Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/323830343a356132343a3a2f33322d3332203d3e20323638373531.roa
File:                     323830343a356132343a3a2f33322d3332203d3e20323638373531.roa (raw, json)
Hash identifier:          La0G82L4QnpoXiqIMTgPRQy5V4v6PaPfBG6hR5mjQQQ=
Subject key identifier:   0C:4A:CC:AA:9C:29:8B:90:76:3A:48:7C:F6:ED:E6:3B:22:B7:C2:46
Certificate issuer:       /CN=CD38A7C7D796C57003E777BDB835D0DB8AC490C6
Certificate serial:       102C5DD57F7FA1CAB9D336F608B59C55F1E324D3
Authority key identifier: CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/323830343a356132343a3a2f33322d3332203d3e20323638373531.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268751
IP address blocks:        2804:5a24::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.crl
                          rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2c:5d:d5:7f:7f:a1:ca:b9:d3:36:f6:08:b5:9c:55:f1:e3:24:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD38A7C7D796C57003E777BDB835D0DB8AC490C6
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:e8:ca:16:9e:79:59:77:69:ca:e2:d2:5e:
                    dc:3f:8e:cc:62:c5:a4:ae:52:e7:36:fc:49:91:79:
                    29:ce:de:e4:13:6a:b5:73:cb:ca:fe:c2:b7:8a:33:
                    40:1c:82:22:28:2f:47:61:7f:bd:e0:18:f1:b7:29:
                    5e:3a:6f:f7:6a:73:9f:7a:a7:76:8c:fa:33:21:bf:
                    6f:74:6e:a7:0a:ad:c8:33:19:aa:9d:6c:9b:1c:23:
                    d9:ba:06:ce:ca:ce:e4:3e:f5:2b:8d:f7:1a:dd:3e:
                    9c:de:e4:4d:89:15:d0:fe:b7:de:a7:d5:75:4f:e2:
                    fb:5c:61:05:ad:b8:af:41:a7:d2:7b:ca:17:93:a5:
                    d7:41:ce:a7:d5:30:17:11:17:dc:4a:19:03:f7:c5:
                    e1:eb:75:64:cc:92:d1:3d:26:88:d6:0c:27:03:75:
                    f6:ce:17:a7:62:ca:6b:5b:53:35:36:c1:b2:d2:41:
                    87:b2:23:1e:04:a5:5c:1b:44:d1:20:ff:0e:43:a8:
                    8a:76:ca:1f:60:c9:1f:e7:e5:4d:32:af:b6:49:0f:
                    83:5c:f4:b9:98:53:ba:af:45:07:8d:16:e2:2f:8f:
                    98:01:9c:1c:74:3e:36:0d:8f:db:d5:0f:97:e7:0c:
                    35:da:2a:c3:f9:65:e0:8b:2b:95:e2:b2:ac:67:b7:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:CC:AA:9C:29:8B:90:76:3A:48:7C:F6:ED:E6:3B:22:B7:C2:46
            X509v3 Authority Key Identifier:
                keyid:CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/323830343a356132343a3a2f33322d3332203d3e20323638373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a24::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:4b:fa:a4:83:77:ea:74:c4:94:2c:89:68:08:58:d2:e9:96:
         b8:5b:30:ae:b9:51:98:76:3a:06:f7:12:8e:38:7a:db:e9:46:
         81:26:af:cc:f6:62:33:a8:7a:f0:1c:42:8e:b8:70:0d:2c:e1:
         82:73:0b:00:58:8a:84:c7:36:4e:ac:c8:2c:3c:96:96:e8:67:
         fb:19:65:17:1a:5d:33:04:71:c3:f7:cf:05:a9:7f:72:2e:d6:
         64:5f:bc:54:1b:bf:d0:d2:a7:85:ab:08:58:42:bf:33:03:83:
         41:0f:b5:50:ef:a4:1a:cd:8f:66:dd:7f:99:a9:0a:f8:76:f1:
         16:66:0b:fe:14:36:8f:4f:49:02:fa:ad:08:d8:de:03:51:96:
         de:46:2f:cd:fa:12:a1:18:a4:c8:f6:9c:15:bb:13:91:a4:8c:
         52:8c:3d:a6:1b:15:f8:d6:c9:27:05:fe:14:6a:a8:42:70:75:
         49:a4:54:60:59:d0:67:1f:14:dc:ad:51:e4:f5:ac:49:1d:b5:
         1f:d6:b7:1d:d9:9d:5d:66:4e:e4:49:8a:ba:1a:bb:c0:05:5b:
         63:a2:c8:15:6b:de:ff:15:c7:ce:ea:9f:52:e0:06:36:c2:47:
         f3:b8:2c:35:ef:29:5e:fc:4d:9e:a3:17:c1:cf:90:12:d4:66:
         11:26:94:91
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUECxd1X9/ocq50zb2CLWcVfHjJNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzOEE3QzdENzk2QzU3MDAzRTc3N0JEQjgzNUQwREI4
QUM0OTBDNjAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUJGQ0U4Q0ExNjlFNzk1OTc3
NjlDQUUyRDI1RURDM0Y4RUNDNjJDNUE0QUU1MkU3MzZGQzQ5OTE3OTI5Q0VERUU0
MTM2QUI1NzNDQkNBRkVDMkI3OEEzMzQwMUM4MjIyMjgyRjQ3NjE3RkJERTAxOEYx
QjcyOTVFM0E2RkY3NkE3MzlGN0FBNzc2OENGQTMzMjFCRjZGNzQ2RUE3MEFBREM4
MzMxOUFBOUQ2QzlCMUMyM0Q5QkEwNkNFQ0FDRUU0M0VGNTJCOERGNzFBREQzRTlD
REVFNDREODkxNUQwRkVCN0RFQTdENTc1NEZFMkZCNUM2MTA1QURCOEFGNDFBN0Qy
N0JDQTE3OTNBNUQ3NDFDRUE3RDUzMDE3MTExN0RDNEExOTAzRjdDNUUxRUI3NTY0
Q0M5MkQxM0QyNjg4RDYwQzI3MDM3NUY2Q0UxN0E3NjJDQTZCNUI1MzM1MzZDMUIy
RDI0MTg3QjIyMzFFMDRBNTVDMUI0NEQxMjBGRjBFNDNBODhBNzZDQTFGNjBDOTFG
RTdFNTREMzJBRkI2NDkwRjgzNUNGNEI5OTg1M0JBQUY0NTA3OEQxNkUyMkY4Rjk4
MDE5QzFDNzQzRTM2MEQ4RkRCRDUwRjk3RTcwQzM1REEyQUMzRjk2NUUwOEIyQjk1
RTJCMkFDNjdCNzIwNEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq/zoyhaeeVl3acri0l7cP47MYsWkrlLnNvxJkXkpzt7kE2q1c8vK
/sK3ijNAHIIiKC9HYX+94BjxtyleOm/3anOfeqd2jPozIb9vdG6nCq3IMxmqnWyb
HCPZugbOys7kPvUrjfca3T6c3uRNiRXQ/rfep9V1T+L7XGEFrbivQafSe8oXk6XX
Qc6n1TAXERfcShkD98Xh63VkzJLRPSaI1gwnA3X2zhenYsprW1M1NsGy0kGHsiMe
BKVcG0TRIP8OQ6iKdsofYMkf5+VNMq+2SQ+DXPS5mFO6r0UHjRbiL4+YAZwcdD42
DY/b1Q+X5ww12irD+WXgiyuV4rKsZ7cgTwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FAxKzKqcKYuQdjpIfPbt5jsit8JGMB8GA1UdIwQYMBaAFM04p8fXlsVwA+d3vbg1
0NuKxJDGMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVTRqWnJUV0NnQnp4TVA2
VmJubnBTQThuaGgxaXVXNkg2aTd2eVV0RUt4di8xL0NEMzhBN0M3RDc5NkM1NzAw
M0U3NzdCREI4MzVEMERCOEFDNDkwQzYuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvQ0QzOEE3QzdENzk2QzU3MDAzRTc3N0JEQjgzNUQwREI4QUM0OTBD
Ni5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVTRqWnJUV0NnQnp4TVA2VmJubnBT
QThuaGgxaXVXNkg2aTd2eVV0RUt4di8xLzMyMzgzMDM0M2EzNTYxMzIzNDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM3MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEWiQw
DQYJKoZIhvcNAQELBQADggEBAJVL+qSDd+p0xJQsiWgIWNLplrhbMK65UZh2Ogb3
Eo44etvpRoEmr8z2YjOoevAcQo64cA0s4YJzCwBYioTHNk6syCw8lpboZ/sZZRca
XTMEccP3zwWpf3Iu1mRfvFQbv9DSp4WrCFhCvzMDg0EPtVDvpBrNj2bdf5mpCvh2
8RZmC/4UNo9PSQL6rQjY3gNRlt5GL836EqEYpMj2nBW7E5GkjFKMPaYbFfjWyScF
/hRqqEJwdUmkVGBZ0GcfFNytUeT1rEkdtR/Wtx3ZnV1mTuRJiroau8AFW2OiyBVr
3v8Vx87qn1LgBjbCR/O4LDXvKV78TZ6jF8HPkBLUZhEmlJE=
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:04:04 2024 by rpki-client on console-fra.rpki-client.org