Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33322d313238203d3e20323636343436.roa
File:                     323830343a333766343a3a2f33322d313238203d3e20323636343436.roa (raw, json)
Hash identifier:          WGi/Kvo8/i9kzZ7kVMhF2zBMlHlm++Sd1VlXBx6sDgM=
Subject key identifier:   3E:F3:39:25:23:40:4D:87:FA:0F:3E:C1:BA:69:F6:E2:10:BE:D8:02
Certificate issuer:       /CN=6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3
Certificate serial:       4F6EABAC18288D18EEC016683BBAE66ED48F0D55
Authority key identifier: 6D:C8:DA:62:77:F1:A9:7C:9C:46:76:0C:0E:3A:36:1D:CA:56:02:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33322d313238203d3e20323636343436.roa
Signing time:             Thu 02 May 2024 18:32:16 +0000
ROA not before:           Thu 02 May 2024 18:27:16 +0000
ROA not after:            Thu 01 May 2025 18:32:16 +0000
asID:                     266446
IP address blocks:        2804:37f4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6e:ab:ac:18:28:8d:18:ee:c0:16:68:3b:ba:e6:6e:d4:8f:0d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3
        Validity
            Not Before: May  2 18:27:16 2024 GMT
            Not After : May  1 18:32:16 2025 GMT
        Subject: CN=3EF3392523404D87FA0F3EC1BA69F6E210BED802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:f4:d8:34:f4:a8:e6:15:d2:ff:11:a0:1e:
                    b5:c2:a2:e7:71:39:42:8f:0c:a0:33:2c:ef:56:e8:
                    5d:ed:88:d5:2a:8f:58:05:2f:a0:f5:86:cf:79:fd:
                    ae:61:8a:b6:85:cf:d0:f0:df:ea:10:c1:31:b6:dc:
                    6f:ce:80:4a:8d:1f:7b:ad:d2:41:87:1f:d5:bc:95:
                    ff:da:88:52:91:5e:aa:51:63:70:95:e7:94:52:1d:
                    4d:69:c1:7f:fc:d1:67:94:cc:b0:94:5d:2e:49:73:
                    39:a1:60:39:22:76:76:89:8f:fc:4f:62:06:bf:b0:
                    ce:5e:06:7a:9d:7c:14:54:94:b9:e8:f0:dd:be:e8:
                    8b:68:a3:fd:1f:1b:ab:b9:1b:e8:e3:a0:0e:c0:f8:
                    32:19:73:91:eb:d3:71:b0:08:30:9e:be:60:b9:ce:
                    89:70:23:12:d9:55:f7:e4:26:a2:a6:4f:ae:87:cf:
                    f6:d6:2d:17:e7:cf:12:bc:31:e5:77:79:ca:76:74:
                    79:40:ca:26:89:87:42:d9:d2:48:c7:fc:36:1d:f7:
                    8a:bc:2c:34:28:0d:80:cf:6d:93:bd:ce:6c:92:96:
                    e9:9b:a3:d4:8b:41:0e:84:c8:6c:06:11:88:04:17:
                    f0:10:cf:cb:7b:d6:d2:e2:cf:81:85:e8:f1:e8:70:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:39:25:23:40:4D:87:FA:0F:3E:C1:BA:69:F6:E2:10:BE:D8:02
            X509v3 Authority Key Identifier:
                keyid:6D:C8:DA:62:77:F1:A9:7C:9C:46:76:0C:0E:3A:36:1D:CA:56:02:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33322d313238203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:e7:e5:3a:f4:46:77:62:f2:d4:2a:f2:ec:36:61:fe:13:9e:
         01:1d:06:47:2f:2d:91:ee:55:e2:10:ff:40:e2:f1:67:9d:17:
         03:84:29:17:a2:ef:32:55:02:60:68:67:ef:5d:16:40:fa:db:
         0b:b9:d5:ee:be:2a:15:a2:d5:ad:27:42:8a:60:5b:06:80:1e:
         b3:df:9e:16:4f:67:07:9f:f3:90:5b:4b:8b:e4:f4:3c:43:df:
         f1:ca:0b:6d:f9:7c:d0:16:e2:67:19:03:08:e3:da:10:b8:10:
         d6:fd:f5:c1:61:c6:3b:cb:b4:0e:46:33:fe:88:22:5e:1f:34:
         22:7d:a2:57:66:75:65:2c:ce:73:f7:b4:e1:bf:ae:e4:21:8a:
         f2:95:c3:0a:49:57:cc:99:e8:dd:ac:26:72:c1:6e:3b:f5:43:
         af:62:9a:8f:a8:e4:19:f1:5a:92:59:0c:a9:e9:de:48:0b:5b:
         4d:f2:41:e5:a4:6c:22:87:2a:b7:b3:cc:a0:b1:67:97:e9:8f:
         c9:91:a3:5d:f1:e3:6c:39:0c:25:04:a7:e5:12:2f:ce:03:23:
         db:ac:d2:80:7d:d9:3d:f3:83:0c:85:e9:f3:fc:92:5e:4f:d7:
         f6:f8:ef:31:e5:ba:c8:58:5c:61:75:3d:41:d3:c8:5b:6d:c1:
         0a:65:c6:07
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUT26rrBgojRjuwBZoO7rmbtSPDVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRDOERBNjI3N0YxQTk3QzlDNDY3NjBDMEUzQTM2MURD
QTU2MDJDMzAeFw0yNDA1MDIxODI3MTZaFw0yNTA1MDExODMyMTZaMDMxMTAvBgNV
BAMTKDNFRjMzOTI1MjM0MDREODdGQTBGM0VDMUJBNjlGNkUyMTBCRUQ4MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6/TYNPSo5hXS/xGgHrXCoudx
OUKPDKAzLO9W6F3tiNUqj1gFL6D1hs95/a5hiraFz9Dw3+oQwTG23G/OgEqNH3ut
0kGHH9W8lf/aiFKRXqpRY3CV55RSHU1pwX/80WeUzLCUXS5JczmhYDkidnaJj/xP
Yga/sM5eBnqdfBRUlLno8N2+6Itoo/0fG6u5G+jjoA7A+DIZc5Hr03GwCDCevmC5
zolwIxLZVffkJqKmT66Hz/bWLRfnzxK8MeV3ecp2dHlAyiaJh0LZ0kjH/DYd94q8
LDQoDYDPbZO9zmySlumbo9SLQQ6EyGwGEYgEF/AQz8t71tLiz4GF6PHocPAfAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUPvM5JSNATYf6Dz7Bumn24hC+2AIwHwYDVR0j
BBgwFoAUbcjaYnfxqXycRnYMDjo2HcpWAsMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4
d2EvMC82REM4REE2Mjc3RjFBOTdDOUM0Njc2MEMwRTNBMzYxRENBNTYwMkMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEQzhEQTYyNzdGMUE5N0M5
QzQ2NzYwQzBFM0EzNjFEQ0E1NjAyQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzUXRwNXFiOGZyTlhFNG9HNVhmY1FzSlJTTnJZYlVCYVVUN1Jka3NUOHdhLzAv
MzIzODMwMzQzYTMzMzc2NjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDf0MA0GCSqGSIb3DQEBCwUAA4IBAQBW5+U6
9EZ3YvLUKvLsNmH+E54BHQZHLy2R7lXiEP9A4vFnnRcDhCkXou8yVQJgaGfvXRZA
+tsLudXuvioVotWtJ0KKYFsGgB6z354WT2cHn/OQW0uL5PQ8Q9/xygtt+XzQFuJn
GQMI49oQuBDW/fXBYcY7y7QORjP+iCJeHzQifaJXZnVlLM5z97Thv67kIYrylcMK
SVfMmejdrCZywW479UOvYpqPqOQZ8VqSWQyp6d5IC1tN8kHlpGwihyq3s8ygsWeX
6Y/JkaNd8eNsOQwlBKflEi/OAyPbrNKAfdk984MMhenz/JJeT9f2+O8x5brIWFxh
dT1B08hbbcEKZcYH
-----END CERTIFICATE-----
Generated at Sun Jun 16 16:37:49 2024 by rpki-client on console-fra.rpki-client.org