Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          F/jUwQHpg+FPwYz0idYuSl1jFcrbXQqkb2mWVh23oeQ=
Subject key identifier:   83:7B:0F:4D:3C:5D:B0:E8:B9:8A:21:B1:E4:40:14:0E:18:A6:1A:DB
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       4BCB28C5326AD6CF2A102D7099EDF84B6552E80D
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     266248
IP address blocks:        2804:3d04:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cb:28:c5:32:6a:d6:cf:2a:10:2d:70:99:ed:f8:4b:65:52:e8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:0e:c4:f5:4f:f7:71:37:9a:e4:4d:f6:8f:
                    16:2c:0f:2e:e2:20:5b:08:a7:69:f6:cc:e2:6f:d9:
                    a0:77:f5:62:98:49:e3:9d:8d:24:c2:cb:14:b0:ad:
                    65:10:e7:81:b4:ca:8c:c4:a8:3d:39:e9:32:7e:a3:
                    7e:04:4b:97:5e:21:38:cd:ff:b8:7e:e5:00:dd:f4:
                    7e:7f:62:30:90:af:9a:ca:32:82:b0:83:64:4b:6b:
                    b9:21:06:8e:e5:5d:d0:a3:d0:e9:9a:6e:fc:b9:b8:
                    ff:fb:c3:8e:f8:ad:83:87:db:a5:3c:4a:6e:bd:93:
                    da:a4:e1:3f:0d:17:bd:a9:c2:cd:19:af:87:e7:8c:
                    86:e4:69:47:a6:e7:09:f7:6e:f6:a5:83:30:b3:f4:
                    f2:79:83:74:44:f8:e2:93:3f:9f:84:be:8a:dc:a3:
                    23:e6:aa:65:32:d5:b6:20:7d:85:a4:e4:d9:2a:94:
                    24:43:8c:1b:5e:87:d0:a8:a5:b3:70:96:e1:7f:7b:
                    16:dd:9a:e9:69:95:73:3c:bc:08:f3:37:e4:39:87:
                    1b:3b:40:f5:b0:52:5a:8e:74:6c:ff:bc:eb:a1:d3:
                    31:33:39:24:09:d9:10:58:56:ab:c0:58:97:99:ce:
                    72:3b:06:74:96:d5:2f:82:02:4c:a6:06:88:0c:70:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7B:0F:4D:3C:5D:B0:E8:B9:8A:21:B1:E4:40:14:0E:18:A6:1A:DB
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:f6:a7:06:4d:c5:9e:fa:63:9b:e5:13:cd:7f:57:77:58:d2:
         e8:8e:57:02:57:85:94:96:d1:54:e0:b6:4e:f2:27:86:95:41:
         be:62:2e:9c:47:3f:83:2b:2f:d2:c9:82:bc:9e:05:9b:5b:c9:
         44:1e:6a:09:69:dd:59:60:78:fa:00:04:7f:30:3f:09:08:ac:
         5f:76:f5:6f:bd:ac:3b:2c:09:17:c5:0d:37:5e:3b:72:15:47:
         f5:dc:61:3b:f6:38:6a:87:6d:f6:1b:e5:bb:23:30:1b:ae:a9:
         8b:80:ec:66:04:ae:f4:3e:ca:84:63:b9:47:dc:96:56:b7:a2:
         31:85:c9:3d:dd:6d:84:e1:d0:6a:46:71:d3:09:83:2f:6f:e4:
