Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/323830343a313066633a3a2f33322d3438203d3e20323633363536.roa
File:                     323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (raw, json)
Hash identifier:          5fh6hGTrXpNRQLqWtZuiTy+DTijp3G/PKQzoIuFu6zk=
Subject key identifier:   6B:60:54:A4:32:6C:F1:C3:5E:3B:88:63:96:60:9D:91:4F:EA:EF:8F
Certificate issuer:       /CN=652C747C27E6032DB35E33D140A8860A69786CD4
Certificate serial:       46BA469A7C2FA6ACD2ED0973B30705A445A09501
Authority key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/323830343a313066633a3a2f33322d3438203d3e20323633363536.roa
Signing time:             Fri 26 Jul 2024 19:16:29 +0000
ROA not before:           Fri 26 Jul 2024 19:11:29 +0000
ROA not after:            Fri 25 Jul 2025 19:16:29 +0000
asID:                     263656
IP address blocks:        2804:10fc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ba:46:9a:7c:2f:a6:ac:d2:ed:09:73:b3:07:05:a4:45:a0:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652C747C27E6032DB35E33D140A8860A69786CD4
        Validity
            Not Before: Jul 26 19:11:29 2024 GMT
            Not After : Jul 25 19:16:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:0d:5a:e5:4d:23:a5:fb:5a:e7:4b:7c:07:
                    b8:4d:e6:b2:a8:9a:60:17:85:58:1d:41:a8:46:25:
                    87:8a:c4:d9:1d:14:92:bc:97:cc:33:ab:77:e8:5a:
                    82:1c:84:1d:0a:8b:a8:e2:df:dc:5c:1b:79:29:4d:
                    5a:8d:49:46:86:ec:01:05:17:71:3c:fa:03:70:9e:
                    80:36:f1:7f:6b:35:67:88:37:28:d0:3c:7f:8c:7b:
                    0f:26:c9:af:d9:03:db:46:ce:de:26:49:84:46:70:
                    ac:68:17:ff:5e:46:77:6f:05:b2:4f:6b:55:c0:67:
                    4d:da:c0:17:a6:ea:f0:ca:01:6f:b5:3a:20:9b:b2:
                    6b:a8:22:cf:43:c7:3d:83:85:ba:d6:50:14:7d:82:
                    0f:83:f3:01:d2:34:e1:e3:3b:91:27:e7:77:2d:0a:
                    4b:1d:36:a5:9a:9a:26:2f:8f:7d:d7:a4:d5:e4:33:
                    c9:13:73:cf:93:d9:dc:24:49:a6:99:bd:5c:da:b3:
                    50:d5:d1:db:aa:0f:35:f9:84:75:ab:8c:5f:6a:0d:
                    b7:23:bd:e0:88:3e:d4:35:b0:80:f9:f3:59:a4:eb:
                    d4:95:55:73:78:60:e6:f4:6c:7c:06:57:7b:a2:c9:
                    0e:31:97:81:0b:64:dc:55:b9:90:1f:6c:0e:ab:1f:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:60:54:A4:32:6C:F1:C3:5E:3B:88:63:96:60:9D:91:4F:EA:EF:8F
            X509v3 Authority Key Identifier:
                keyid:65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/323830343a313066633a3a2f33322d3438203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:65:73:25:b0:6e:b1:99:34:84:08:d4:55:76:f0:15:26:
         52:a8:fa:fa:bf:0e:45:c3:c8:48:62:6d:06:f0:4d:35:c0:ed:
         0f:57:f0:2d:96:89:a3:cc:21:0b:26:03:71:a9:f4:b2:b0:ef:
         32:6d:0c:b7:61:2f:2a:3f:d5:eb:35:09:6c:b5:6b:8d:e3:44:
         7e:b8:8a:17:8a:50:17:5b:4e:53:95:2d:9f:2b:b7:f9:9d:6a:
         ca:0b:38:52:1e:4d:9f:ce:dd:e7:04:f2:64:50:d4:08:9b:89:
