Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/323830343a333831303a3a2f33322d313238203d3e20323032.roa
File:                     323830343a333831303a3a2f33322d313238203d3e20323032.roa (raw, json)
Hash identifier:          TBy6FAIMwNcdR2KeKlyX8pZNj7uX5jKGKYw6OSa0QhA=
Subject key identifier:   0F:BD:40:F3:7A:71:58:CF:50:8F:82:31:91:34:51:10:7C:5B:AA:BA
Certificate issuer:       /CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
Certificate serial:       032431950F3F4512326A78174194CA8A8EEE0073
Authority key identifier: C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/323830343a333831303a3a2f33322d313238203d3e20323032.roa
Signing time:             Fri 05 Apr 2024 01:03:58 +0000
ROA not before:           Fri 05 Apr 2024 00:58:58 +0000
ROA not after:            Fri 04 Apr 2025 01:03:58 +0000
asID:                     202
IP address blocks:        2804:3810::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl
                          rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 12:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:24:31:95:0f:3f:45:12:32:6a:78:17:41:94:ca:8a:8e:ee:00:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
        Validity
            Not Before: Apr  5 00:58:58 2024 GMT
            Not After : Apr  4 01:03:58 2025 GMT
        Subject: CN=0FBD40F37A7158CF508F8231913451107C5BAABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dc:77:8e:3c:d3:9c:de:60:d0:87:76:42:3f:
                    27:57:af:85:cf:e6:11:48:79:b9:62:5a:27:8f:b1:
                    bc:82:3f:4b:61:ca:d4:d0:08:31:16:a4:fc:58:91:
                    4f:6e:2a:15:66:92:66:c3:27:0d:cf:bf:fb:97:fe:
                    d9:d4:1d:52:bb:d5:3d:c2:02:4d:15:2a:76:e2:83:
                    41:5a:a7:df:88:39:05:35:a6:61:fd:cd:81:3d:27:
                    3f:8e:fc:12:c7:8d:93:d6:d5:1e:68:45:dd:cb:7f:
                    24:32:b2:0f:e5:1d:f7:99:47:93:84:65:2e:e3:05:
                    4f:d7:16:79:71:46:47:f4:cc:68:fb:d1:9c:0f:33:
                    42:0f:bd:a8:84:ae:0f:c4:cf:cf:79:a2:6a:4b:a0:
                    7a:aa:bb:d0:ed:08:32:98:55:6b:4a:44:5c:e0:29:
                    f6:45:58:86:a6:8a:d9:aa:f1:9b:e9:6d:0a:9a:70:
                    8b:3f:6d:d9:36:53:2a:50:fd:20:ef:97:22:3c:0f:
                    b8:9d:a7:d8:f6:5e:e0:78:6f:05:76:56:a9:24:d1:
                    32:32:cd:e4:73:59:ce:99:54:01:8e:c6:a8:ae:ce:
                    4d:38:58:4d:d1:ff:30:73:3b:4b:b5:bf:49:05:a6:
                    2b:e2:ef:d6:20:3e:97:c3:17:e6:71:6b:2d:48:00:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BD:40:F3:7A:71:58:CF:50:8F:82:31:91:34:51:10:7C:5B:AA:BA
            X509v3 Authority Key Identifier:
