Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa
File:                     323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa (raw, json)
Hash identifier:          5F6BxRiNZB6GXY37pzB3Ys+x70gxm748sbIO+TYRsrA=
Subject key identifier:   6A:41:99:3D:16:C2:1D:83:9D:25:3D:0A:50:74:B3:DE:A8:0C:93:C1
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       5A6560488200A9745E9369E9672FD68764B8E40B
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:41 +0000
ROA not before:           Tue 23 Apr 2024 19:08:41 +0000
ROA not after:            Tue 22 Apr 2025 19:13:41 +0000
asID:                     263627
IP address blocks:        2804:1044:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:65:60:48:82:00:a9:74:5e:93:69:e9:67:2f:d6:87:64:b8:e4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:41 2024 GMT
            Not After : Apr 22 19:13:41 2025 GMT
        Subject: CN=6A41993D16C21D839D253D0A5074B3DEA80C93C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:c9:2c:8d:af:38:57:a1:e7:1b:56:54:42:
                    83:ad:a2:e6:63:bc:ef:2d:27:fa:65:b6:62:ee:1f:
                    ba:9b:31:a8:d0:4a:92:b3:0f:b8:5b:d7:08:f1:15:
                    71:62:be:16:a3:92:43:44:c7:43:37:a9:41:be:35:
                    33:a3:63:c5:00:f2:83:b8:96:0d:09:b3:f5:6b:2e:
                    4a:27:d6:18:5c:59:35:14:e0:f8:d7:16:d4:06:1f:
                    22:0e:de:03:3b:5f:e1:2e:8f:c7:f2:ca:59:4d:3d:
                    8e:dc:1d:83:56:ec:f6:b2:dd:5f:e9:ef:43:57:e2:
                    66:3d:c3:3c:c7:0b:7c:76:89:a5:5f:24:c1:90:c7:
                    51:f4:21:3e:53:95:ba:fe:b4:d7:f0:66:8c:0f:48:
                    e1:0a:5a:f0:68:46:35:57:44:b7:c2:7c:3e:67:82:
                    13:d0:66:46:46:47:78:41:7c:ca:5d:4d:34:30:2d:
                    f2:94:df:30:17:44:9b:37:7d:0a:eb:d7:81:fe:e8:
                    1b:5f:ee:cb:48:81:60:9e:95:09:63:d3:6d:23:18:
                    5b:df:8d:72:10:8a:6b:f0:0d:db:01:8b:85:fc:85:
                    dc:ad:59:d1:e9:8d:f0:a7:d1:d5:1b:3a:ff:68:ab:
                    42:1f:0c:e5:18:a6:d3:92:c1:2e:66:93:98:f7:27:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:41:99:3D:16:C2:1D:83:9D:25:3D:0A:50:74:B3:DE:A8:0C:93:C1
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b4:7d:f7:ac:31:13:90:38:79:b7:00:c2:b5:fd:b0:a2:9c:bd:
         2a:d5:a0:15:f6:9c:bd:39:0e:4d:73:a6:93:e9:56:e7:7e:c7:
         37:3f:38:33:53:ee:9d:11:b4:26:96:d0:d2:ad:7a:1b:47:56:
         bc:9f:45:70:5e:44:11:7c:e0:52:72:60:f3:c7:71:c0:f1:f3:
         df:68:7d:6a:35:8b:a7:1f:19:ad:ae:68:8a:2d:5c:55:0c:93:
         4f:44:95:80:4a:53:1d:64:12:ac:fa:71:83:4b:96:19:02:3a:
         60:22:c1:bc:5f:3b:d1:23:67:9d:c6:0b:56:3e:c3:3f:c8:31:
         d6:6f:6d:05:03:b2:47:56:75:29:8b:ed:0f:7a:6e:49:8e:0b:
         0d:3f:25:3c:d5:29:7b:8a:de:02:16:3c:4a:78:e2:fe:1c:6a:
         da:69:8f:17:9c:6e:1e:0b:40:f3:bf:0f:2b:86:bc:03:4e:b2:
         59:b6:d4:5d:0f:72:2b:30:0c:ca:59:eb:ab:d6:c8:ba:a8:bf:
         3f:ea:6a:94:69:e7:5a:dd:56:19:ac:00:6c:89:2b:2e:0d:37:
         74:3c:60:5a:5c:64:b8:70:ed:91:75:cb:3f:80:c5:69:c4:23:
         d1:bb:03:06:d1:1c:5a:2f:ab:1d:70:e3:a7:95:2e:d1:6c:26:
         4b:23:95:31
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWmVgSIIAqXRek2npZy/Wh2S45AswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE
NURFMzhEMjAeFw0yNDA0MjMxOTA4NDFaFw0yNTA0MjIxOTEzNDFaMDMxMTAvBgNV
BAMTKDZBNDE5OTNEMTZDMjFEODM5RDI1M0QwQTUwNzRCM0RFQTgwQzkzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/Mksja84V6HnG1ZUQoOtouZj
vO8tJ/pltmLuH7qbMajQSpKzD7hb1wjxFXFivhajkkNEx0M3qUG+NTOjY8UA8oO4
lg0Js/VrLkon1hhcWTUU4PjXFtQGHyIO3gM7X+Euj8fyyllNPY7cHYNW7Pay3V/p
70NX4mY9wzzHC3x2iaVfJMGQx1H0IT5Tlbr+tNfwZowPSOEKWvBoRjVXRLfCfD5n
ghPQZkZGR3hBfMpdTTQwLfKU3zAXRJs3fQrr14H+6Btf7stIgWCelQlj020jGFvf
jXIQimvwDdsBi4X8hdytWdHpjfCn0dUbOv9oq0IfDOUYptOSwS5mk5j3J8oVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUakGZPRbCHYOdJT0KUHSz3qgMk8EwHwYDVR0j
BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6
V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3
NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv
MzIzODMwMzQzYTMxMzAzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEESAMA0GCSqGSIb3DQEBCwUA
A4IBAQC0ffesMROQOHm3AMK1/bCinL0q1aAV9py9OQ5Nc6aT6Vbnfsc3PzgzU+6d
EbQmltDSrXobR1a8n0VwXkQRfOBScmDzx3HA8fPfaH1qNYunHxmtrmiKLVxVDJNP
RJWASlMdZBKs+nGDS5YZAjpgIsG8XzvRI2edxgtWPsM/yDHWb20FA7JHVnUpi+0P
em5JjgsNPyU81Sl7it4CFjxKeOL+HGraaY8XnG4eC0Dzvw8rhrwDTrJZttRdD3Ir
MAzKWeur1si6qL8/6mqUaeda3VYZrABsiSsuDTd0PGBaXGS4cO2Rdcs/gMVpxCPR
uwMG0RxaL6sdcOOnlS7RbCZLI5Ux
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:25 2024 by rpki-client on console-ams.rpki-client.org