Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          pbwYRIWi0MXfhviv8TcN1mc7IBh1CLuXnSFyKDkzuGc=
Subject key identifier:   AA:5D:83:C6:CE:A3:73:F1:32:2A:BC:B3:CC:5B:FE:9E:34:DE:0D:2D
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       2BD3E532C328F10B533CDFDACA659BC0CAE1B9F0
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:09 +0000
ROA not before:           Mon 12 Aug 2024 17:05:09 +0000
ROA not after:            Mon 11 Aug 2025 17:10:09 +0000
asID:                     267121
IP address blocks:        2804:4870:1b1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d3:e5:32:c3:28:f1:0b:53:3c:df:da:ca:65:9b:c0:ca:e1:b9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:09 2024 GMT
            Not After : Aug 11 17:10:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:72:9c:82:2e:cd:2d:8e:58:74:f3:0a:b1:
                    25:77:27:8b:9d:80:2b:4f:86:a4:b2:8c:2b:c3:ea:
                    8c:ca:81:9a:95:3e:c9:74:b7:4c:29:e3:76:0c:b8:
                    82:67:16:ac:49:4d:69:0d:15:b9:5b:74:11:df:79:
                    e5:df:27:49:4b:98:4e:d3:76:d2:b3:a4:0b:ad:8f:
                    48:b6:25:5e:cd:5a:bd:c0:11:21:0d:bb:86:0c:7f:
                    46:7e:ae:b3:c1:c7:34:05:d9:26:84:92:ae:39:7b:
                    5b:60:1f:1a:f3:98:f1:34:de:7e:c1:19:b9:d1:2e:
                    a1:b4:00:c6:ab:98:df:85:4e:3a:04:84:cc:54:cc:
                    be:02:2f:25:be:f4:22:05:3c:5c:7c:a8:cc:f8:2a:
                    0c:b2:17:c7:2d:be:c0:9c:9b:a7:60:ec:8b:ff:6e:
                    d2:34:0a:7a:b1:56:57:39:bc:6c:0d:38:d8:d4:25:
                    9f:d2:22:9e:a8:0a:34:73:a3:96:13:0f:b0:e7:fb:
                    0c:54:d9:94:6c:e6:08:3b:2a:ca:4d:29:82:3b:2c:
                    a6:bb:8a:16:d4:da:3f:50:60:21:97:20:3a:90:8f:
                    43:2d:ca:57:1e:a9:54:30:d2:4f:94:b6:5c:3d:fe:
                    1b:1e:83:a2:0e:9a:cf:5b:ae:0a:c1:c6:3c:90:ed:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:83:C6:CE:A3:73:F1:32:2A:BC:B3:CC:5B:FE:9E:34:DE:0D:2D
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:07:82:b7:10:4e:f6:79:d3:28:ff:15:c8:1c:08:10:e1:
         2d:6e:b1:90:b0:11:27:f9:bb:9d:6d:ae:66:5e:94:7a:77:ca:
         57:4a:e9:81:e1:e7:ff:5b:53:88:1b:a1:e6:20:86:43:c7:88:
         a3:43:41:7c:6b:63:79:2f:bf:a0:46:e6:a6:2d:4e:36:00:6d:
         cd:7b:c4:7e:58:e9:3c:0a:e0:f6:e2:ae:5f:05:ba:e7:6d:ee:
         ff:bf:32:89:1b:2f:9a:c4:30:55:5e:b5:ec:4a:ae:22:5f:7c:
         cf:a5:ab:b2:77:99:51:39:5e:19:21:af:e7:4a:9c:e5:9f:1a:
         1a:38:d9:6f:40:b8:5d:c9:8e:23:27:ee:43:a6:f2:ea:49:36:
         c9:22:2d:8e:f8:1e:37:53:47:93:23:0f:70:3e:32:b1:75:5b:
         ad:9b:9a:e3:28:a8:30:69:b1:b5:ca:5a:f8:f3:8c:b7:00:71:
         bd:2e:75:95:54:fc:0b:23:15:5f:b0:a8:5f:d2:f1:72:26:d9:
         19:de:d8:7b:97:b7:2c:3f:31:61:87:2e:5d:eb:ee:86:fe:c1:
         54:36:42:f2:ed:fe:08:1a:35:2d:fa:40:89:4f:d0:2e:17:b4:
         fb:7f:5f:07:3c:d5:0a:e0:49:49:10:12:22:84:26:10:37:9d:
         fb:53:83:05
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUK9PlMsMo8QtTPN/aymWbwMrhufAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3
NEU0RjNDMDAeFw0yNDA4MTIxNzA1MDlaFw0yNTA4MTExNzEwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0IxOTcyOUM4MjJFQ0QyRDhF
NTg3NEYzMEFCMTI1NzcyNzhCOUQ4MDJCNEY4NkE0QjI4QzJCQzNFQThDQ0E4MTlB
OTUzRUM5NzRCNzRDMjlFMzc2MENCODgyNjcxNkFDNDk0RDY5MEQxNUI5NUI3NDEx
REY3OUU1REYyNzQ5NEI5ODRFRDM3NkQyQjNBNDBCQUQ4RjQ4QjYyNTVFQ0Q1QUJE
QzAxMTIxMERCQjg2MEM3RjQ2N0VBRUIzQzFDNzM0MDVEOTI2ODQ5MkFFMzk3QjVC
NjAxRjFBRjM5OEYxMzRERTdFQzExOUI5RDEyRUExQjQwMEM2QUI5OERGODU0RTNB
MDQ4NENDNTRDQ0JFMDIyRjI1QkVGNDIyMDUzQzVDN0NBOENDRjgyQTBDQjIxN0M3
MkRCRUMwOUM5QkE3NjBFQzhCRkY2RUQyMzQwQTdBQjE1NjU3MzlCQzZDMEQzOEQ4
RDQyNTlGRDIyMjlFQTgwQTM0NzNBMzk2MTMwRkIwRTdGQjBDNTREOTk0NkNFNjA4
M0IyQUNBNEQyOTgyM0IyQ0E2QkI4QTE2RDREQTNGNTA2MDIxOTcyMDNBOTA4RjQz
MkRDQTU3MUVBOTU0MzBEMjRGOTRCNjVDM0RGRTFCMUU4M0EyMEU5QUNGNUJBRTBB
QzFDNjNDOTBFREYxQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyxlynIIuzS2OWHTzCrEldyeLnYArT4aksowrw+qMyoGalT7JdLdM
KeN2DLiCZxasSU1pDRW5W3QR33nl3ydJS5hO03bSs6QLrY9ItiVezVq9wBEhDbuG
DH9Gfq6zwcc0BdkmhJKuOXtbYB8a85jxNN5+wRm50S6htADGq5jfhU46BITMVMy+
Ai8lvvQiBTxcfKjM+CoMshfHLb7AnJunYOyL/27SNAp6sVZXObxsDTjY1CWf0iKe
qAo0c6OWEw+w5/sMVNmUbOYIOyrKTSmCOyymu4oW1No/UGAhlyA6kI9DLcpXHqlU
MNJPlLZcPf4bHoOiDprPW64KwcY8kO3xuwIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FKpdg8bOo3PxMiq8s8xb/p403g0tMB8GA1UdIwQYMBaAFFkobAldAQSUu6vqIsmu
yUh05PPAMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FX
MkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzU5Mjg2QzA5NUQwMTA0OTRC
QkFCRUEyMkM5QUVDOTQ4NzRFNEYzQzAuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3NEU0RjND
MC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FXMkFLMmtr
b1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzMyMzgzMDM0M2EzNDM4MzczMDNhMzE2
MjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM3MzEzMjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKARIcAGxMA0GCSqGSIb3DQEBCwUAA4IBAQBv8QeCtxBO9nnTKP8VyBwIEOEt
brGQsBEn+budba5mXpR6d8pXSumB4ef/W1OIG6HmIIZDx4ijQ0F8a2N5L7+gRuam
LU42AG3Ne8R+WOk8CuD24q5fBbrnbe7/vzKJGy+axDBVXrXsSq4iX3zPpauyd5lR
OV4ZIa/nSpzlnxoaONlvQLhdyY4jJ+5DpvLqSTbJIi2O+B43U0eTIw9wPjKxdVut
m5rjKKgwabG1ylr484y3AHG9LnWVVPwLIxVfsKhf0vFyJtkZ3th7l7csPzFhhy5d
6+6G/sFUNkLy7f4IGjUt+kCJT9AuF7T7f18HPNUK4ElJEBIihCYQN537U4MF
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:14 2024 by rpki-client on console-fra.rpki-client.org