         60:b7:63:ef:bf:bf:af:cb:d4:87:b2:8a:c4:10:94:22:3e:9c:
         60:eb:44:fd:0e:d6:1d:6f:88:5a:d2:49:7d:4f:b9:d5:d2:ea:
         30:b7:6e:8f:f8:65:05:03:de:04:08:58:5d:ee:d6:89:b5:19:
         25:30:8b:a8:7d:5e:c2:a7:44:af:d4:46:1f:98:b4:28:d8:dd:
         a5:a3:f0:47:b2:66:bf:14:e3:e2:46:aa:a0:5b:a0:a1:28:bc:
         5d:e9:d4:95:35:96:fb:5d:ba:a6:ef:e9:e8:48:8a:8f:5e:45:
         bb:67:62:0f:88:41:48:1c:a1:5f:bc:94:2d:cf:04:7f:5d:00:
         12:2e:40:01:31:03:e0:a4:34:ae:f5:d4:d4:69:cb:5e:05:1c:
         19:00:d5:18
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIURrpGmnwvpqzS7QlzswcFpEWglQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUyQzc0N0MyN0U2MDMyREIzNUUzM0QxNDBBODg2MEE2
OTc4NkNENDAeFw0yNDA3MjYxOTExMjlaFw0yNTA3MjUxOTE2MjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQ4NTBENUFFNTREMjNBNUZC
NUFFNzRCN0MwN0I4NERFNkIyQTg5QTYwMTc4NTU4MUQ0MUE4NDYyNTg3OEFDNEQ5
MUQxNDkyQkM5N0NDMzNBQjc3RTg1QTgyMUM4NDFEMEE4QkE4RTJERkRDNUMxQjc5
Mjk0RDVBOEQ0OTQ2ODZFQzAxMDUxNzcxM0NGQTAzNzA5RTgwMzZGMTdGNkIzNTY3
ODgzNzI4RDAzQzdGOEM3QjBGMjZDOUFGRDkwM0RCNDZDRURFMjY0OTg0NDY3MEFD
NjgxN0ZGNUU0Njc3NkYwNUIyNEY2QjU1QzA2NzREREFDMDE3QTZFQUYwQ0EwMTZG
QjUzQTIwOUJCMjZCQTgyMkNGNDNDNzNEODM4NUJBRDY1MDE0N0Q4MjBGODNGMzAx
RDIzNEUxRTMzQjkxMjdFNzc3MkQwQTRCMUQzNkE1OUE5QTI2MkY4RjdERDdBNEQ1
RTQzM0M5MTM3M0NGOTNEOURDMjQ0OUE2OTlCRDVDREFCMzUwRDVEMURCQUEwRjM1
Rjk4NDc1QUI4QzVGNkEwREI3MjNCREUwODgzRUQ0MzVCMDgwRjlGMzU5QTRFQkQ0
OTU1NTczNzg2MEU2RjQ2QzdDMDY1NzdCQTJDOTBFMzE5NzgxMEI2NERDNTVCOTkw
MUY2QzBFQUIxRjA5RUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvYUNWuVNI6X7WudLfAe4TeayqJpgF4VYHUGoRiWHisTZHRSSvJfM
M6t36FqCHIQdCouo4t/cXBt5KU1ajUlGhuwBBRdxPPoDcJ6ANvF/azVniDco0Dx/
jHsPJsmv2QPbRs7eJkmERnCsaBf/XkZ3bwWyT2tVwGdN2sAXpurwygFvtTogm7Jr
qCLPQ8c9g4W61lAUfYIPg/MB0jTh4zuRJ+d3LQpLHTalmpomL49916TV5DPJE3PP
k9ncJEmmmb1c2rNQ1dHbqg81+YR1q4xfag23I73giD7UNbCA+fNZpOvUlVVzeGDm
9Gx8Bld7oskOMZeBC2TcVbmQH2wOqx8J6wIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FGtgVKQybPHDXjuIY5ZgnZFP6u+PMB8GA1UdIwQYMBaAFGUsdHwn5gMts14z0UCo
hgppeGzUMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS2lFa1A1enkyZG52eHAz
WmVHZEcxYVBBaEE2czVaWXhqdUpZaDh2Q1ZCeC8xLzY1MkM3NDdDMjdFNjAzMkRC
MzVFMzNEMTQwQTg4NjBBNjk3ODZDRDQuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNjUyQzc0N0MyN0U2MDMyREIzNUUzM0QxNDBBODg2MEE2OTc4NkNE
NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS2lFa1A1enkyZG52eHAzWmVHZEcx
YVBBaEE2czVaWXhqdUpZaDh2Q1ZCeC8xLzMyMzgzMDM0M2EzMTMwNjY2MzNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM2MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEEPww
DQYJKoZIhvcNAQELBQADggEBAI86ZXMlsG6xmTSECNRVdvAVJlKo+vq/DkXDyEhi
bQbwTTXA7Q9X8C2WiaPMIQsmA3Gp9LKw7zJtDLdhLyo/1es1CWy1a43jRH64iheK
UBdbTlOVLZ8rt/mdasoLOFIeTZ/O3ecE8mRQ1AibiWC3Y++/v6/L1IeyisQQlCI+
nGDrRP0O1h1viFrSSX1PudXS6jC3bo/4ZQUD3gQIWF3u1om1GSUwi6h9XsKnRK/U
Rh+YtCjY3aWj8EeyZr8U4+JGqqBboKEovF3p1JU1lvtduqbv6ehIio9eRbtnYg+I
QUgcoV+8lC3PBH9dABIuQAExA+CkNK711NRpy14FHBkA1Rg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org