Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa
File:                     323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (raw, json)
Hash identifier:          A1PMyZxiuYZlGUjb39mzmo331DdKeYIAQRlTKUTBVd8=
Subject key identifier:   F1:39:5E:53:FF:B4:59:10:2A:1C:0D:2E:23:99:64:6C:70:E9:E5:6A
Certificate issuer:       /CN=62C6D96B0353576AEDABEF468623ACB8BB355EB2
Certificate serial:       046CEA49121830DE1F132E8349C505BD9B6094F7
Authority key identifier: 62:C6:D9:6B:03:53:57:6A:ED:AB:EF:46:86:23:AC:B8:BB:35:5E:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa
Signing time:             Thu 04 Apr 2024 23:20:48 +0000
ROA not before:           Thu 04 Apr 2024 23:15:48 +0000
ROA not after:            Thu 03 Apr 2025 23:20:48 +0000
asID:                     268355
IP address blocks:        2804:4fe0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6c:ea:49:12:18:30:de:1f:13:2e:83:49:c5:05:bd:9b:60:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C6D96B0353576AEDABEF468623ACB8BB355EB2
        Validity
            Not Before: Apr  4 23:15:48 2024 GMT
            Not After : Apr  3 23:20:48 2025 GMT
        Subject: CN=F1395E53FFB459102A1C0D2E2399646C70E9E56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:7c:bd:c3:67:f8:36:aa:4f:ed:22:a5:36:
                    95:41:96:56:cb:9e:35:cc:9f:28:39:a2:97:27:b8:
                    16:27:4d:dd:df:2f:5d:42:ce:24:8a:13:da:3a:93:
                    49:82:be:a1:7e:f7:4c:12:2d:22:ef:b6:b5:3e:cc:
                    d1:0d:49:19:10:df:86:a9:72:a6:a5:f4:44:a9:7c:
                    b8:d5:8d:83:e8:f8:15:48:a9:e9:98:0a:ef:e4:2c:
                    6f:1d:9c:48:9e:76:4d:f0:79:f3:4f:92:c2:16:fc:
                    cb:1a:b3:5a:5a:05:c9:55:14:5d:fe:c6:16:0b:ef:
                    87:d0:5f:40:61:1a:4e:e3:6d:ee:66:8d:ec:f5:ca:
                    56:87:7f:91:52:fd:bf:5d:6c:0b:62:f1:85:2c:5e:
                    ae:95:9d:69:02:d2:84:d0:43:5e:7e:86:a6:66:2c:
                    af:66:51:d0:07:5b:05:cd:33:04:fa:f3:4b:72:36:
                    d9:37:ce:a2:b5:c8:6b:f0:27:35:fb:6f:b0:f5:3f:
                    03:31:a2:63:bf:81:6a:33:16:3c:d9:18:30:61:19:
                    e0:c4:82:e6:00:8d:e4:07:fe:81:16:36:58:84:62:
                    4e:4b:1b:f6:ab:d6:d7:93:00:2f:27:c3:e1:ad:ba:
                    0d:9e:71:da:70:98:1b:41:05:d3:12:3b:6d:f7:68:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:39:5E:53:FF:B4:59:10:2A:1C:0D:2E:23:99:64:6C:70:E9:E5:6A
            X509v3 Authority Key Identifier:
                keyid:62:C6:D9:6B:03:53:57:6A:ED:AB:EF:46:86:23:AC:B8:BB:35:5E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe0::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:ce:7f:ce:57:22:d4:7d:b2:49:e1:d0:df:96:e3:be:c4:
         7c:8d:91:bd:4f:2e:ee:f9:04:9e:7a:5c:5b:80:cf:f3:b1:95:
         7a:6a:aa:ca:9c:43:7f:8f:ae:f5:27:19:77:d7:60:c8:a2:3e:
         d1:b6:b1:71:f3:89:9d:04:29:33:83:1e:35:8d:91:a4:a4:51:
         86:50:6d:75:d3:09:6f:6b:a1:e9:fb:af:7f:b7:f8:0c:7f:d7:
         48:87:b2:62:33:23:2d:8d:d6:1c:1f:af:2a:ba:3f:bc:cb:54:
         05:7c:63:1a:bd:32:5a:33:be:38:e5:92:01:41:a3:41:9c:87:
         ac:e4:cd:e5:55:4f:46:a1:28:f7:66:15:38:3b:92:e6:d8:3b:
         f3:8c:9c:3c:98:b7:d0:55:5a:94:fb:03:70:96:ff:22:37:f0:
         4e:34:53:26:3b:b4:81:9b:41:b3:9e:e8:38:5c:3f:49:58:c2:
         a0:05:ea:52:cc:8e:bc:b2:4c:3b:20:20:19:3d:46:d8:1c:d3:
         83:9f:6c:ee:63:10:52:5f:7f:3c:2e:3b:bd:21:6d:08:0e:10:
         bf:e4:53:d2:85:9e:7b:ab:60:22:1c:ca:15:0c:6b:66:6b:cc:
         60:4e:80:3d:79:23:2e:b4:1f:1d:76:57:9c:d8:8f:88:b9:72:
         5b:d3:f2:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBGzqSRIYMN4fEy6DScUFvZtglPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJDNkQ5NkIwMzUzNTc2QUVEQUJFRjQ2ODYyM0FDQjhC
QjM1NUVCMjAeFw0yNDA0MDQyMzE1NDhaFw0yNTA0MDMyMzIwNDhaMDMxMTAvBgNV
BAMTKEYxMzk1RTUzRkZCNDU5MTAyQTFDMEQyRTIzOTk2NDZDNzBFOUU1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt7ny9w2f4NqpP7SKlNpVBllbL
njXMnyg5opcnuBYnTd3fL11CziSKE9o6k0mCvqF+90wSLSLvtrU+zNENSRkQ34ap
cqal9ESpfLjVjYPo+BVIqemYCu/kLG8dnEiedk3wefNPksIW/Msas1paBclVFF3+
xhYL74fQX0BhGk7jbe5mjez1ylaHf5FS/b9dbAti8YUsXq6VnWkC0oTQQ15+hqZm
LK9mUdAHWwXNMwT680tyNtk3zqK1yGvwJzX7b7D1PwMxomO/gWozFjzZGDBhGeDE
guYAjeQH/oEWNliEYk5LG/ar1teTAC8nw+Gtug2ecdpwmBtBBdMSO233aM8hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8TleU/+0WRAqHA0uI5lkbHDp5WowHwYDVR0j
BBgwFoAUYsbZawNTV2rtq+9GhiOsuLs1XrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0
aTkvMS82MkM2RDk2QjAzNTM1NzZBRURBQkVGNDY4NjIzQUNCOEJCMzU1RUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyQzZEOTZCMDM1MzU3NkFF
REFCRUY0Njg2MjNBQ0I4QkIzNTVFQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyTlR3S1ZkZW5UUks3ZFhWUGNDMzFTcFJyVEhReWl3RXZ5WGhRVUJZdGk5LzEv
MzIzODMwMzQzYTM0NjY2NTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARP4AAwDQYJKoZIhvcNAQELBQADggEBAFa1zn/O
VyLUfbJJ4dDfluO+xHyNkb1PLu75BJ56XFuAz/OxlXpqqsqcQ3+PrvUnGXfXYMii
PtG2sXHziZ0EKTODHjWNkaSkUYZQbXXTCW9roen7r3+3+Ax/10iHsmIzIy2N1hwf
ryq6P7zLVAV8Yxq9MlozvjjlkgFBo0Gch6zkzeVVT0ahKPdmFTg7kubYO/OMnDyY
t9BVWpT7A3CW/yI38E40UyY7tIGbQbOe6DhcP0lYwqAF6lLMjryyTDsgIBk9Rtgc
04OfbO5jEFJffzwuO70hbQgOEL/kU9KFnnurYCIcyhUMa2ZrzGBOgD15Iy60Hx12
V5zYj4i5clvT8gE=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:59 2024 by rpki-client on console-ams.rpki-client.org