Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa
File:                     323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa (raw, json)
Hash identifier:          STM3Y8354yCkX5c0cuJUPkUh8g8lS8gw7FtnW/JihuE=
Subject key identifier:   70:30:11:F0:DF:96:1A:F4:A6:97:D3:29:7F:B5:12:B9:9D:F7:1F:73
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       0FED73C3DC8D7ABB23CC8ABD60D51ECC31251459
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa
Signing time:             Wed 03 Apr 2024 18:52:08 +0000
ROA not before:           Wed 03 Apr 2024 18:47:08 +0000
ROA not after:            Wed 02 Apr 2025 18:52:08 +0000
asID:                     263989
IP address blocks:        2804:28f4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ed:73:c3:dc:8d:7a:bb:23:cc:8a:bd:60:d5:1e:cc:31:25:14:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Apr  3 18:47:08 2024 GMT
            Not After : Apr  2 18:52:08 2025 GMT
        Subject: CN=703011F0DF961AF4A697D3297FB512B99DF71F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:f6:1f:17:dc:8a:87:f3:6f:93:1f:11:be:
                    c1:62:94:64:7a:f6:ac:1e:ab:0c:6a:93:66:33:84:
                    d8:c7:10:25:2f:2f:39:b1:e8:d0:24:b7:f2:73:21:
                    46:fc:57:c4:bf:d7:4f:ff:1c:b9:6a:ff:5e:4e:7f:
                    b3:1f:44:9c:ed:8f:11:82:27:c2:da:b0:89:38:2f:
                    95:ec:6e:29:d6:77:eb:c1:58:03:a6:7f:8b:bd:6b:
                    99:11:c2:db:dd:53:86:7d:dd:2c:7f:b9:01:ca:39:
                    da:4b:7c:91:fc:e8:e7:7c:a8:ac:82:b0:79:e4:e5:
                    60:46:4e:e9:a2:c3:9b:bb:ac:68:98:36:ff:e3:4c:
                    d8:32:3f:db:40:5a:77:74:c6:e0:3d:e3:a8:b1:d6:
                    2f:9d:1e:cf:cd:8a:91:c0:46:97:23:f4:26:18:54:
                    db:f3:75:c4:de:0f:47:f7:25:65:c7:d1:0b:ec:56:
                    0f:44:70:0d:ac:c2:1b:0e:bb:c2:77:a1:b6:53:e1:
                    fe:5a:32:c0:f3:fd:45:e3:ad:12:56:3b:c2:57:17:
                    54:13:32:93:12:a9:1d:f9:98:03:65:e3:77:71:6b:
                    07:49:b6:46:d5:ae:ca:c8:61:47:f8:9b:be:0f:13:
                    41:65:cc:18:14:4b:91:59:00:3d:8c:23:f4:b1:7e:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:11:F0:DF:96:1A:F4:A6:97:D3:29:7F:B5:12:B9:9D:F7:1F:73
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c3:cb:76:78:4b:f7:82:ba:c9:e2:4d:b6:9d:cd:5a:d2:8d:fe:
         93:0c:0b:be:af:8d:8e:77:89:19:d1:48:2c:bf:a8:14:9f:bb:
         41:f5:4c:1d:e8:a1:c3:d4:c9:b9:18:78:03:ba:a3:1f:0a:39:
         20:93:d3:a4:54:1f:e1:c1:c4:87:80:aa:fa:c5:52:41:da:c3:
         c6:67:ff:d4:aa:d8:c5:0d:ea:ec:49:6c:18:95:dc:f0:e9:f5:
         27:e9:4b:ec:e7:db:fa:5c:62:a1:30:a0:43:e1:06:12:3a:ad:
         b7:86:99:14:13:ef:eb:f0:44:e4:ee:cb:09:bd:eb:e5:89:aa:
         f7:9c:50:c7:68:b5:e4:2d:7c:8a:36:54:bc:7f:38:ec:5c:77:
         14:cc:c8:2b:2e:32:91:f5:3e:5e:58:ad:f6:f4:c2:96:e0:27:
         4b:a7:23:8a:1a:aa:59:fe:ae:20:33:2d:3e:45:73:d2:f7:df:
         5a:8e:b4:26:f9:0d:fc:5d:8c:74:51:7a:6f:b9:72:22:60:09:
         a3:77:6d:d5:8d:1e:7b:02:2a:2c:5a:87:5e:f9:36:44:f2:19:
         f6:ee:44:b5:55:f9:8e:14:a8:e3:b1:33:d1:3e:a6:c0:8c:86:
         b4:91:5b:b2:79:93:16:4b:45:9b:d7:52:48:a6:28:fe:53:af:
         30:60:0f:e6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUD+1zw9yNersjzIq9YNUezDElFFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUyQ0ZBREUwREI5NjVCODMwRDRDOTJEMjE4MzkyMUFF
MTEzRDJBMjAeFw0yNDA0MDMxODQ3MDhaFw0yNTA0MDIxODUyMDhaMDMxMTAvBgNV
BAMTKDcwMzAxMUYwREY5NjFBRjRBNjk3RDMyOTdGQjUxMkI5OURGNzFGNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCee/YfF9yKh/Nvkx8RvsFilGR6
9qweqwxqk2YzhNjHECUvLzmx6NAkt/JzIUb8V8S/10//HLlq/15Of7MfRJztjxGC
J8LasIk4L5XsbinWd+vBWAOmf4u9a5kRwtvdU4Z93Sx/uQHKOdpLfJH86Od8qKyC
sHnk5WBGTumiw5u7rGiYNv/jTNgyP9tAWnd0xuA946ix1i+dHs/NipHARpcj9CYY
VNvzdcTeD0f3JWXH0QvsVg9EcA2swhsOu8J3obZT4f5aMsDz/UXjrRJWO8JXF1QT
MpMSqR35mANl43dxawdJtkbVrsrIYUf4m74PE0FlzBgUS5FZAD2MI/SxfmOlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcDAR8N+WGvSml9Mpf7USuZ33H3MwHwYDVR0j
BBgwFoAUbiz63g25Zbgw1MktIYOSGuET0qIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZ6akppOTd4dkdYWUVKMldzQXJ0ZzhOd3RNdTcyclJTRGdrYVJ2QVJS
OG8vMS82RTJDRkFERTBEQjk2NUI4MzBENEM5MkQyMTgzOTIxQUUxMTNEMkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMkNGQURFMERCOTY1Qjgz
MEQ0QzkyRDIxODM5MjFBRTExM0QyQTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2empKaTk3eHZHWFlFSjJXc0FydGc4Tnd0TXU3MnJSU0Rna2FSdkFSUjhvLzEv
MzIzODMwMzQzYTMyMzg2NjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKPRAMA0GCSqGSIb3DQEBCwUA
A4IBAQDDy3Z4S/eCusniTbadzVrSjf6TDAu+r42Od4kZ0Ugsv6gUn7tB9Uwd6KHD
1Mm5GHgDuqMfCjkgk9OkVB/hwcSHgKr6xVJB2sPGZ//UqtjFDersSWwYldzw6fUn
6Uvs59v6XGKhMKBD4QYSOq23hpkUE+/r8ETk7ssJvevliar3nFDHaLXkLXyKNlS8
fzjsXHcUzMgrLjKR9T5eWK329MKW4CdLpyOKGqpZ/q4gMy0+RXPS999ajrQm+Q38
XYx0UXpvuXIiYAmjd23VjR57AiosWode+TZE8hn27kS1VfmOFKjjsTPRPqbAjIa0
kVuyeZMWS0Wb11JIpij+U68wYA/m
-----END CERTIFICATE-----
Generated at Tue Nov 26 16:32:15 2024 by rpki-client on console-ams.rpki-client.org