Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3430203d3e20323632333135.roa
File:                     323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (raw, json)
Hash identifier:          zZskizzMVUll3KQPq5ryatEKQ6AnbKtuzZS9xYqtKtw=
Subject key identifier:   1F:1A:43:AE:F9:DD:06:A3:9D:8E:46:A1:DB:C3:2F:F8:A5:C9:BB:AD
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       0C95D0B37356C3F15C36D8EA17AC032B5AA2495E
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3430203d3e20323632333135.roa
Signing time:             Tue 04 Jun 2024 14:03:09 +0000
ROA not before:           Tue 04 Jun 2024 13:58:09 +0000
ROA not after:            Tue 03 Jun 2025 14:03:09 +0000
asID:                     262315
IP address blocks:        2804:7b8::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl
                          rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:95:d0:b3:73:56:c3:f1:5c:36:d8:ea:17:ac:03:2b:5a:a2:49:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Jun  4 13:58:09 2024 GMT
            Not After : Jun  3 14:03:09 2025 GMT
        Subject: CN=1F1A43AEF9DD06A39D8E46A1DBC32FF8A5C9BBAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:33:2b:f8:ed:a0:b0:3d:16:5f:55:a2:b5:
                    45:f4:8e:57:a3:16:bc:c7:c7:12:a7:4c:db:57:e5:
                    5b:9d:fd:4b:9b:ef:2d:a3:e1:e4:f3:ed:e6:4d:a4:
                    7d:82:21:41:ab:6f:41:f1:c0:18:9d:ba:ae:63:86:
                    aa:45:79:7e:89:b7:ea:db:87:d9:7a:fa:85:4d:b9:
                    74:3c:0a:83:ba:9c:c7:c2:2f:b4:25:5c:4f:6f:13:
                    ee:59:59:b6:33:28:ea:35:fb:28:84:d9:e9:73:e7:
                    2f:f7:52:ab:3a:bf:89:bc:c3:ab:0c:39:5d:d4:f1:
                    14:38:dc:9b:4f:55:02:e6:0b:3c:06:80:77:5e:7b:
                    4f:0c:2e:5c:a0:9a:14:84:90:1c:2a:f7:77:de:1d:
                    ad:c0:ec:1f:ba:93:4c:b0:e4:c2:aa:c6:1a:ba:04:
                    1d:80:e7:f6:10:0c:98:bf:4d:68:d1:81:d1:87:2c:
                    4d:7b:fb:13:c4:fa:dc:b4:7c:06:57:21:cf:1b:77:
                    0f:98:af:af:8f:cc:78:19:eb:3a:d4:e7:ed:ad:6c:
                    53:a0:5b:6e:4c:d3:0c:83:44:0e:8e:d5:82:d4:8e:
                    7b:b3:77:07:38:83:be:13:8f:4e:a8:43:00:53:d6:
                    54:a8:21:a4:d4:48:f8:d7:29:9b:ed:ec:ec:af:2e:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1A:43:AE:F9:DD:06:A3:9D:8E:46:A1:DB:C3:2F:F8:A5:C9:BB:AD
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3430203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:68:65:f9:db:b3:1c:19:b6:15:8a:90:c5:40:33:99:63:66:
         3b:71:1f:fb:10:a1:eb:dc:5b:49:bf:4b:bd:98:34:41:c8:62:
         89:a3:fd:19:10:bf:89:0f:91:2c:0f:3c:ad:46:40:98:6d:c1:
         bf:b6:20:db:b2:db:fd:5f:a2:80:e6:36:91:31:95:f5:e4:a9:
         b6:f2:6a:aa:4e:28:29:fb:cb:f8:10:09:cb:21:6c:93:d3:63:
         79:66:2d:64:09:65:e0:c5:34:32:0a:d9:f2:fc:f0:10:f7:9b:
         b5:2e:53:d8:ef:71:e7:d3:92:43:f6:99:ac:45:f1:cd:24:34:
         26:57:fb:6d:33:6d:ad:53:71:82:e8:1f:50:0c:43:8b:67:26:
         40:2a:84:a2:3e:0a:65:b8:2a:31:3c:8e:82:fb:6c:3f:f2:c5:
         4e:aa:28:c0:76:b1:6e:ce:f4:43:ba:9c:56:dd:8c:a9:04:45:
         9b:d5:db:68:ed:8e:2a:25:b5:09:00:3d:d0:96:3c:b8:72:a7:
         9d:4a:5f:c8:da:ec:86:80:27:37:d9:c6:3c:00:18:fc:23:38:
         dc:8e:d2:10:53:07:59:4f:b6:cb:af:4c:fa:da:f9:f9:65:b6:
         d8:39:f0:e0:95:d6:72:d3:4b:30:e9:55:44:d1:e2:30:a3:0c:
         bc:5a:58:df
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDJXQs3NWw/FcNtjqF6wDK1qiSV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5QjY1MzAyQTEzNjNGM0RDNzgwRkYzOUNCRUFFQjkw
NjM3NEU3NTAeFw0yNDA2MDQxMzU4MDlaFw0yNTA2MDMxNDAzMDlaMDMxMTAvBgNV
BAMTKDFGMUE0M0FFRjlERDA2QTM5RDhFNDZBMURCQzMyRkY4QTVDOUJCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEjMr+O2gsD0WX1WitUX0jlej
FrzHxxKnTNtX5Vud/Uub7y2j4eTz7eZNpH2CIUGrb0HxwBiduq5jhqpFeX6Jt+rb
h9l6+oVNuXQ8CoO6nMfCL7QlXE9vE+5ZWbYzKOo1+yiE2elz5y/3Uqs6v4m8w6sM
OV3U8RQ43JtPVQLmCzwGgHdee08MLlygmhSEkBwq93feHa3A7B+6k0yw5MKqxhq6
BB2A5/YQDJi/TWjRgdGHLE17+xPE+ty0fAZXIc8bdw+Yr6+PzHgZ6zrU5+2tbFOg
W25M0wyDRA6O1YLUjnuzdwc4g74Tj06oQwBT1lSoIaTUSPjXKZvt7OyvLmjVAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUHxpDrvndBqOdjkah28Mv+KXJu60wHwYDVR0j
BBgwFoAUS5tlMCoTY/PceA/znL6uuQY3TnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1
V1kvMS80QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOUI2NTMwMkExMzYzRjNE
Qzc4MEZGMzlDQkVBRUI5MDYzNzRFNzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLbVZkdkwxVVBWZ216dkN1MzRIUFQzNmNaY0tLRnBhS0g2QnpjSmVUNVdZLzEv
MzIzODMwMzQzYTM3NjIzODNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzMjMz
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEB7gwDQYJKoZIhvcNAQELBQADggEBAINoZfnbsxwZ
thWKkMVAM5ljZjtxH/sQoevcW0m/S72YNEHIYomj/RkQv4kPkSwPPK1GQJhtwb+2
INuy2/1fooDmNpExlfXkqbbyaqpOKCn7y/gQCcshbJPTY3lmLWQJZeDFNDIK2fL8
8BD3m7UuU9jvcefTkkP2maxF8c0kNCZX+20zba1TcYLoH1AMQ4tnJkAqhKI+CmW4
KjE8joL7bD/yxU6qKMB2sW7O9EO6nFbdjKkERZvV22jtjioltQkAPdCWPLhyp51K
X8ja7IaAJzfZxjwAGPwjONyO0hBTB1lPtsuvTPra+fllttg58OCV1nLTSzDpVUTR
4jCjDLxaWN8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:34 2024 by rpki-client on console-ams.rpki-client.org