Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          WMQHwzxl+2qauw0XbxnMN3d6em/Jfw5P99Tc9GIXHCo=
Subject key identifier:   00:D4:18:B8:55:C3:56:28:26:2E:3F:10:72:19:2A:3E:2F:C4:23:56
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       647ADB19079864D828689863B04042069729FD92
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     266248
IP address blocks:        2804:3d04:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7a:db:19:07:98:64:d8:28:68:98:63:b0:40:42:06:97:29:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:fd:d2:89:11:70:07:ec:8b:3c:73:1c:6f:
                    2c:3a:11:91:c3:d5:c7:8a:cb:ee:3c:f0:67:c1:b9:
                    af:0b:f0:16:13:05:98:5c:73:2f:b7:e4:70:c3:ea:
                    c7:50:b8:9d:90:81:16:40:0e:11:fd:dc:69:b7:d5:
                    62:37:d2:39:de:3c:d1:5c:89:84:33:32:65:23:7c:
                    59:aa:b3:70:bc:68:a0:06:a4:34:70:18:d1:fb:51:
                    af:6d:05:96:f5:a0:35:c1:85:dd:83:ce:01:b1:02:
                    64:8e:66:6f:7b:0c:07:8b:a1:72:0e:d4:84:6e:d8:
                    de:bd:c6:fb:ab:f4:54:91:eb:b4:1e:49:a3:56:57:
                    20:a6:f9:92:7c:ba:72:2f:5c:bd:dd:5b:b5:6e:66:
                    ed:cd:87:e8:fe:9f:3c:bc:2c:4b:75:e8:ad:13:d5:
                    50:03:3c:02:85:ac:26:cb:3b:a9:c0:76:54:c2:5b:
                    6b:8a:ad:93:5b:4f:ec:1b:b5:5b:3f:9b:f7:ad:f0:
                    23:91:81:70:c1:17:78:88:4c:39:0f:e0:9e:5c:53:
                    ed:39:ad:d0:0c:20:34:71:ca:c5:5d:df:27:c8:17:
                    72:83:31:08:36:f4:49:dc:1c:a1:0e:af:ed:3e:b6:
                    a0:e7:4a:39:ca:19:43:52:e0:d6:02:9b:c0:45:c4:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:18:B8:55:C3:56:28:26:2E:3F:10:72:19:2A:3E:2F:C4:23:56
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:79:42:0b:44:c2:53:98:be:02:a9:e8:c6:31:78:b8:59:
         a8:23:72:4d:75:24:0a:b1:97:74:66:46:4e:8a:4a:46:ad:1c:
         13:33:9f:8e:33:0b:c3:5a:93:02:12:d0:82:b9:e7:15:09:d9:
         18:67:6a:e5:41:06:aa:d7:b1:bb:f2:04:d2:59:25:ce:61:cc:
         70:bc:39:5c:e2:47:15:e3:f5:e7:9b:57:0a:cb:11:ac:08:fc:
         66:e0:4c:83:68:b4:ba:cb:d3:ab:cb:bd:97:59:23:c6:f7:2d:
         73:26:0e:0c:bf:90:b9:f5:92:86:36:43:82:ae:ab:e4:9b:cd:
         d6:4e:20:ad:3c:ff:bd:14:33:a0:08:be:02:0d:3d:10:e4:0a:
