Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33322d3332203d3e20323635393131.roa
File:                     323830343a336662633a3a2f33322d3332203d3e20323635393131.roa (raw, json)
Hash identifier:          KLhVNbXpEjBq2VAq+JtXwlPqosHRWVfWN5+vedN81Tc=
Subject key identifier:   46:BB:46:DB:ED:5E:8C:02:8F:79:D3:E8:88:BF:B4:67:78:93:D2:1E
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       5A842BD6AB1CE48C58C2EC5A7E4F4FA036A52E86
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33322d3332203d3e20323635393131.roa
Signing time:             Thu 08 Aug 2024 18:51:04 +0000
ROA not before:           Thu 08 Aug 2024 18:46:04 +0000
ROA not after:            Thu 07 Aug 2025 18:51:04 +0000
asID:                     265911
IP address blocks:        2804:3fbc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:84:2b:d6:ab:1c:e4:8c:58:c2:ec:5a:7e:4f:4f:a0:36:a5:2e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Aug  8 18:46:04 2024 GMT
            Not After : Aug  7 18:51:04 2025 GMT
        Subject: CN=46BB46DBED5E8C028F79D3E888BFB4677893D21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a5:f5:89:80:ce:39:6a:dd:9c:16:d0:0f:6c:
                    88:71:cf:18:aa:02:44:90:19:b6:56:29:f8:6d:d0:
                    b9:30:72:c9:21:26:cb:c8:8d:d3:89:db:42:7a:c4:
                    b8:bf:7e:78:5c:eb:56:79:36:99:36:62:da:38:6d:
                    14:75:58:85:59:26:ed:4a:39:e5:e3:9f:48:64:e9:
                    d4:a4:2e:33:fd:1f:e1:36:66:c2:6d:f7:29:97:cc:
                    da:6f:f2:79:2a:f3:89:5e:2b:e0:67:35:90:8c:d4:
                    58:52:3e:67:27:91:f0:2f:56:2a:c2:fa:45:71:29:
                    3b:ce:7d:e4:ff:16:39:fa:69:87:c6:9f:22:a7:86:
                    23:7d:be:a5:fd:0e:04:ba:59:d9:09:65:7a:fa:0e:
                    c1:5c:a1:51:8d:78:97:41:b2:18:5a:2b:2d:95:70:
                    2a:e2:50:a0:cf:98:bd:7c:f0:84:30:91:fe:1f:8b:
                    b1:ca:f6:2b:7b:49:f3:b5:f7:bb:7a:83:8d:ff:d7:
                    dd:57:87:21:be:d9:87:a9:8f:f4:c3:46:e0:83:e8:
                    8e:f8:59:3d:2c:c7:fe:2a:d8:a2:76:43:15:47:bd:
                    ca:81:86:d3:27:36:8b:90:a1:ce:c6:26:18:35:1e:
                    08:4f:85:d5:17:e9:4c:79:bf:da:a1:14:45:bb:e2:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BB:46:DB:ED:5E:8C:02:8F:79:D3:E8:88:BF:B4:67:78:93:D2:1E
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33322d3332203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:39:c2:00:69:fb:23:6e:eb:19:57:30:b1:4e:0b:19:97:3d:
         e2:d8:5f:53:e5:2c:8a:48:aa:a9:95:41:52:7e:45:0e:23:7f:
         bb:fd:b8:22:ed:aa:04:4f:0e:cd:b7:c2:6d:b5:f4:e9:e9:f5:
         e6:4f:17:c4:c3:b8:f4:77:29:e5:3c:1f:27:77:25:0a:5d:39:
         41:d8:12:65:1a:e5:d4:b9:16:10:02:4d:01:43:ca:31:a3:67:
         af:6e:43:ee:62:a0:64:3e:5a:76:eb:b4:a2:71:a3:fe:8e:47:
         d2:80:8a:c0:55:99:b5:b3:1d:6a:46:df:90:d9:30:13:24:d1:
         e4:0b:4e:7f:c6:f0:e9:0a:bb:90:e5:7b:0d:ce:b9:ad:56:a0:
         9c:55:bf:b7:fb:c4:89:da:56:53:4d:d2:5e:a2:6e:c2:6a:84:
         89:fa:31:83:9c:63:b0:3b:81:93:07:b1:61:99:72:83:04:09:
         5f:52:0b:85:29:12:2d:fa:d1:97:12:ab:7a:7a:2c:ad:05:b2:
         cf:6e:21:60:f6:8b:27:78:f4:01:d6:3e:01:12:9a:ac:9c:3f:
         1a:83:89:17:80:87:70:f7:ca:71:5b:6a:71:72:36:0d:c6:81:
         b4:66:41:21:2a:e6:89:a4:f2:5c:75:7a:1f:4b:b2:dc:d8:45:
         4c:13:d5:8e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWoQr1qsc5IxYwuxafk9PoDalLoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNDA4MDgxODQ2MDRaFw0yNTA4MDcxODUxMDRaMDMxMTAvBgNV
BAMTKDQ2QkI0NkRCRUQ1RThDMDI4Rjc5RDNFODg4QkZCNDY3Nzg5M0QyMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqpfWJgM45at2cFtAPbIhxzxiq
AkSQGbZWKfht0LkwcskhJsvIjdOJ20J6xLi/fnhc61Z5Npk2Yto4bRR1WIVZJu1K
OeXjn0hk6dSkLjP9H+E2ZsJt9ymXzNpv8nkq84leK+BnNZCM1FhSPmcnkfAvVirC
+kVxKTvOfeT/Fjn6aYfGnyKnhiN9vqX9DgS6WdkJZXr6DsFcoVGNeJdBshhaKy2V
cCriUKDPmL188IQwkf4fi7HK9it7SfO197t6g43/191XhyG+2Yepj/TDRuCD6I74
WT0sx/4q2KJ2QxVHvcqBhtMnNouQoc7GJhg1HghPhdUX6Ux5v9qhFEW74or5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQURrtG2+1ejAKPedPoiL+0Z3iT0h4wHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzIz
ODMwMzQzYTMzNjY2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1Mzkz
MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQ/vDANBgkqhkiG9w0BAQsFAAOCAQEAOTnCAGn7I27r
GVcwsU4LGZc94thfU+UsikiqqZVBUn5FDiN/u/24Iu2qBE8OzbfCbbX06en15k8X
xMO49Hcp5TwfJ3clCl05QdgSZRrl1LkWEAJNAUPKMaNnr25D7mKgZD5aduu0onGj
/o5H0oCKwFWZtbMdakbfkNkwEyTR5AtOf8bw6Qq7kOV7Dc65rVagnFW/t/vEidpW
U03SXqJuwmqEifoxg5xjsDuBkwexYZlygwQJX1ILhSkSLfrRlxKrenosrQWyz24h
YPaLJ3j0AdY+ARKarJw/GoOJF4CHcPfKcVtqcXI2DcaBtGZBISrmiaTyXHV6H0uy
3NhFTBPVjg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org