Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/1/323830343a3633633a3a2f33322d3336203d3e20323632353731.roa
File:                     323830343a3633633a3a2f33322d3336203d3e20323632353731.roa (raw, json)
Hash identifier:          oHuVxl6vRWbm89Z0v0eOFiQ7Bxc8aOlwwBrL6o2DB6I=
Subject key identifier:   07:BA:A7:BB:2D:DC:74:A9:BA:E7:FE:28:90:7B:55:8A:7B:47:37:99
Certificate issuer:       /CN=6FCB464FCC859BED583FEF3EE1A2F9CAB781F273
Certificate serial:       011775A551DF12F9AF488951D785BAC8A6E28881
Authority key identifier: 6F:CB:46:4F:CC:85:9B:ED:58:3F:EF:3E:E1:A2:F9:CA:B7:81:F2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FCB464FCC859BED583FEF3EE1A2F9CAB781F273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/1/323830343a3633633a3a2f33322d3336203d3e20323632353731.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262571
IP address blocks:        2804:63c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/1/6FCB464FCC859BED583FEF3EE1A2F9CAB781F273.crl
                          rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/1/6FCB464FCC859BED583FEF3EE1A2F9CAB781F273.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FCB464FCC859BED583FEF3EE1A2F9CAB781F273.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:17:75:a5:51:df:12:f9:af:48:89:51:d7:85:ba:c8:a6:e2:88:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FCB464FCC859BED583FEF3EE1A2F9CAB781F273
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject: CN=3082010A02820101009ED0C451A31E999C997A978FC2A5ECE5200AB18E4C599AE74DAA67DA4ED92DEFEFF852184A8E08A34454485FAE41CD06CDF0A6AC7DCE0927AB206CB6802A2ECBE13429611B825D20C13EB173107E9A099B553BAF3BD1C423439C83500AE10528A0DC9E8E4F43886914CBEFE557C7B8F0DCAA5656228033F262C2329E02831462BDE446F90E5D9D3C637290FC3F58584176C73755B22334770F7DD1C50B3027E79515290318DCDF8F961B332F8839A21B4CE1697DCBFD561FFFCAA6B0A32B2081D54CE084715FB5A2877BBFA2F389DAA5947980A8A39AC26E6357A4649BD062D66A80D5875F959592DDCC52178B639401A986D8D749DFCEEDDF904C222B57B6E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:c4:51:a3:1e:99:9c:99:7a:97:8f:c2:a5:
                    ec:e5:20:0a:b1:8e:4c:59:9a:e7:4d:aa:67:da:4e:
                    d9:2d:ef:ef:f8:52:18:4a:8e:08:a3:44:54:48:5f:
                    ae:41:cd:06:cd:f0:a6:ac:7d:ce:09:27:ab:20:6c:
                    b6:80:2a:2e:cb:e1:34:29:61:1b:82:5d:20:c1:3e:
                    b1:73:10:7e:9a:09:9b:55:3b:af:3b:d1:c4:23:43:
                    9c:83:50:0a:e1:05:28:a0:dc:9e:8e:4f:43:88:69:
                    14:cb:ef:e5:57:c7:b8:f0:dc:aa:56:56:22:80:33:
                    f2:62:c2:32:9e:02:83:14:62:bd:e4:46:f9:0e:5d:
                    9d:3c:63:72:90:fc:3f:58:58:41:76:c7:37:55:b2:
                    23:34:77:0f:7d:d1:c5:0b:30:27:e7:95:15:29:03:
                    18:dc:df:8f:96:1b:33:2f:88:39:a2:1b:4c:e1:69:
                    7d:cb:fd:56:1f:ff:ca:a6:b0:a3:2b:20:81:d5:4c:
                    e0:84:71:5f:b5:a2:87:7b:bf:a2:f3:89:da:a5:94:
                    79:80:a8:a3:9a:c2:6e:63:57:a4:64:9b:d0:62:d6:
                    6a:80:d5:87:5f:95:95:92:dd:cc:52:17:8b:63:94:
                    01:a9:86:d8:d7:49:df:ce:ed:df:90:4c:22:2b:57:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BA:A7:BB:2D:DC:74:A9:BA:E7:FE:28:90:7B:55:8A:7B:47:37:99
            X509v3 Authority Key Identifier:
                keyid:6F:CB:46:4F:CC:85:9B:ED:58:3F:EF:3E:E1:A2:F9:CA:B7:81:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/1/6FCB464FCC859BED583FEF3EE1A2F9CAB781F273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FCB464FCC859BED583FEF3EE1A2F9CAB781F273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/1/323830343a3633633a3a2f33322d3336203d3e20323632353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63c::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:52:89:a1:b9:3b:37:df:e9:38:38:01:09:ac:f6:ad:da:
