Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          f20rbksf1U4oSQAi+bDf/17C/4VYpK/xVJEHkJHzBPg=
Subject key identifier:   99:C0:73:16:E6:E4:B3:92:A0:90:5B:9C:03:0D:56:44:0E:C8:A3:2C
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       6723C78BFCF9987BB25C81BA896359CD701E8B51
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     266248
IP address blocks:        2804:3d04:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:23:c7:8b:fc:f9:98:7b:b2:5c:81:ba:89:63:59:cd:70:1e:8b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:7e:a9:d7:b9:6e:d0:7b:0c:c7:c7:1b:65:
                    39:69:d1:72:20:11:02:43:89:ec:3d:10:44:0d:14:
                    6f:d4:7c:27:ef:f9:7f:80:72:68:fc:b9:d4:e5:1e:
                    b0:48:a4:ab:09:71:8a:ab:ec:08:af:90:87:8c:6e:
                    bb:f6:09:ef:14:b9:c6:b9:10:b7:25:98:8e:7a:26:
                    fc:91:1e:c5:6d:19:e5:77:54:30:60:00:11:92:7b:
                    4e:0f:f1:b0:ab:28:4a:e2:b9:7f:1c:71:c8:93:d2:
                    e4:2a:0e:44:ca:9c:d5:70:e0:39:ec:88:a4:ce:9d:
                    2c:76:31:38:76:88:7d:9a:74:69:4c:0f:70:b1:a4:
                    5e:f2:06:26:27:5e:5a:96:98:f5:53:98:0d:8c:4a:
                    47:47:50:cc:09:97:5f:2a:50:cb:f4:76:e8:c8:fc:
                    de:2f:3c:7a:fd:79:a0:f9:4a:51:b6:5e:50:34:64:
                    d6:98:fe:7c:17:a3:c6:59:ce:88:25:96:3d:c8:36:
                    8b:5e:f6:2e:db:77:19:41:f9:ef:77:d9:b8:cb:82:
                    23:bb:24:7a:72:f6:57:6b:fb:ff:85:98:f7:3c:d3:
                    88:af:0e:e6:2b:7a:67:8b:f6:88:8e:da:91:a4:72:
                    40:50:70:a0:b3:e8:dc:99:9e:52:38:75:16:e7:04:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C0:73:16:E6:E4:B3:92:A0:90:5B:9C:03:0D:56:44:0E:C8:A3:2C
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:57:68:c2:d9:0f:10:71:bb:ac:a9:99:d5:93:a8:31:78:37:
         92:5b:cd:21:8b:8f:c0:64:93:1a:5d:d2:8f:3d:97:2f:1d:08:
         55:43:86:e8:0c:6d:52:95:ec:4c:5e:83:67:b2:4e:4f:bd:4a:
         2b:e1:ae:65:6b:c1:66:c6:ad:d6:2b:b8:cf:ef:cb:70:a0:0e:
         79:b9:39:87:cd:e0:49:56:d3:f7:dc:74:90:6d:89:53:ab:40:
         a7:7b:79:17:54:2a:91:a8:fc:c4:5b:35:73:e8:84:51:19:9c:
         4f:c9:1b:92:8c:48:0c:49:78:02:7e:67:51:7e:47:e8:9c:4e:
         8c:e7:bc:db:21:de:7b:1f:aa:61:c5:8a:63:6d:59:c3:f4:56:
         f5:60:2f:d7:ad:93:76:9f:6e:fe:c9:96:73:77:3b:be:fb:91:
         44:17:d8:8e:6d:30:35:73:32:4b:d1:dc:7c:31:e4:7d:18:9b:
         08:1e:22:20:e7:a5:ba:e4:26:df:51:1f:ee:60:da:8a:c2:01:
         52:e7:1f:d2:6f:29:5c:a2:25:59:81:35:47:86:28:2b:8d:05:
         e9:0d:02:e2:fa:14:49:45:27:3b:89:d8:ed:c6:a8:55:54:c0:
         df:81:58:d3:38:b2:a1:84:52:5d:81:cc:42:e9:f7:51:9c:4f:
         39:f7:82:b3
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUZyPHi/z5mHuyXIG6iWNZzXAei1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNDA0MDMxODI2MTBaFw0yNTA0MDIxODMxMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc5QzdFQTlEN0I5NkVEMDdC
MENDN0M3MUI2NTM5NjlEMTcyMjAxMTAyNDM4OUVDM0QxMDQ0MEQxNDZGRDQ3QzI3
RUZGOTdGODA3MjY4RkNCOUQ0RTUxRUIwNDhBNEFCMDk3MThBQUJFQzA4QUY5MDg3
OEM2RUJCRjYwOUVGMTRCOUM2QjkxMEI3MjU5ODhFN0EyNkZDOTExRUM1NkQxOUU1
Nzc1NDMwNjAwMDExOTI3QjRFMEZGMUIwQUIyODRBRTJCOTdGMUM3MUM4OTNEMkU0
MkEwRTQ0Q0E5Q0Q1NzBFMDM5RUM4OEE0Q0U5RDJDNzYzMTM4NzY4ODdEOUE3NDY5
NEMwRjcwQjFBNDVFRjIwNjI2Mjc1RTVBOTY5OEY1NTM5ODBEOEM0QTQ3NDc1MEND
MDk5NzVGMkE1MENCRjQ3NkU4QzhGQ0RFMkYzQzdBRkQ3OUEwRjk0QTUxQjY1RTUw
MzQ2NEQ2OThGRTdDMTdBM0M2NTlDRTg4MjU5NjNEQzgzNjhCNUVGNjJFREI3NzE5
NDFGOUVGNzdEOUI4Q0I4MjIzQkIyNDdBNzJGNjU3NkJGQkZGODU5OEY3M0NEMzg4
QUYwRUU2MkI3QTY3OEJGNjg4OEVEQTkxQTQ3MjQwNTA3MEEwQjNFOERDOTk5RTUy
Mzg3NTE2RTcwNDY1QjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt5x+qde5btB7DMfHG2U5adFyIBECQ4nsPRBEDRRv1Hwn7/l/gHJo
/LnU5R6wSKSrCXGKq+wIr5CHjG679gnvFLnGuRC3JZiOeib8kR7FbRnld1QwYAAR
kntOD/GwqyhK4rl/HHHIk9LkKg5EypzVcOA57Iikzp0sdjE4doh9mnRpTA9wsaRe
8gYmJ15alpj1U5gNjEpHR1DMCZdfKlDL9HboyPzeLzx6/Xmg+UpRtl5QNGTWmP58
F6PGWc6IJZY9yDaLXvYu23cZQfnvd9m4y4IjuyR6cvZXa/v/hZj3PNOIrw7mK3pn
i/aIjtqRpHJAUHCgs+jcmZ5SOHUW5wRluQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FJnAcxbm5LOSoJBbnAMNVkQOyKMsMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzMyMzgzMDM0M2EzMzY0MzAzNDNh
MzgzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBD0EgDANBgkqhkiG9w0BAQsFAAOCAQEAgFdowtkPEHG7rKmZ1ZOo
MXg3klvNIYuPwGSTGl3Sjz2XLx0IVUOG6AxtUpXsTF6DZ7JOT71KK+GuZWvBZsat
1iu4z+/LcKAOebk5h83gSVbT99x0kG2JU6tAp3t5F1Qqkaj8xFs1c+iEURmcT8kb
koxIDEl4An5nUX5H6JxOjOe82yHeex+qYcWKY21Zw/RW9WAv162Tdp9u/smWc3c7
vvuRRBfYjm0wNXMyS9HcfDHkfRibCB4iIOeluuQm31Ef7mDaisIBUucf0m8pXKIl
WYE1R4YoK40F6Q0C4voUSUUnO4nY7caoVVTA34FY0ziyoYRSXYHMQun3UZxPOfeC
sw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org