Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
File:                     323830343a3632633a3a2f33322d3332203d3e20323632353639.roa (raw, json)
Hash identifier:          tLAOqkz9HVNeCNXQX6MGb3ZLVDx3fCsl7TWe2DVP5s4=
Subject key identifier:   38:AC:49:D4:0E:42:C1:7C:2B:93:12:F2:9F:DC:A6:17:B2:F6:3D:0B
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       464C9428CA9EF41AED9C637951D3F00B73CF074D
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:42 +0000
ROA not before:           Thu 04 Apr 2024 07:15:42 +0000
ROA not after:            Thu 03 Apr 2025 07:20:42 +0000
asID:                     262569
IP address blocks:        2804:62c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
                          rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4c:94:28:ca:9e:f4:1a:ed:9c:63:79:51:d3:f0:0b:73:cf:07:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:42 2024 GMT
            Not After : Apr  3 07:20:42 2025 GMT
        Subject: CN=38AC49D40E42C17C2B9312F29FDCA617B2F63D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:24:5a:76:55:e9:a9:d5:bd:77:f1:2f:ce:
                    62:8b:79:10:01:21:a5:85:39:2a:e5:44:76:7b:32:
                    b4:c6:45:0f:37:88:30:9f:b0:f7:91:a1:36:24:6b:
                    0c:12:f2:b6:7f:d5:5b:d4:ec:00:c7:11:93:1b:ea:
                    3b:9f:26:40:f1:fe:75:53:e0:e4:bd:13:d2:cd:d4:
                    c9:a4:31:70:a2:82:84:a0:9f:15:ba:4d:da:c8:97:
                    de:43:21:b7:c8:d5:da:eb:93:98:a5:c6:d2:de:e2:
                    ee:d0:76:87:5c:e4:79:fd:a8:17:46:bc:f8:9d:69:
                    a1:8c:b5:ef:dc:27:68:1b:1f:1a:b3:d1:f9:5f:c4:
                    dd:3b:f4:aa:d5:5b:d9:09:32:fa:9f:e4:29:49:dc:
                    ac:4f:79:d0:7c:57:be:ff:8f:29:3a:f7:ab:50:d4:
                    56:cd:18:7f:09:bb:38:f4:b7:8f:c9:e4:cb:92:32:
                    bf:cf:33:ad:dd:a5:6d:c3:e1:e4:4d:d6:a3:9b:db:
                    77:9c:c5:9e:03:01:8a:55:11:70:ed:f9:c9:8a:6c:
                    05:18:99:f8:1d:8c:dc:af:05:0a:2a:33:23:60:b4:
                    c5:a2:23:da:db:ba:c5:cc:a3:eb:3e:a2:eb:dc:12:
                    af:8b:4c:1f:21:70:94:0b:98:b1:de:3e:af:ac:d4:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:49:D4:0E:42:C1:7C:2B:93:12:F2:9F:DC:A6:17:B2:F6:3D:0B
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62c::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:94:4c:d5:ce:44:0a:d6:0f:a4:fa:78:c9:ad:de:56:e8:4f:
         82:32:6e:c1:3b:6f:4d:2b:ed:3a:e8:41:e0:dd:2f:fa:c4:35:
         07:4c:86:67:aa:6d:dc:b2:74:5c:c1:a9:cc:79:0e:aa:aa:c9:
         5b:e6:cd:99:0c:c2:54:c4:11:32:30:12:f5:08:5e:c1:3f:42:
         54:42:25:90:e5:c2:4a:cf:29:41:c2:99:97:e2:76:53:b8:27:
         cc:e2:43:71:82:e5:a1:25:c6:bd:0e:1d:c5:c8:44:7a:8c:aa:
         39:cd:bc:fa:16:3e:63:6e:74:00:7d:c0:17:5f:2f:9f:ed:8b:
         f2:8e:1d:cd:fa:5a:9a:27:cb:e1:f6:ed:00:f1:ad:9a:14:72:
         59:9d:3e:77:be:a5:ac:c3:63:eb:f5:48:58:47:e1:bf:08:63:
         c8:b1:5e:e4:73:1d:ea:59:73:f1:5b:44:df:ae:92:92:a6:27:
         68:0f:7b:c6:ee:fc:e7:1a:5d:54:44:60:eb:64:e1:9a:38:b2:
         9c:a9:0f:23:a0:c8:c6:f6:b4:8b:92:21:ee:77:1f:95:59:47:
         fe:32:e8:26:c0:23:2c:62:7d:18:a2:32:3c:db:bd:06:47:e1:
         06:88:20:92:45:83:b4:0f:12:60:7d:29:d2:bb:51:db:f5:03:
         09:e9:dc:c8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIURkyUKMqe9BrtnGN5UdPwC3PPB00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxOTFDOTFDNjk5NjI2RjFERjNDM0I3NkQ0NEYyMzVD
NDk3NjExMDAeFw0yNDA0MDQwNzE1NDJaFw0yNTA0MDMwNzIwNDJaMDMxMTAvBgNV
BAMTKDM4QUM0OUQ0MEU0MkMxN0MyQjkzMTJGMjlGRENBNjE3QjJGNjNEMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/SRadlXpqdW9d/EvzmKLeRAB
IaWFOSrlRHZ7MrTGRQ83iDCfsPeRoTYkawwS8rZ/1VvU7ADHEZMb6jufJkDx/nVT
4OS9E9LN1MmkMXCigoSgnxW6TdrIl95DIbfI1drrk5ilxtLe4u7Qdodc5Hn9qBdG
vPidaaGMte/cJ2gbHxqz0flfxN079KrVW9kJMvqf5ClJ3KxPedB8V77/jyk696tQ
1FbNGH8Juzj0t4/J5MuSMr/PM63dpW3D4eRN1qOb23ecxZ4DAYpVEXDt+cmKbAUY
mfgdjNyvBQoqMyNgtMWiI9rbusXMo+s+ouvcEq+LTB8hcJQLmLHePq+s1OvtAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUOKxJ1A5CwXwrkxLyn9ymF7L2PQswHwYDVR0j
BBgwFoAUIhkckcaZYm8d88O3bUTyNcSXYRAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzEvMjIxOTFDOTFDNjk5NjI2RjFERjNDM0I3NkQ0NEYyMzVDNDk3NjExMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMjE5MUM5MUM2OTk2MjZGMURG
M0MzQjc2RDQ0RjIzNUM0OTc2MTEwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzEvMzIz
ODMwMzQzYTM2MzI2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM1MzYz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgEBiwwDQYJKoZIhvcNAQELBQADggEBACaUTNXORArWD6T6
eMmt3lboT4IybsE7b00r7TroQeDdL/rENQdMhmeqbdyydFzBqcx5DqqqyVvmzZkM
wlTEETIwEvUIXsE/QlRCJZDlwkrPKUHCmZfidlO4J8ziQ3GC5aElxr0OHcXIRHqM
qjnNvPoWPmNudAB9wBdfL5/ti/KOHc36Wpony+H27QDxrZoUclmdPne+pazDY+v1
SFhH4b8IY8ixXuRzHepZc/FbRN+ukpKmJ2gPe8bu/OcaXVREYOtk4Zo4spypDyOg
yMb2tIuSIe53H5VZR/4y6CbAIyxifRiiMjzbvQZH4QaIIJJFg7QPEmB9KdK7Udv1
Awnp3Mg=
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:24 2024 by rpki-client on console-ams.rpki-client.org