         2b:ec:bd:83:0a:86:17:92:9a:ee:af:4a:61:99:35:fa:b6:d0:
         e9:4b:da:fd:a9:0e:85:51:af:47:d3:06:83:32:ad:b2:aa:15:
         38:a0:ea:30:3e:20:6a:33:19:07:56:4b:4a:6d:3e:d9:cb:a3:
         03:4a:37:71:6c:92:dd:92:9b:f8:b8:63:ca:5a:b2:aa:a9:88:
         70:57:aa:d6:00:ba:56:57:77:37:a7:9e:00:e9:5d:a7:ab:6a:
         84:58:64:a5:39:9e:41:bf:d6:f6:83:0b:7e:49:0d:9c:20:3b:
         f4:ed:81:da
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUS8soxTJq1s8qEC1wme34S2VS6A0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNDA0MDMxODI2MDlaFw0yNTA0MDIxODMxMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTNFQzBFQzRGNTRGRjc3MTM3
OUFFNDRERjY4RjE2MkMwRjJFRTIyMDVCMDhBNzY5RjZDQ0UyNkZEOUEwNzdGNTYy
OTg0OUUzOUQ4RDI0QzJDQjE0QjBBRDY1MTBFNzgxQjRDQThDQzRBODNEMzlFOTMy
N0VBMzdFMDQ0Qjk3NUUyMTM4Q0RGRkI4N0VFNTAwRERGNDdFN0Y2MjMwOTBBRjlB
Q0EzMjgyQjA4MzY0NEI2QkI5MjEwNjhFRTU1REQwQTNEMEU5OUE2RUZDQjlCOEZG
RkJDMzhFRjhBRDgzODdEQkE1M0M0QTZFQkQ5M0RBQTRFMTNGMEQxN0JEQTlDMkNE
MTlBRjg3RTc4Qzg2RTQ2OTQ3QTZFNzA5Rjc2RUY2QTU4MzMwQjNGNEYyNzk4Mzc0
NDRGOEUyOTMzRjlGODRCRThBRENBMzIzRTZBQTY1MzJENUI2MjA3RDg1QTRFNEQ5
MkE5NDI0NDM4QzFCNUU4N0QwQThBNUIzNzA5NkUxN0Y3QjE2REQ5QUU5Njk5NTcz
M0NCQzA4RjMzN0U0Mzk4NzFCM0I0MEY1QjA1MjVBOEU3NDZDRkZCQ0VCQTFEMzMx
MzMzOTI0MDlEOTEwNTg1NkFCQzA1ODk3OTlDRTcyM0IwNjc0OTZENTJGODIwMjRD
QTYwNjg4MEM3MEU1QjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo+wOxPVP93E3muRN9o8WLA8u4iBbCKdp9szib9mgd/VimEnjnY0k
wssUsK1lEOeBtMqMxKg9OekyfqN+BEuXXiE4zf+4fuUA3fR+f2IwkK+ayjKCsINk
S2u5IQaO5V3Qo9Dpmm78ubj/+8OO+K2Dh9ulPEpuvZPapOE/DRe9qcLNGa+H54yG
5GlHpucJ9272pYMws/TyeYN0RPjikz+fhL6K3KMj5qplMtW2IH2FpOTZKpQkQ4wb
XofQqKWzcJbhf3sW3ZrpaZVzPLwI8zfkOYcbO0D1sFJajnRs/7zrodMxMzkkCdkQ
WFarwFiXmc5yOwZ0ltUvggJMpgaIDHDlswIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FIN7D008XbDouYohseRAFA4YphrbMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzMyMzgzMDM0M2EzMzY0MzAzNDNh
NjUzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBD0E4DANBgkqhkiG9w0BAQsFAAOCAQEAnfanBk3Fnvpjm+UTzX9X
d1jS6I5XAleFlJbRVOC2TvInhpVBvmIunEc/gysv0smCvJ4Fm1vJRB5qCWndWWB4
+gAEfzA/CQisX3b1b72sOywJF8UNN147chVH9dxhO/Y4aodt9hvluyMwG66pi4Ds
ZgSu9D7KhGO5R9yWVreiMYXJPd1thOHQakZx0wmDL2/kK+y9gwqGF5Ka7q9KYZk1
+rbQ6Uva/akOhVGvR9MGgzKtsqoVOKDqMD4gajMZB1ZLSm0+2cujA0o3cWyS3ZKb
+LhjylqyqqmIcFeq1gC6Vld3N6eeAOldp6tqhFhkpTmeQb/W9oMLfkkNnCA79O2B
2g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org