Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa
File:                     323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (raw, json)
Hash identifier:          3Vnx2JIQjG2WjU7A7rxpH90FxL5FGjHVUFCbwMDxxtU=
Subject key identifier:   96:D8:E0:B3:11:A6:74:0D:AB:44:56:05:B8:29:CB:F8:C0:C0:58:3F
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       46453CDBCB72A4DBC89C5898461AFCD2735F4622
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:47 +0000
ROA not before:           Wed 03 Apr 2024 21:05:47 +0000
ROA not after:            Wed 02 Apr 2025 21:10:47 +0000
asID:                     269175
IP address blocks:        2804:1f4c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 18:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:45:3c:db:cb:72:a4:db:c8:9c:58:98:46:1a:fc:d2:73:5f:46:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:47 2024 GMT
            Not After : Apr  2 21:10:47 2025 GMT
        Subject: CN=96D8E0B311A6740DAB445605B829CBF8C0C0583F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:e1:12:3a:cf:ba:df:26:ff:f1:77:87:0d:
                    d4:f1:76:46:b7:85:98:92:62:8b:00:bc:07:f1:96:
                    40:67:4b:f8:68:e3:fd:b8:ad:ef:5d:a8:6b:57:d5:
                    a4:94:1e:d9:d4:a9:15:3f:08:7d:a6:cc:51:f4:44:
                    4b:b3:63:b7:85:96:da:68:88:79:98:2f:e8:3e:7b:
                    74:5e:fe:15:0c:4d:a4:c2:94:09:a0:19:c1:7a:af:
                    5d:69:51:53:08:f0:28:02:ee:2d:07:c0:fb:c4:ea:
                    b8:7b:65:bf:b0:06:2d:6d:7b:92:2e:70:b7:45:cd:
                    2d:e2:84:97:33:d2:50:32:e6:7a:b5:73:4f:9c:0a:
                    4d:49:5b:7a:0f:2f:f9:99:d4:e6:f8:20:10:1e:a6:
                    aa:fc:47:40:03:0c:14:1c:6b:4d:22:17:1b:69:9b:
                    d7:e8:dc:f2:28:46:12:0b:1e:3c:f7:ea:49:bf:75:
                    6a:60:ab:5b:83:25:05:a3:67:d9:7c:8f:4b:7e:06:
                    84:17:b3:ce:fd:1d:8c:94:d0:35:08:b9:44:59:2b:
                    f5:f7:76:93:91:dc:f5:a4:47:38:03:02:1c:9b:b6:
                    bd:dc:94:65:5b:86:d2:77:b8:36:c4:ca:69:4b:4f:
                    77:ee:5c:81:c0:cb:79:5f:c4:8b:1b:ba:83:f3:2e:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D8:E0:B3:11:A6:74:0D:AB:44:56:05:B8:29:CB:F8:C0:C0:58:3F
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:43:cf:e7:84:b1:e1:9d:23:53:7d:b2:66:0e:4d:db:fe:06:
         b8:78:82:cd:4b:3c:f7:6f:26:dc:6b:c2:bb:1d:19:8d:21:ab:
         6f:03:ce:36:0f:5a:e8:b1:93:a7:ed:bb:c6:fb:0d:05:ec:a9:
         e1:e0:2a:2f:6f:48:cc:a3:83:71:ee:bb:5e:f6:9e:1d:f8:8d:
         57:0e:7d:41:10:6f:66:99:43:db:40:d8:23:b9:6a:e0:de:bf:
         81:c6:7a:ea:a0:f0:c9:e2:4f:f5:d1:05:b2:1b:10:c7:2b:7c:
         28:13:7c:f0:db:54:6a:f4:9f:21:01:dd:0f:2d:65:76:16:2f:
         dd:26:6c:17:7b:2b:87:15:3e:08:3c:93:11:71:93:65:b5:d8:
         16:2a:ef:ba:d9:9a:bd:17:db:10:c2:13:82:b5:3a:3c:25:3d:
         63:17:c1:97:fa:19:72:0a:e5:1d:9b:cc:b5:de:ca:73:f3:df:
         f8:6d:88:5e:87:2c:e1:ad:16:e5:54:ac:e9:f4:8d:db:ab:7d:
         d0:40:aa:99:fa:aa:36:a5:d2:9e:a5:b8:c0:f0:de:24:d6:9c:
         0f:c3:ed:2d:4d:98:f3:eb:e8:22:0a:4d:75:e7:ba:2e:97:d4:
         e8:a8:90:f6:73:1d:64:f5:60:0d:50:c3:2c:40:d6:43:c9:fd:
         70:b4:ba:3e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURkU828typNvInFiYRhr80nNfRiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA2QjExRTYzQjlDNzBGN0Y4MTFDNjgwNkM3RkUyOThG
ODEyOTVDQzAeFw0yNDA0MDMyMTA1NDdaFw0yNTA0MDIyMTEwNDdaMDMxMTAvBgNV
BAMTKDk2RDhFMEIzMTFBNjc0MERBQjQ0NTYwNUI4MjlDQkY4QzBDMDU4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7uESOs+63yb/8XeHDdTxdka3
hZiSYosAvAfxlkBnS/ho4/24re9dqGtX1aSUHtnUqRU/CH2mzFH0REuzY7eFltpo
iHmYL+g+e3Re/hUMTaTClAmgGcF6r11pUVMI8CgC7i0HwPvE6rh7Zb+wBi1te5Iu
cLdFzS3ihJcz0lAy5nq1c0+cCk1JW3oPL/mZ1Ob4IBAepqr8R0ADDBQca00iFxtp
m9fo3PIoRhILHjz36km/dWpgq1uDJQWjZ9l8j0t+BoQXs879HYyU0DUIuURZK/X3
dpOR3PWkRzgDAhybtr3clGVbhtJ3uDbEymlLT3fuXIHAy3lfxIsbuoPzLlwNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUltjgsxGmdA2rRFYFuCnL+MDAWD8wHwYDVR0j
BBgwFoAU0GsR5juccPf4EcaAbH/imPgSlcwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMS9EMDZCMTFFNjNCOUM3MEY3RjgxMUM2ODA2QzdGRTI5OEY4MTI5NUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNkIxMUU2M0I5QzcwRjdG
ODExQzY4MDZDN0ZFMjk4RjgxMjk1Q0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzEv
MzIzODMwMzQzYTMxNjYzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMxMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEH0yAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2Q8/nhLHhnSNTfbJmDk3b/ga4eILNSzz3bybca8K7HRmNIatvA842D1ro
sZOn7bvG+w0F7Knh4Covb0jMo4Nx7rte9p4d+I1XDn1BEG9mmUPbQNgjuWrg3r+B
xnrqoPDJ4k/10QWyGxDHK3woE3zw21Rq9J8hAd0PLWV2Fi/dJmwXeyuHFT4IPJMR
cZNltdgWKu+62Zq9F9sQwhOCtTo8JT1jF8GX+hlyCuUdm8y13spz89/4bYhehyzh
rRblVKzp9I3bq33QQKqZ+qo2pdKepbjA8N4k1pwPw+0tTZjz6+giCk1157oul9To
qJD2cx1k9WANUMMsQNZDyf1wtLo+
-----END CERTIFICATE-----
Generated at Thu Jun 27 18:23:47 2024 by rpki-client on console-fra.rpki-client.org