Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa
File:                     323830343a323038633a3a2f33322d3438203d3e20323634343937.roa (raw, json)
Hash identifier:          QsXEvTC+8q2KmbL3ApZ8CkIV7Er7+XbTEtXAYkh213Y=
Subject key identifier:   7B:51:BA:3D:AA:3B:4B:ED:21:A7:EB:F6:A3:4B:C3:29:47:B5:09:84
Certificate issuer:       /CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
Certificate serial:       34DB2730EFFCCF7DF7528963F256AA497B5E5BAD
Authority key identifier: 99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa
Signing time:             Wed 03 Apr 2024 23:47:17 +0000
ROA not before:           Wed 03 Apr 2024 23:42:17 +0000
ROA not after:            Wed 02 Apr 2025 23:47:17 +0000
asID:                     264497
IP address blocks:        2804:208c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl
                          rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:db:27:30:ef:fc:cf:7d:f7:52:89:63:f2:56:aa:49:7b:5e:5b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
        Validity
            Not Before: Apr  3 23:42:17 2024 GMT
            Not After : Apr  2 23:47:17 2025 GMT
        Subject: CN=7B51BA3DAA3B4BED21A7EBF6A34BC32947B50984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:50:6a:dd:7b:5a:29:a3:6f:ae:10:e6:73:
                    b6:5b:ab:f2:72:3c:e9:bb:79:30:63:0c:df:52:dc:
                    22:82:1f:b8:9e:18:51:78:b8:4b:dc:b5:5c:1f:ca:
                    de:ab:4d:2f:bd:17:8a:d4:93:70:2c:70:4c:d2:11:
                    51:3a:4f:c7:0c:f3:c1:7c:89:90:60:2a:b8:bf:4a:
                    3e:21:ce:9d:f0:45:23:7b:4c:1a:52:7a:76:ce:0c:
                    ac:74:22:9a:76:f5:4d:9a:89:5d:d2:af:a9:4f:08:
                    46:d2:81:95:0b:61:4f:a7:08:ec:2b:a0:9c:70:1b:
                    c9:a7:b8:d5:2f:96:84:6d:96:43:0d:77:11:80:fa:
                    6f:22:57:4c:fb:a7:23:60:8a:56:2a:30:56:cf:ca:
                    cb:9a:fa:7b:d8:11:72:06:72:4d:0c:5a:e7:f7:48:
                    8e:02:f8:61:d6:3c:f0:80:48:92:ea:28:ad:46:52:
                    56:51:b1:2c:9b:16:83:bc:b9:a7:90:d0:db:d6:13:
                    36:3a:ba:c4:d6:34:57:f9:6f:f8:69:de:9a:84:a2:
                    08:0f:bd:be:b9:cd:6d:8b:7b:a7:ed:31:ea:2c:a4:
                    7d:53:fe:fa:79:75:ff:9c:7d:72:f2:8e:44:89:e9:
                    dc:a0:3d:51:0f:11:09:8e:7b:dd:0e:0f:69:90:95:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:BA:3D:AA:3B:4B:ED:21:A7:EB:F6:A3:4B:C3:29:47:B5:09:84
            X509v3 Authority Key Identifier:
                keyid:99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:208c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:6f:0c:23:11:de:e7:7b:75:ee:d5:8c:90:8f:14:b1:10:60:
         22:08:0b:5a:7d:df:c8:12:e2:d9:55:8f:95:c9:ed:d5:e7:8f:
         d4:44:ca:c4:56:6f:58:87:c8:31:db:b5:d0:7b:55:44:69:0f:
         21:33:28:c5:fd:b5:92:04:69:b8:a9:29:90:15:c4:0b:f5:a1:
         d7:bf:05:39:7e:f2:4a:d7:93:1e:74:2b:26:e0:4b:90:29:a2:
         0d:0a:51:8f:f0:6a:cb:ac:f4:73:0c:47:18:a8:0b:e8:2f:03:
         b6:20:51:4a:25:8b:1f:07:a9:6e:40:00:37:dd:25:64:09:14:
         a3:b3:25:7b:d2:cc:03:e5:80:cf:80:0c:c2:bd:55:7a:59:b2:
         b3:62:97:5e:91:29:e5:70:28:62:a0:61:ab:ae:c4:aa:66:60:
         94:24:4f:3f:28:5c:eb:2d:39:9a:3e:b1:b6:82:1f:48:bd:a3:
         90:be:2e:b1:a7:5e:64:9f:59:06:75:89:e5:e2:d5:a5:8c:0b:
         9d:88:1e:eb:77:56:19:1f:b4:13:39:63:a2:5c:6a:b2:34:a1:
         f6:7c:e4:43:ae:97:08:96:25:ce:9f:9f:69:0f:c7:6e:0c:32:
         37:19:99:b0:c3:ff:d1:a3:2a:55:27:60:77:f2:57:a9:93:e0:
         c7:b0:2c:b2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNNsnMO/8z333Uolj8laqSXteW60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk1MUY2RUJBQUE3ODEzQzY5NEYzRDBGOTY2QkZBOEIw
NDYxMDY2NTAeFw0yNDA0MDMyMzQyMTdaFw0yNTA0MDIyMzQ3MTdaMDMxMTAvBgNV
BAMTKDdCNTFCQTNEQUEzQjRCRUQyMUE3RUJGNkEzNEJDMzI5NDdCNTA5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BlBq3XtaKaNvrhDmc7Zbq/Jy
POm7eTBjDN9S3CKCH7ieGFF4uEvctVwfyt6rTS+9F4rUk3AscEzSEVE6T8cM88F8
iZBgKri/Sj4hzp3wRSN7TBpSenbODKx0Ipp29U2aiV3Sr6lPCEbSgZULYU+nCOwr
oJxwG8mnuNUvloRtlkMNdxGA+m8iV0z7pyNgilYqMFbPysua+nvYEXIGck0MWuf3
SI4C+GHWPPCASJLqKK1GUlZRsSybFoO8uaeQ0NvWEzY6usTWNFf5b/hp3pqEoggP
vb65zW2Le6ftMeospH1T/vp5df+cfXLyjkSJ6dygPVEPEQmOe90OD2mQlb7LAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUe1G6Pao7S+0hp+v2o0vDKUe1CYQwHwYDVR0j
BBgwFoAUmVH266qngTxpTz0Plmv6iwRhBmUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9nSHBkOVp5b3lDeUQyTkFBRmV6VzFtWHhuRmlnZGtFeWNtZnlvWXVtZUFq
LzEvOTk1MUY2RUJBQUE3ODEzQzY5NEYzRDBGOTY2QkZBOEIwNDYxMDY2NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OTUxRjZFQkFBQTc4MTNDNjk0
RjNEMEY5NjZCRkE4QjA0NjEwNjY1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n
SHBkOVp5b3lDeUQyTkFBRmV6VzFtWHhuRmlnZGtFeWNtZnlvWXVtZUFqLzEvMzIz
ODMwMzQzYTMyMzAzODYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0MzQz
OTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQgjDANBgkqhkiG9w0BAQsFAAOCAQEAE28MIxHe53t1
7tWMkI8UsRBgIggLWn3fyBLi2VWPlcnt1eeP1ETKxFZvWIfIMdu10HtVRGkPITMo
xf21kgRpuKkpkBXEC/Wh178FOX7ySteTHnQrJuBLkCmiDQpRj/Bqy6z0cwxHGKgL
6C8DtiBRSiWLHwepbkAAN90lZAkUo7Mle9LMA+WAz4AMwr1Velmys2KXXpEp5XAo
YqBhq67EqmZglCRPPyhc6y05mj6xtoIfSL2jkL4usadeZJ9ZBnWJ5eLVpYwLnYge
63dWGR+0EzljolxqsjSh9nzkQ66XCJYlzp+faQ/HbgwyNxmZsMP/0aMqVSdgd/JX
qZPgx7Assg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org