                keyid:C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/323830343a333831303a3a2f33322d313238203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ed:e9:a6:99:c4:02:12:d0:17:33:93:00:4a:0f:54:b5:3c:
         12:7c:f9:e0:44:50:5c:3a:7d:8d:f3:0f:c0:66:12:2d:eb:38:
         5b:55:3e:63:8f:4c:93:8c:28:af:a0:5b:75:10:8e:98:ef:43:
         c2:95:4b:fd:b5:cb:0e:a3:7f:8c:41:cf:ef:04:02:16:06:cc:
         c1:3f:15:cc:00:a5:89:b9:0c:40:aa:30:eb:bc:31:1f:53:a8:
         87:9f:a4:57:1c:1a:80:82:76:15:bf:ef:f2:fc:7e:75:c1:c6:
         6e:55:54:fd:8b:95:ec:01:00:9a:23:33:e5:89:96:f4:ec:5d:
         ac:e1:d9:e1:dc:38:e2:8b:d7:81:dc:83:78:b8:c3:f3:90:95:
         05:ba:b1:f6:65:b5:a9:bb:ee:05:1f:64:85:e6:4d:ac:32:d3:
         0b:25:b0:fc:ad:16:6c:db:1d:a1:fd:d3:40:d4:66:4e:7a:29:
         9b:3c:ea:2c:9f:2b:9d:f9:da:3f:d0:76:e2:25:6c:72:27:97:
         f8:ab:75:f5:8b:da:10:31:9a:a4:e7:86:e1:0b:a2:0a:d8:2a:
         40:09:60:5a:8e:af:5e:84:da:18:16:b3:09:f5:9f:fd:ba:f8:
         c7:94:16:f2:2d:4d:32:d8:75:d2:fc:3e:7c:8e:ab:57:fb:61:
         c8:d9:6d:70
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUAyQxlQ8/RRIyangXQZTKio7uAHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY1MTVCQTQ3MUM5NzMzQTJFRTQ2NzMyM0M5RjZFRTg4
QkUwOThBNjAeFw0yNDA0MDUwMDU4NThaFw0yNTA0MDQwMTAzNThaMDMxMTAvBgNV
BAMTKDBGQkQ0MEYzN0E3MTU4Q0Y1MDhGODIzMTkxMzQ1MTEwN0M1QkFBQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3HeOPNOc3mDQh3ZCPydXr4XP
5hFIebliWiePsbyCP0thytTQCDEWpPxYkU9uKhVmkmbDJw3Pv/uX/tnUHVK71T3C
Ak0VKnbig0Fap9+IOQU1pmH9zYE9Jz+O/BLHjZPW1R5oRd3LfyQysg/lHfeZR5OE
ZS7jBU/XFnlxRkf0zGj70ZwPM0IPvaiErg/Ez895ompLoHqqu9DtCDKYVWtKRFzg
KfZFWIamitmq8ZvpbQqacIs/bdk2UypQ/SDvlyI8D7idp9j2XuB4bwV2Vqkk0TIy
zeRzWc6ZVAGOxqiuzk04WE3R/zBzO0u1v0kFpivi79YgPpfDF+Zxay1IAARtAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUD71A83pxWM9Qj4IxkTRREHxbqrowHwYDVR0j
BBgwFoAUxlFbpHHJczou5GcyPJ9u6IvgmKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05GN2FIdlZlYVpvM0M1THRmWVFweEFzWFhDTkUyeThZSEx1WnU3SkxZ
cWIvMS9DNjUxNUJBNDcxQzk3MzNBMkVFNDY3MzIzQzlGNkVFODhCRTA5OEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2NTE1QkE0NzFDOTczM0Ey
RUU0NjczMjNDOUY2RUU4OEJFMDk4QTYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNORjdhSHZWZWFabzNDNUx0ZllRcHhBc1hYQ05FMnk4WUhMdVp1N0pMWXFiLzEv
MzIzODMwMzQzYTMzMzgzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBDgQMA0GCSqGSIb3DQEBCwUAA4IBAQAJ7emmmcQCEtAX
M5MASg9UtTwSfPngRFBcOn2N8w/AZhIt6zhbVT5jj0yTjCivoFt1EI6Y70PClUv9
tcsOo3+MQc/vBAIWBszBPxXMAKWJuQxAqjDrvDEfU6iHn6RXHBqAgnYVv+/y/H51
wcZuVVT9i5XsAQCaIzPliZb07F2s4dnh3Djii9eB3IN4uMPzkJUFurH2ZbWpu+4F
H2SF5k2sMtMLJbD8rRZs2x2h/dNA1GZOeimbPOosnyud+do/0HbiJWxyJ5f4q3X1
i9oQMZqk54bhC6IK2CpACWBajq9ehNoYFrMJ9Z/9uvjHlBbyLU0y2HXS/D58jqtX
+2HI2W1w
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:08 2024 by rpki-client on console-fra.rpki-client.org