         78:9a:28:a9:41:aa:99:b8:57:c8:34:2e:7a:bf:75:b7:36:f5:
         bd:f9:a3:28:18:52:d7:cd:25:90:a2:b3:59:cc:50:8d:cf:02:
         04:10:54:6c:34:4e:9c:7a:07:c0:97:6b:11:c6:5d:ea:37:e8:
         d9:fa:6b:71:e9:07:6b:09:0a:89:be:81:96:8b:bc:73:d1:a0:
         b9:ba:4a:4c:c0:02:17:cf:f9:a1:1e:64:db:33:0b:96:78:0b:
         27:de:cc:c3:81:43:99:fa:86:1a:bc:cc:58:bb:07:b3:51:50:
         46:8f:33:81:0a:49:a8:85:c9:86:06:9d:76:d8:0f:af:6a:c7:
         20:de:da:96:49:cc:03:d7:b7:4d:49:5d:1d:a4:72:02:39:d9:
         af:8d:0d:d4:3f:6a:16:b7:9b:08:78:30:89:9e:b0:79:25:d5:
         51:71:26:d1:f9:4d:6c:90:4a:98:a4:dd:e1:3e:b5:c5:a2:0a:
         13:7b:bf:e5:4b:7b:a9:26:f6:16:31:0b:f7:4f:92:97:d5:6f:
         84:9a:4d:23:cc:6f:10:a1:74:87:c1:91:da:fb:a5:d0:f5:eb:
         76:4b:46:c7:49:77:5e:08:3c:74:be:9b:9f:c2:dc:7d:9b:17:
         a1:45:13:bb
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUARd1pVHfEvmvSIlR14W6yKbiiIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZDQjQ2NEZDQzg1OUJFRDU4M0ZFRjNFRTFBMkY5Q0FC
NzgxRjI3MzAeFw0yNDA0MDMxODI1MTZaFw0yNTA0MDIxODMwMTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUVEMEM0NTFBMzFFOTk5Qzk5
N0E5NzhGQzJBNUVDRTUyMDBBQjE4RTRDNTk5QUU3NERBQTY3REE0RUQ5MkRFRkVG
Rjg1MjE4NEE4RTA4QTM0NDU0NDg1RkFFNDFDRDA2Q0RGMEE2QUM3RENFMDkyN0FC
MjA2Q0I2ODAyQTJFQ0JFMTM0Mjk2MTFCODI1RDIwQzEzRUIxNzMxMDdFOUEwOTlC
NTUzQkFGM0JEMUM0MjM0MzlDODM1MDBBRTEwNTI4QTBEQzlFOEU0RjQzODg2OTE0
Q0JFRkU1NTdDN0I4RjBEQ0FBNTY1NjIyODAzM0YyNjJDMjMyOUUwMjgzMTQ2MkJE
RTQ0NkY5MEU1RDlEM0M2MzcyOTBGQzNGNTg1ODQxNzZDNzM3NTVCMjIzMzQ3NzBG
N0REMUM1MEIzMDI3RTc5NTE1MjkwMzE4RENERjhGOTYxQjMzMkY4ODM5QTIxQjRD
RTE2OTdEQ0JGRDU2MUZGRkNBQTZCMEEzMkIyMDgxRDU0Q0UwODQ3MTVGQjVBMjg3
N0JCRkEyRjM4OURBQTU5NDc5ODBBOEEzOUFDMjZFNjM1N0E0NjQ5QkQwNjJENjZB
ODBENTg3NUY5NTk1OTJERENDNTIxNzhCNjM5NDAxQTk4NkQ4RDc0OURGQ0VFRERG
OTA0QzIyMkI1N0I2RTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAntDEUaMemZyZepePwqXs5SAKsY5MWZrnTapn2k7ZLe/v+FIYSo4I
o0RUSF+uQc0GzfCmrH3OCSerIGy2gCouy+E0KWEbgl0gwT6xcxB+mgmbVTuvO9HE
I0Ocg1AK4QUooNyejk9DiGkUy+/lV8e48NyqVlYigDPyYsIyngKDFGK95Eb5Dl2d
PGNykPw/WFhBdsc3VbIjNHcPfdHFCzAn55UVKQMY3N+PlhszL4g5ohtM4Wl9y/1W
H//KprCjKyCB1UzghHFftaKHe7+i84napZR5gKijmsJuY1ekZJvQYtZqgNWHX5WV
kt3MUheLY5QBqYbY10nfzu3fkEwiK1e25wIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FAe6p7st3HSpuuf+KJB7VYp7RzeZMB8GA1UdIwQYMBaAFG/LRk/MhZvtWD/vPuGi
+cq3gfJzMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTFBhTGFuZFJXUExoQ0Rl
Z2lvbm9ielVtb0RWREhoQVVKdWJrd1I5emdwaS8xLzZGQ0I0NjRGQ0M4NTlCRUQ1
ODNGRUYzRUUxQTJGOUNBQjc4MUYyNzMuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNkZDQjQ2NEZDQzg1OUJFRDU4M0ZFRjNFRTFBMkY5Q0FCNzgxRjI3
My5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTFBhTGFuZFJXUExoQ0RlZ2lvbm9i
elVtb0RWREhoQVVKdWJrd1I5emdwaS8xLzMyMzgzMDM0M2EzNjMzNjMzYTNhMmYz
MzMyMmQzMzM2MjAzZDNlMjAzMjM2MzIzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBAY8MA0G
CSqGSIb3DQEBCwUAA4IBAQAGyFKJobk7N9/pODgBCaz2rdp4miipQaqZuFfINC56
v3W3NvW9+aMoGFLXzSWQorNZzFCNzwIEEFRsNE6cegfAl2sRxl3qN+jZ+mtx6Qdr
CQqJvoGWi7xz0aC5ukpMwAIXz/mhHmTbMwuWeAsn3szDgUOZ+oYavMxYuwezUVBG
jzOBCkmohcmGBp122A+vascg3tqWScwD17dNSV0dpHICOdmvjQ3UP2oWt5sIeDCJ
nrB5JdVRcSbR+U1skEqYpN3hPrXFogoTe7/lS3upJvYWMQv3T5KX1W+Emk0jzG8Q
oXSHwZHa+6XQ9et2S0bHSXdeCDx0vpufwtx9mxehRRO7
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org