Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/1/323830343a383366383a3a2f33362d3438203d3e20323732323331.roa
File:                     323830343a383366383a3a2f33362d3438203d3e20323732323331.roa (raw, json)
Hash identifier:          911vclUnEF8zGhMTJVbc+8RbTPW/sULcGy/s9RfPzu0=
Subject key identifier:   CB:50:7C:BE:F2:37:CB:77:18:F6:AC:67:2F:BE:9C:B1:B8:DD:FD:F4
Certificate issuer:       /CN=FBA1CF113E22FC6090238325F0DD77791C31C6BF
Certificate serial:       6A5544C7904802B6DBF6A90E328EBC8C271FAB1E
Authority key identifier: FB:A1:CF:11:3E:22:FC:60:90:23:83:25:F0:DD:77:79:1C:31:C6:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBA1CF113E22FC6090238325F0DD77791C31C6BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/1/323830343a383366383a3a2f33362d3438203d3e20323732323331.roa
Signing time:             Thu 04 Apr 2024 06:35:20 +0000
ROA not before:           Thu 04 Apr 2024 06:30:20 +0000
ROA not after:            Thu 03 Apr 2025 06:35:20 +0000
asID:                     272231
IP address blocks:        2804:83f8::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/1/FBA1CF113E22FC6090238325F0DD77791C31C6BF.crl
                          rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/1/FBA1CF113E22FC6090238325F0DD77791C31C6BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBA1CF113E22FC6090238325F0DD77791C31C6BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:55:44:c7:90:48:02:b6:db:f6:a9:0e:32:8e:bc:8c:27:1f:ab:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBA1CF113E22FC6090238325F0DD77791C31C6BF
        Validity
            Not Before: Apr  4 06:30:20 2024 GMT
            Not After : Apr  3 06:35:20 2025 GMT
        Subject: CN=CB507CBEF237CB7718F6AC672FBE9CB1B8DDFDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:72:56:a5:37:44:a0:0c:0d:06:77:74:04:
                    c6:12:b7:a5:b8:0c:67:b8:4c:0f:bf:ca:ed:61:de:
                    a7:ee:b8:58:89:88:d5:53:86:97:68:e8:61:39:c8:
                    89:ff:30:0a:90:4d:13:bb:78:6d:a3:54:28:54:6d:
                    43:e3:3b:2c:9f:5c:74:2b:05:ea:89:b5:c4:4a:89:
                    10:1d:54:03:33:e7:60:55:13:d7:06:cb:f3:c6:90:
                    6e:43:30:47:4f:5c:e9:6a:ea:67:70:76:3a:71:83:
                    0c:c4:11:fc:df:98:a6:6c:3b:f8:06:08:f4:a9:6c:
                    01:88:2b:e2:23:2d:94:37:42:af:b5:da:6e:94:78:
                    bd:c3:b8:76:79:b8:b6:cf:da:b4:78:1a:fa:06:02:
                    9a:15:b5:e7:21:5c:6c:8d:31:1a:40:f6:73:ce:cc:
                    65:97:5a:ac:3e:1b:73:de:60:dc:b6:99:4f:6f:93:
                    a0:28:16:92:30:cc:a4:23:4f:56:4a:aa:6d:13:e1:
                    49:18:11:96:6c:d7:ce:99:57:e4:8d:3a:aa:89:13:
                    c7:f8:ec:de:64:7a:18:35:03:1f:80:32:7d:4a:7a:
                    d9:76:e0:64:2b:16:f9:1e:28:81:ba:d6:8d:d9:ed:
                    3f:b6:1d:ea:6b:e9:65:d2:25:70:bf:d9:a0:eb:68:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:7C:BE:F2:37:CB:77:18:F6:AC:67:2F:BE:9C:B1:B8:DD:FD:F4
            X509v3 Authority Key Identifier:
                keyid:FB:A1:CF:11:3E:22:FC:60:90:23:83:25:F0:DD:77:79:1C:31:C6:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/1/FBA1CF113E22FC6090238325F0DD77791C31C6BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBA1CF113E22FC6090238325F0DD77791C31C6BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/1/323830343a383366383a3a2f33362d3438203d3e20323732323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83f8::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:a0:a3:9a:46:14:78:b3:5b:ed:c2:65:30:b1:57:39:1e:
         9e:ae:9f:3b:69:e6:0e:89:d9:cc:0d:e4:ba:bd:24:e5:10:1e:
         2a:1e:07:9d:75:02:00:88:72:f7:cb:7e:f5:41:e3:79:a8:39:
         e6:6b:fe:d3:3b:ea:29:e6:f2:d0:b7:61:3f:f1:1f:ef:ca:aa:
         f8:c4:66:5d:d1:4a:76:0d:4e:fb:f9:17:b9:55:b7:20:75:13:
         11:ad:97:b2:6b:92:b0:fd:4b:93:c3:c0:55:3f:34:a5:ca:d4:
         cc:63:55:f3:69:47:f2:35:33:4e:d2:21:10:e6:e6:07:ce:c4:
         63:bb:92:fa:ab:76:e5:51:c4:eb:93:12:2f:3e:6a:03:b3:ac:
         72:1b:40:e4:de:ff:45:af:65:1c:ac:12:be:8b:dd:e8:67:46:
         05:6e:23:75:ce:c4:5e:c1:c6:29:7b:ae:0f:b6:66:28:36:71:
         14:d6:97:ba:0c:fd:91:97:df:97:ff:a5:b9:91:dd:a8:0c:69:
         2b:4c:21:0e:e4:6e:47:ab:32:7a:9b:c0:7a:59:c2:54:11:0c:
         63:79:e9:45:54:36:f3:f6:a9:b6:5e:e5:29:df:a4:ab:dc:4d:
         16:d7:d8:19:71:b1:dc:ec:32:ff:02:2d:4d:0a:f4:1d:34:4d:
         cc:b3:1b:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUalVEx5BIArbb9qkOMo68jCcfqx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJBMUNGMTEzRTIyRkM2MDkwMjM4MzI1RjBERDc3Nzkx
QzMxQzZCRjAeFw0yNDA0MDQwNjMwMjBaFw0yNTA0MDMwNjM1MjBaMDMxMTAvBgNV
BAMTKENCNTA3Q0JFRjIzN0NCNzcxOEY2QUM2NzJGQkU5Q0IxQjhEREZERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOXJWpTdEoAwNBnd0BMYSt6W4
DGe4TA+/yu1h3qfuuFiJiNVThpdo6GE5yIn/MAqQTRO7eG2jVChUbUPjOyyfXHQr
BeqJtcRKiRAdVAMz52BVE9cGy/PGkG5DMEdPXOlq6mdwdjpxgwzEEfzfmKZsO/gG
CPSpbAGIK+IjLZQ3Qq+12m6UeL3DuHZ5uLbP2rR4GvoGApoVtechXGyNMRpA9nPO
zGWXWqw+G3PeYNy2mU9vk6AoFpIwzKQjT1ZKqm0T4UkYEZZs186ZV+SNOqqJE8f4
7N5kehg1Ax+AMn1Ketl24GQrFvkeKIG61o3Z7T+2Hepr6WXSJXC/2aDraGFFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUy1B8vvI3y3cY9qxnL76csbjd/fQwHwYDVR0j
BBgwFoAU+6HPET4i/GCQI4Ml8N13eRwxxr8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTVIVW1yajRud3ZEbXFFWkNWWHVCRzE4S01NSHBHTDkzOFlKUXNDZTVx
QjgvMS9GQkExQ0YxMTNFMjJGQzYwOTAyMzgzMjVGMERENzc3OTFDMzFDNkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCQTFDRjExM0UyMkZDNjA5
MDIzODMyNUYwREQ3Nzc5MUMzMUM2QkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk1SFVtcmo0bnd2RG1xRVpDVlh1QkcxOEtNTUhwR0w5MzhZSlFzQ2U1cUI4LzEv
MzIzODMwMzQzYTM4MzM2NjM4M2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzNzMy
MzIzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKASD+AAwDQYJKoZIhvcNAQELBQADggEBAE7goKOa
RhR4s1vtwmUwsVc5Hp6unztp5g6J2cwN5Lq9JOUQHioeB511AgCIcvfLfvVB43mo
OeZr/tM76inm8tC3YT/xH+/KqvjEZl3RSnYNTvv5F7lVtyB1ExGtl7JrkrD9S5PD
wFU/NKXK1MxjVfNpR/I1M07SIRDm5gfOxGO7kvqrduVRxOuTEi8+agOzrHIbQOTe
/0WvZRysEr6L3ehnRgVuI3XOxF7Bxil7rg+2Zig2cRTWl7oM/ZGX35f/pbmR3agM
aStMIQ7kbkerMnqbwHpZwlQRDGN56UVUNvP2qbZe5SnfpKvcTRbX2BlxsdzsMv8C
LU0K9B00TcyzG1w=
-----END CERTIFICATE-----
Generated at Wed Jun 26 23:30:25 2024 by rpki-client on console-fra.rpki-client.org