         3e:cb:fa:50:f4:a1:d8:a2:81:b6:0a:bb:79:aa:41:49:9d:d9:
         d7:17:03:45:8a:06:1d:8d:d0:ee:20:e7:27:65:95:3f:0b:2b:
         b8:e1:cd:07:b7:d2:55:8f:b3:4b:c1:ac:bc:82:5e:f6:90:b1:
         55:2d:88:3f:6e:3a:e0:37:6e:9f:bf:14:60:35:a3:db:fb:7d:
         8e:18:de:15:9b:34:ba:d0:24:30:ab:44:9b:a3:de:56:43:a2:
         60:ef:8a:48:31:06:c3:ed:db:47:d7:22:b8:4f:ed:e5:d4:a4:
         79:d1:e0:7c
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUZHrbGQeYZNgoaJhjsEBCBpcp/ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNDA0MDMxODI2MTFaFw0yNTA0MDIxODMxMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJCQUZERDI4OTExNzAwN0VD
OEIzQzczMUM2RjJDM0ExMTkxQzNENUM3OEFDQkVFM0NGMDY3QzFCOUFGMEJGMDE2
MTMwNTk4NUM3MzJGQjdFNDcwQzNFQUM3NTBCODlEOTA4MTE2NDAwRTExRkREQzY5
QjdENTYyMzdEMjM5REUzQ0QxNUM4OTg0MzMzMjY1MjM3QzU5QUFCMzcwQkM2OEEw
MDZBNDM0NzAxOEQxRkI1MUFGNkQwNTk2RjVBMDM1QzE4NUREODNDRTAxQjEwMjY0
OEU2NjZGN0IwQzA3OEJBMTcyMEVENDg0NkVEOERFQkRDNkZCQUJGNDU0OTFFQkI0
MUU0OUEzNTY1NzIwQTZGOTkyN0NCQTcyMkY1Q0JEREQ1QkI1NkU2NkVEQ0Q4N0U4
RkU5RjNDQkMyQzRCNzVFOEFEMTNENTUwMDMzQzAyODVBQzI2Q0IzQkE5QzA3NjU0
QzI1QjZCOEFBRDkzNUI0RkVDMUJCNTVCM0Y5QkY3QURGMDIzOTE4MTcwQzExNzc4
ODg0QzM5MEZFMDlFNUM1M0VEMzlBREQwMEMyMDM0NzFDQUM1NURERjI3QzgxNzcy
ODMzMTA4MzZGNDQ5REMxQ0ExMEVBRkVEM0VCNkEwRTc0QTM5Q0ExOTQzNTJFMEQ2
MDI5QkMwNDVDNDI1NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwrr90okRcAfsizxzHG8sOhGRw9XHisvuPPBnwbmvC/AWEwWYXHMv
t+Rww+rHULidkIEWQA4R/dxpt9ViN9I53jzRXImEMzJlI3xZqrNwvGigBqQ0cBjR
+1GvbQWW9aA1wYXdg84BsQJkjmZvewwHi6FyDtSEbtjevcb7q/RUkeu0HkmjVlcg
pvmSfLpyL1y93Vu1bmbtzYfo/p88vCxLdeitE9VQAzwChawmyzupwHZUwltriq2T
W0/sG7VbP5v3rfAjkYFwwRd4iEw5D+CeXFPtOa3QDCA0ccrFXd8nyBdygzEINvRJ
3ByhDq/tPrag50o5yhlDUuDWApvARcQlcQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FADUGLhVw1YoJi4/EHIZKj4vxCNWMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzMyMzgzMDM0M2EzMzY0MzAzNDNh
MzQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBD0EQDANBgkqhkiG9w0BAQsFAAOCAQEAPel5QgtEwlOYvgKp6MYx
eLhZqCNyTXUkCrGXdGZGTopKRq0cEzOfjjMLw1qTAhLQgrnnFQnZGGdq5UEGqtex
u/IE0lklzmHMcLw5XOJHFeP155tXCssRrAj8ZuBMg2i0usvTq8u9l1kjxvctcyYO
DL+QufWShjZDgq6r5JvN1k4grTz/vRQzoAi+Ag09EOQKPsv6UPSh2KKBtgq7eapB
SZ3Z1xcDRYoGHY3Q7iDnJ2WVPwsruOHNB7fSVY+zS8GsvIJe9pCxVS2IP2464Ddu
n78UYDWj2/t9jhjeFZs0utAkMKtEm6PeVkOiYO+KSDEGw+3bR9ciuE/t5dSkedHg
fA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org