Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/323830343a326431343a3a2f33322d3335203d3e20323635323630.roa
File:                     323830343a326431343a3a2f33322d3335203d3e20323635323630.roa (raw, json)
Hash identifier:          eAlj03fJ+L8pUyvw/eahD4Q+3VESQ9LApRQFxnlCpiY=
Subject key identifier:   DA:F7:A6:6B:46:DC:65:AA:D1:B6:8B:BE:80:DE:77:B8:06:66:B8:24
Certificate issuer:       /CN=C015B32C7C5158D42E33F7D1939172DB85380C54
Certificate serial:       7436EADAC7B98EE21E2B556E787A0C36AA9CC2C0
Authority key identifier: C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/323830343a326431343a3a2f33322d3335203d3e20323635323630.roa
Signing time:             Wed 03 Apr 2024 18:31:47 +0000
ROA not before:           Wed 03 Apr 2024 18:26:47 +0000
ROA not after:            Wed 02 Apr 2025 18:31:47 +0000
asID:                     265260
IP address blocks:        2804:2d14::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl
                          rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:36:ea:da:c7:b9:8e:e2:1e:2b:55:6e:78:7a:0c:36:aa:9c:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C015B32C7C5158D42E33F7D1939172DB85380C54
        Validity
            Not Before: Apr  3 18:26:47 2024 GMT
            Not After : Apr  2 18:31:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:1e:18:ce:48:8a:d4:c6:a6:10:43:22:e8:
                    15:cf:3d:4a:87:24:d2:ec:04:be:cf:6a:ef:ba:37:
                    55:c0:50:08:cf:e6:8a:21:4b:5c:59:1f:0f:93:04:
                    13:ca:a5:b3:97:9c:76:1b:0c:00:52:c4:e6:0a:64:
                    7e:a6:f5:8d:95:c5:57:e5:35:c1:0b:b2:e7:08:f8:
                    2b:ba:5e:0e:db:d4:1d:fb:e2:bc:ca:f9:b1:46:e7:
                    47:44:30:3c:6e:e0:0b:27:c4:26:d6:1e:14:92:5c:
                    4c:47:11:cf:5c:cf:f2:4f:4f:2f:8f:f7:a9:fa:49:
                    06:9e:9b:f4:34:72:2a:c4:73:37:36:ef:64:b5:e7:
                    1f:84:84:1a:19:a2:f5:ac:9c:5b:23:dd:70:b1:66:
                    b7:87:39:f8:25:40:52:0c:54:24:e1:90:65:1d:4f:
                    5a:c7:b4:96:e2:de:2c:d3:12:f2:9d:89:c3:ac:8c:
                    92:3f:f0:91:7b:c6:b1:93:18:f2:34:89:b6:3a:69:
                    83:d9:d6:00:62:36:11:1c:4e:15:ca:1e:67:a9:2f:
                    0e:32:a5:15:c5:09:d3:24:f6:54:6b:88:f8:c8:a1:
                    30:c9:9f:16:a6:d5:2d:53:92:ec:22:c3:89:1e:20:
                    22:57:9e:7a:2d:dc:28:34:b6:14:07:c1:40:cc:bf:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:A6:6B:46:DC:65:AA:D1:B6:8B:BE:80:DE:77:B8:06:66:B8:24
            X509v3 Authority Key Identifier:
                keyid:C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/323830343a326431343a3a2f33322d3335203d3e20323635323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:14:fc:7e:cf:ba:84:aa:9d:1f:6e:d0:9d:27:e8:e0:5b:
         0f:18:96:fa:02:da:6f:11:61:3b:d4:a4:2f:0e:d4:f5:04:8a:
         57:fa:a4:81:3f:e5:dc:72:33:ee:0d:bf:c8:ab:c3:45:08:d8:
         be:6b:4b:a0:85:5f:e9:88:f4:af:c9:a6:0f:96:74:e6:20:a5:
         2e:18:0e:24:d0:20:c6:a8:02:3c:f2:34:a5:1b:e6:44:8a:6c:
