Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a3a2f33332d3333203d3e20323638373332.roa
File:                     323830343a353965343a3a2f33332d3333203d3e20323638373332.roa (raw, json)
Hash identifier:          aWmi5OnThQHzLqJYHXdZ2AA7hNgPMy9vzPjdBBBJKzI=
Subject key identifier:   8D:19:8A:E4:64:A4:BC:21:C1:19:2A:86:90:A1:12:3C:C9:1B:8C:85
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       42D42B3D896107A77E7948109B6F85F75080B6FA
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a3a2f33332d3333203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     268732
IP address blocks:        2804:59e4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d4:2b:3d:89:61:07:a7:7e:79:48:10:9b:6f:85:f7:50:80:b6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=8D198AE464A4BC21C1192A8690A1123CC91B8C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:97:52:f0:60:3c:04:cf:d4:29:00:c8:a2:
                    21:60:0e:d0:b9:5c:c4:28:33:de:f9:1c:04:11:4b:
                    1f:94:03:aa:1f:fc:7f:3d:ea:33:5c:c5:e5:14:01:
                    e7:5a:21:9b:23:41:e8:03:42:67:8f:f4:30:59:94:
                    b1:14:53:50:3b:86:70:5a:d5:d2:af:c4:01:e8:20:
                    11:f6:04:70:5a:60:0a:03:38:8e:67:1d:a6:5f:a6:
                    d7:d3:9a:b0:b4:5f:87:f3:2f:69:60:89:7d:d6:05:
                    6f:62:5e:53:20:b3:37:4e:85:db:d3:d5:10:7b:08:
                    d6:96:33:8d:09:32:42:61:c6:0d:fc:2a:41:d9:7e:
                    4f:92:26:ad:65:0d:0e:a1:26:d7:a1:5f:a9:25:c5:
                    55:d6:88:67:c2:7b:c1:30:be:7b:f4:29:16:57:2d:
                    18:a5:ba:25:89:00:7e:ed:31:f0:ad:da:5b:78:87:
                    78:b0:11:8c:16:52:a3:64:73:87:2e:31:4f:c2:91:
                    6e:ba:73:8d:a7:65:5a:b2:d7:67:af:01:d9:8e:d8:
                    c4:4d:fc:3a:85:86:b2:75:e0:24:de:b0:02:65:7c:
                    6f:ec:44:de:fe:f0:00:cf:ba:00:e1:bb:78:98:02:
                    f6:23:10:fc:6a:b7:c8:13:b9:7e:42:7f:2c:07:b1:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:19:8A:E4:64:A4:BC:21:C1:19:2A:86:90:A1:12:3C:C9:1B:8C:85
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a3a2f33332d3333203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4::/33

    Signature Algorithm: sha256WithRSAEncryption
         47:90:b9:78:e7:d3:ca:39:31:1a:b4:3a:9e:ff:7a:3d:5f:74:
         3e:45:fd:07:57:1a:9c:e1:a5:3e:96:aa:ef:f3:93:c4:de:8b:
         e9:88:62:f4:b8:c4:62:33:a0:a2:c5:64:e8:67:c9:75:9a:c7:
         68:9e:97:cc:8e:df:93:7d:36:fb:78:89:ce:2d:fe:ac:9e:90:
         31:95:bc:4a:a4:e7:b3:92:a9:ae:84:6a:f1:62:ad:4c:99:b4:
         0b:0f:ce:a3:e7:15:ad:a6:bb:ba:e0:5d:b2:85:89:6c:21:e2:
         e8:ab:ce:21:c5:d8:b1:43:ac:c3:28:c4:c8:25:91:d3:d6:f1:
         a1:d8:7d:19:0d:68:54:d7:c4:09:8c:72:6c:cf:ba:e7:58:f9:
         c2:b2:03:5d:03:c5:05:69:a1:f8:97:33:c0:43:dd:13:fc:07:
         d4:b0:08:45:83:55:17:dc:8c:00:ca:61:3e:b3:b4:a5:5d:14:
         59:fa:64:f6:69:d8:da:97:0f:8e:cb:bd:18:8f:f1:43:80:46:
         0a:7b:68:84:d8:4a:d9:15:1c:a8:a9:a8:0f:57:1c:5c:34:47:
         0b:ff:e0:cd:06:ac:7b:18:71:1b:a1:54:2c:2e:50:49:bf:72:
         a7:a6:b2:6a:05:f2:d9:6f:25:b0:50:ca:5b:71:45:58:23:5b:
         42:19:e9:e8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQtQrPYlhB6d+eUgQm2+F91CAtvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcxMjQ2NTFEMTlEMTMyNTQzRTk5MUI3QTc0REQ0QTY4
MDc2OEEwOTAeFw0yNDA0MDMxODI1MTFaFw0yNTA0MDIxODMwMTFaMDMxMTAvBgNV
BAMTKDhEMTk4QUU0NjRBNEJDMjFDMTE5MkE4NjkwQTExMjNDQzkxQjhDODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94JdS8GA8BM/UKQDIoiFgDtC5
XMQoM975HAQRSx+UA6of/H896jNcxeUUAedaIZsjQegDQmeP9DBZlLEUU1A7hnBa
1dKvxAHoIBH2BHBaYAoDOI5nHaZfptfTmrC0X4fzL2lgiX3WBW9iXlMgszdOhdvT
1RB7CNaWM40JMkJhxg38KkHZfk+SJq1lDQ6hJtehX6klxVXWiGfCe8Ewvnv0KRZX
LRiluiWJAH7tMfCt2lt4h3iwEYwWUqNkc4cuMU/CkW66c42nZVqy12evAdmO2MRN
/DqFhrJ14CTesAJlfG/sRN7+8ADPugDhu3iYAvYjEPxqt8gTuX5CfywHsQ8hAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUjRmK5GSkvCHBGSqGkKESPMkbjIUwHwYDVR0j
BBgwFoAUtxJGUdGdEyVD6ZG3p03UpoB2igkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uMTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNN
LzEvQjcxMjQ2NTFEMTlEMTMyNTQzRTk5MUI3QTc0REQ0QTY4MDc2OEEwOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNzEyNDY1MUQxOUQxMzI1NDNF
OTkxQjdBNzRERDRBNjgwNzY4QTA5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
MTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNNLzEvMzIz
ODMwMzQzYTM1Mzk2NTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4Mzcz
MzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYHKARZ5AAwDQYJKoZIhvcNAQELBQADggEBAEeQuXjn08o5
MRq0Op7/ej1fdD5F/QdXGpzhpT6Wqu/zk8Tei+mIYvS4xGIzoKLFZOhnyXWax2ie
l8yO35N9Nvt4ic4t/qyekDGVvEqk57OSqa6EavFirUyZtAsPzqPnFa2mu7rgXbKF
iWwh4uirziHF2LFDrMMoxMglkdPW8aHYfRkNaFTXxAmMcmzPuudY+cKyA10DxQVp
ofiXM8BD3RP8B9SwCEWDVRfcjADKYT6ztKVdFFn6ZPZp2NqXD47LvRiP8UOARgp7
aITYStkVHKipqA9XHFw0Rwv/4M0GrHsYcRuhVCwuUEm/cqemsmoF8tlvJbBQyltx
RVgjW0IZ6eg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:58 2024 by rpki-client on console-ams.rpki-client.org