Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/323830343a353736383a3a2f33322d3332203d3e20323638303633.roa
File:                     323830343a353736383a3a2f33322d3332203d3e20323638303633.roa (raw, json)
Hash identifier:          ctMnxu/cXcp206PTz+8jckj65hatW9kFxmJbJHPk5N0=
Subject key identifier:   47:D9:CC:3A:14:B7:61:23:AE:77:64:40:C8:C9:5D:8E:68:5D:CF:E8
Certificate issuer:       /CN=4D40CE2A6478B78956F69542766BA3C0806B8392
Certificate serial:       11026399769BC7DC65999D593042B523D7914873
Authority key identifier: 4D:40:CE:2A:64:78:B7:89:56:F6:95:42:76:6B:A3:C0:80:6B:83:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/323830343a353736383a3a2f33322d3332203d3e20323638303633.roa
Signing time:             Thu 04 Apr 2024 05:11:15 +0000
ROA not before:           Thu 04 Apr 2024 05:06:15 +0000
ROA not after:            Thu 03 Apr 2025 05:11:15 +0000
asID:                     268063
IP address blocks:        2804:5768::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.crl
                          rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:02:63:99:76:9b:c7:dc:65:99:9d:59:30:42:b5:23:d7:91:48:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D40CE2A6478B78956F69542766BA3C0806B8392
        Validity
            Not Before: Apr  4 05:06:15 2024 GMT
            Not After : Apr  3 05:11:15 2025 GMT
        Subject: CN=47D9CC3A14B76123AE776440C8C95D8E685DCFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3e:45:b3:2a:7f:5a:ee:98:44:93:a6:2f:56:
                    c3:b1:ed:d7:ab:b7:7f:1f:43:7a:9d:c2:43:22:dc:
                    9a:c0:6f:74:f6:6a:35:59:45:e8:45:fb:a9:84:49:
                    b7:fa:87:05:f5:5c:97:00:d2:be:23:06:84:10:9e:
                    39:02:52:dc:04:07:d4:55:7d:cf:ef:91:74:48:76:
                    3d:8e:7f:af:a3:19:64:02:17:f4:7a:82:5f:3f:60:
                    95:99:fa:d9:1b:52:d0:75:42:83:20:1a:d5:83:04:
                    ca:be:f9:ca:3c:12:53:cc:96:0a:8b:f9:e4:98:29:
                    d6:19:ec:77:03:a5:3c:92:74:43:7a:05:62:26:a4:
                    13:d5:bc:ca:64:e9:5e:30:4b:57:84:34:0d:25:6f:
                    af:f2:bf:9f:8a:06:49:ad:7d:cd:f1:69:0d:91:ca:
                    c5:92:91:15:87:c8:79:85:36:49:72:d8:22:84:20:
                    f1:20:3c:ef:4b:f8:aa:a8:b6:dd:da:c5:bb:77:cb:
                    b8:dd:4d:7f:f0:a8:f4:5c:c5:0a:8b:91:58:93:89:
                    3a:0d:8e:ce:ec:bc:93:ff:a1:9b:12:a3:3f:0c:dc:
                    33:ab:93:89:1b:12:d9:09:eb:56:f6:d9:f8:61:87:
                    c1:ed:c0:eb:a9:96:b9:83:04:bc:ca:61:9b:55:7b:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D9:CC:3A:14:B7:61:23:AE:77:64:40:C8:C9:5D:8E:68:5D:CF:E8
            X509v3 Authority Key Identifier:
                keyid:4D:40:CE:2A:64:78:B7:89:56:F6:95:42:76:6B:A3:C0:80:6B:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/323830343a353736383a3a2f33322d3332203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5768::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:52:0b:0a:36:67:59:35:53:1f:1f:b5:d3:3d:05:ea:3e:c5:
         b6:f6:a0:5d:f1:c8:b7:60:0e:48:68:f6:fc:51:cb:77:1f:04:
         e3:1e:58:11:4a:9d:86:7f:c6:79:00:70:cb:69:e2:f6:95:2e:
         dc:32:ed:8d:e7:33:66:ab:c4:4a:17:e1:f6:e6:5b:14:b2:ce:
         26:b0:c3:35:c5:b6:fe:fd:59:30:d1:fb:80:ae:23:cb:dd:f7:
         cb:34:fa:31:f7:19:ac:eb:cc:63:77:8e:28:08:2e:4a:39:cd:
         fb:40:64:04:d6:1c:4b:79:96:ab:fc:01:04:6f:4d:10:32:c3:
         bc:97:99:eb:74:57:5a:a0:ce:da:7c:6c:39:ca:c7:90:da:50:
         4e:77:b9:7c:45:2e:34:98:6a:82:e3:e6:a0:3d:77:24:f0:26:
         84:ba:69:66:53:f4:f1:2e:5f:e0:20:74:d0:41:93:2a:08:0e:
         58:c8:45:4e:e7:e0:82:bc:2b:8b:ab:8e:fc:57:16:54:b6:03:
         c6:06:74:17:aa:1a:9b:30:f6:0d:be:0c:59:14:72:f4:4e:a7:
         ce:9d:9d:01:33:7b:72:b3:87:d0:46:ab:62:55:f3:8c:c6:cc:
         3b:41:62:08:e3:22:13:17:8a:e6:6e:aa:87:84:34:78:8f:f1:
         8e:b5:cd:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEQJjmXabx9xlmZ1ZMEK1I9eRSHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ0MENFMkE2NDc4Qjc4OTU2RjY5NTQyNzY2QkEzQzA4
MDZCODM5MjAeFw0yNDA0MDQwNTA2MTVaFw0yNTA0MDMwNTExMTVaMDMxMTAvBgNV
BAMTKDQ3RDlDQzNBMTRCNzYxMjNBRTc3NjQ0MEM4Qzk1RDhFNjg1RENGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQPkWzKn9a7phEk6YvVsOx7der
t38fQ3qdwkMi3JrAb3T2ajVZRehF+6mESbf6hwX1XJcA0r4jBoQQnjkCUtwEB9RV
fc/vkXRIdj2Of6+jGWQCF/R6gl8/YJWZ+tkbUtB1QoMgGtWDBMq++co8ElPMlgqL
+eSYKdYZ7HcDpTySdEN6BWImpBPVvMpk6V4wS1eENA0lb6/yv5+KBkmtfc3xaQ2R
ysWSkRWHyHmFNkly2CKEIPEgPO9L+Kqott3axbt3y7jdTX/wqPRcxQqLkViTiToN
js7svJP/oZsSoz8M3DOrk4kbEtkJ61b22fhhh8HtwOuplrmDBLzKYZtVez+rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUR9nMOhS3YSOud2RAyMldjmhdz+gwHwYDVR0j
BBgwFoAUTUDOKmR4t4lW9pVCdmujwIBrg5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR
UEovMS80RDQwQ0UyQTY0NzhCNzg5NTZGNjk1NDI3NjZCQTNDMDgwNkI4MzkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENDBDRTJBNjQ3OEI3ODk1
NkY2OTU0Mjc2NkJBM0MwODA2QjgzOTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM3R3FlUURhZlNoWVlUbVZYR1FXY3pMcTlDSFl0TVRhalpUa1JzWmdoUVBKLzEv
MzIzODMwMzQzYTM1MzczNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARXaDANBgkqhkiG9w0BAQsFAAOCAQEAilILCjZn
WTVTHx+10z0F6j7FtvagXfHIt2AOSGj2/FHLdx8E4x5YEUqdhn/GeQBwy2ni9pUu
3DLtjeczZqvEShfh9uZbFLLOJrDDNcW2/v1ZMNH7gK4jy933yzT6MfcZrOvMY3eO
KAguSjnN+0BkBNYcS3mWq/wBBG9NEDLDvJeZ63RXWqDO2nxsOcrHkNpQTne5fEUu
NJhqguPmoD13JPAmhLppZlP08S5f4CB00EGTKggOWMhFTufggrwri6uO/FcWVLYD
xgZ0F6oamzD2Db4MWRRy9E6nzp2dATN7crOH0EarYlXzjMbMO0FiCOMiExeK5m6q
h4Q0eI/xjrXNuQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:45 2024 by rpki-client on console-fra.rpki-client.org