         04:d6:5d:c5:8f:50:cf:b6:e4:b6:d8:f2:7d:13:68:6c:76:a4:
         2b:63:65:23:54:7e:ca:46:5e:00:4b:f1:1b:b9:7d:66:ed:20:
         a1:e6:8d:a4:1c:e1:56:2d:5c:5f:ab:d2:b3:29:d4:74:e2:f5:
         79:c6:ee:68:e7:ef:5c:f8:46:2b:8d:b1:0e:ba:c8:40:1d:0e:
         79:26:a9:11:77:6e:ba:8e:7c:f5:00:0b:8b:22:fb:2f:40:c7:
         8a:4e:c6:26:c0:75:02:f6:84:2d:41:86:3a:2d:76:15:74:00:
         bc:f4:2a:69:e1:e4:07:73:03:43:ca:6e:b7:f0:97:13:09:b2:
         9d:ad:b4:10:80:1f:3a:f6:d8:9d:f6:9c:38:4b:e0:f9:2d:ba:
         07:d1:6a:3f:74:26:1b:55:93:c6:8f:1e:0f:cb:d3:66:c0:fb:
         83:35:17:cd
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUdDbq2se5juIeK1VueHoMNqqcwsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxNUIzMkM3QzUxNThENDJFMzNGN0QxOTM5MTcyREI4
NTM4MEM1NDAeFw0yNDA0MDMxODI2NDdaFw0yNTA0MDIxODMxNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg5NjFFMThDRTQ4OEFENEM2
QTYxMDQzMjJFODE1Q0YzRDRBODcyNEQyRUMwNEJFQ0Y2QUVGQkEzNzU1QzA1MDA4
Q0ZFNjhBMjE0QjVDNTkxRjBGOTMwNDEzQ0FBNUIzOTc5Qzc2MUIwQzAwNTJDNEU2
MEE2NDdFQTZGNThEOTVDNTU3RTUzNUMxMEJCMkU3MDhGODJCQkE1RTBFREJENDFE
RkJFMkJDQ0FGOUIxNDZFNzQ3NDQzMDNDNkVFMDBCMjdDNDI2RDYxRTE0OTI1QzRD
NDcxMUNGNUNDRkYyNEY0RjJGOEZGN0E5RkE0OTA2OUU5QkY0MzQ3MjJBQzQ3MzM3
MzZFRjY0QjVFNzFGODQ4NDFBMTlBMkY1QUM5QzVCMjNERDcwQjE2NkI3ODczOUY4
MjU0MDUyMEM1NDI0RTE5MDY1MUQ0RjVBQzdCNDk2RTJERTJDRDMxMkYyOUQ4OUMz
QUM4QzkyM0ZGMDkxN0JDNkIxOTMxOEYyMzQ4OUI2M0E2OTgzRDlENjAwNjIzNjEx
MUM0RTE1Q0ExRTY3QTkyRjBFMzJBNTE1QzUwOUQzMjRGNjU0NkI4OEY4QzhBMTMw
Qzk5RjE2QTZENTJENTM5MkVDMjJDMzg5MUUyMDIyNTc5RTdBMkREQzI4MzRCNjE0
MDdDMTQwQ0NCRjg5QUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqJYeGM5IitTGphBDIugVzz1KhyTS7AS+z2rvujdVwFAIz+aKIUtc
WR8PkwQTyqWzl5x2GwwAUsTmCmR+pvWNlcVX5TXBC7LnCPgrul4O29Qd++K8yvmx
RudHRDA8buALJ8Qm1h4UklxMRxHPXM/yT08vj/ep+kkGnpv0NHIqxHM3Nu9ktecf
hIQaGaL1rJxbI91wsWa3hzn4JUBSDFQk4ZBlHU9ax7SW4t4s0xLynYnDrIySP/CR
e8axkxjyNIm2OmmD2dYAYjYRHE4Vyh5nqS8OMqUVxQnTJPZUa4j4yKEwyZ8WptUt
U5LsIsOJHiAiV556LdwoNLYUB8FAzL+JrQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FNr3pmtG3GWq0baLvoDed7gGZrgkMB8GA1UdIwQYMBaAFMAVsyx8UVjULjP30ZOR
ctuFOAxUMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vemVCTXJocldMWkVwbzhH
VDZvUDhhVnN1aXlEdTFSaWFhY0xxNG82NWFUSi8xL0MwMTVCMzJDN0M1MTU4RDQy
RTMzRjdEMTkzOTE3MkRCODUzODBDNTQuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvQzAxNUIzMkM3QzUxNThENDJFMzNGN0QxOTM5MTcyREI4NTM4MEM1
NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vemVCTXJocldMWkVwbzhHVDZvUDhh
VnN1aXlEdTFSaWFhY0xxNG82NWFUSi8xLzMyMzgzMDM0M2EzMjY0MzEzNDNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzNTMyMzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgELRQw
DQYJKoZIhvcNAQELBQADggEBAG0AFPx+z7qEqp0fbtCdJ+jgWw8YlvoC2m8RYTvU
pC8O1PUEilf6pIE/5dxyM+4Nv8irw0UI2L5rS6CFX+mI9K/Jpg+WdOYgpS4YDiTQ
IMaoAjzyNKUb5kSKbATWXcWPUM+25LbY8n0TaGx2pCtjZSNUfspGXgBL8Ru5fWbt
IKHmjaQc4VYtXF+r0rMp1HTi9XnG7mjn71z4RiuNsQ66yEAdDnkmqRF3brqOfPUA
C4si+y9Ax4pOxibAdQL2hC1BhjotdhV0ALz0Kmnh5AdzA0PKbrfwlxMJsp2ttBCA
Hzr22J32nDhL4PktugfRaj90JhtVk8aPHg/L02bA+4M1F80=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:40:18 2024 by rpki-client on console-fra.rpki-client.org