJljqw84Ug9o9j93OY1ViJscPJvDvGpyWjVUo4xW2g33JA
t8W8yV9jUsvCE+nStqgTupWT4siZMqEye0lLwVVgsM8UdW4LnJ3lLMtBF+FyJwf2
HFNtbV4hDflDm+jS4Lj2u3qRe39XPXVJMHRN31C24o9JRWs/3zH3Et6czKPFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUZIhl+hEjBYkCcyNgBaYRMhhS8HgwHwYDVR0j
BBgwFoAUPH+nTN/x5HUkeWAmcvJqiDx6YFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5
ZHQvMC8zQzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0ZBNzRDREZGMUU0NzUy
NDc5NjAyNjcyRjI2QTg4M0M3QTYwNTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hES1NpczdZQU5GdWpyOWRMRUdWZkZnaUdHOTlneVpwUVc3cXZBdGphOWR0LzAv
MzIzODMwMzQzYTMxNjE2MzM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzYzMTM4
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGsgwDQYJKoZIhvcNAQELBQADggEBAAjajzsVANkg
RFlwJKErfzwb/ASBj7jM6swU/56OQoUkpAE4SO7PeCUkR4dQoXzvLjb7nug8gPs7
ODPheNipaV9nLWtinuuvJMQkK4Tw2n/P8Rb0zaLdUQ86HmGcpnJ6sBnSsmVmCOQP
ru0oaQji0jfnlPDyD+TyrKV9an1LnOgQfK2MGTG4ozzOle0ZCsPQPW9qYQw4GFD5
ahCUeCA2OX8nWPuWk1acgw3E+w7mHwvZOHsSki1qDqGzLyHirSjPc3aC2pr1ZlQx
SzdpjiahbxrJYeKbvHp+cdjzNK1O6EXAV+dOU1DTET6AWi+wZI9noxOqOzjDF3I9
y12dftMX7b0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:26:11 2024 by rpki-client on console-fra.rpki-client.org