Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa
File:                     323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa (raw, json)
Hash identifier:          mSyyTFDRJgDVCJYk3N13Vg807ACP1/inTOm6OVOOpNo=
Subject key identifier:   6C:D4:7F:5C:ED:EE:38:E1:E1:E1:75:45:6B:39:32:E1:85:4E:ED:60
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       088EA8C89A30514129874F0E7212476FA0EEC99E
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa
Signing time:             Thu 04 Apr 2024 01:36:17 +0000
ROA not before:           Thu 04 Apr 2024 01:31:17 +0000
ROA not after:            Thu 03 Apr 2025 01:36:17 +0000
asID:                     268424
IP address blocks:        2804:5100:3000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:a8:c8:9a:30:51:41:29:87:4f:0e:72:12:47:6f:a0:ee:c9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Apr  4 01:31:17 2024 GMT
            Not After : Apr  3 01:36:17 2025 GMT
        Subject: CN=6CD47F5CEDEE38E1E1E175456B3932E1854EED60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:d2:01:e5:09:be:8d:b5:92:dd:d6:cb:ea:
                    e5:7b:30:60:bd:11:64:5b:fe:39:a2:83:06:82:21:
                    ee:a2:0b:d9:66:43:4f:b4:bf:44:a8:d4:b0:fb:8c:
                    84:5c:ce:f6:82:3c:5b:0c:9c:47:42:13:d7:e9:db:
                    21:79:7b:1a:ed:13:e6:16:b4:23:eb:09:7a:2d:30:
                    90:5c:72:eb:74:73:1b:2f:29:cc:84:e0:96:76:a7:
                    dc:12:29:bf:a1:85:91:56:cd:c5:74:f5:da:ec:10:
                    ad:7e:90:5b:3e:ea:07:87:22:c7:42:70:94:9d:f7:
                    27:5e:66:04:7c:72:4a:7b:c8:ce:ed:a5:bf:9e:e6:
                    3d:91:4e:7f:22:58:cc:6a:ce:cf:5a:5c:87:f6:d4:
                    a1:05:9e:9a:f1:cc:3e:e8:45:35:3a:4f:cc:4d:ba:
                    6d:cf:8d:0d:2b:c0:a7:1d:a8:8c:cc:6f:5b:49:33:
                    ea:c3:29:2f:44:c2:bf:7e:49:12:a3:42:24:50:12:
                    a9:e8:be:62:38:1d:bf:ca:a8:d9:4b:89:1a:df:15:
                    99:67:7d:20:9d:b1:a0:07:a3:97:34:83:05:26:7e:
                    32:e5:e9:27:af:4d:b3:5e:31:22:c0:76:39:9e:8c:
                    dc:d2:1e:60:d3:00:7a:4a:ba:24:bb:4d:ee:7b:bc:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:7F:5C:ED:EE:38:E1:E1:E1:75:45:6B:39:32:E1:85:4E:ED:60
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a333030303a3a2f34302d3430203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:88:36:cf:df:31:73:31:a5:e2:2c:94:c1:b9:0d:6b:16:43:
         5a:28:e9:66:e9:91:7c:43:10:c8:81:b3:f9:9d:d7:6b:42:c5:
         bf:53:53:22:06:db:9a:c6:31:c2:c2:0e:d5:60:cc:c8:4c:83:
         e9:fe:dd:9b:71:49:36:e1:72:15:9e:2e:7c:98:03:30:6e:6c:
         58:b2:fc:ef:4d:88:46:bf:9d:d7:af:7d:f8:10:ba:4a:82:05:
         a3:61:e4:6a:7d:29:d2:e1:d6:2b:17:a9:6a:37:3d:8e:5e:02:
         69:e5:9c:2c:7c:5b:6b:19:6f:b1:f0:02:c2:64:44:4f:5e:73:
         f1:f2:8a:6a:02:60:cf:fe:77:35:ac:09:8a:7f:e2:74:d6:34:
         35:19:18:e4:3f:34:06:52:74:a8:46:5b:71:52:5b:76:3a:69:
         d3:6b:9f:56:80:49:de:30:ab:fc:df:5d:2b:51:0b:83:f0:0e:
         4c:fa:96:91:3c:59:ae:5d:be:72:14:c8:47:8d:2d:e7:37:a1:
         f7:bb:94:6f:a3:e0:6b:9c:47:c9:cd:de:a3:47:fa:ef:9d:ef:
         8d:f4:ca:a4:6b:e0:42:eb:8b:af:86:8a:e3:46:c8:92:a1:f9:
         6c:98:dd:31:00:17:1a:43:7f:34:86:1c:a5:f3:f1:68:47:2b:
         6c:e1:75:56
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCI6oyJowUUEph08OchJHb6DuyZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM5MkQxRENBMzc3MDFGM0FDREJBNURBRTZCNDREMTI1
QzI4QUU3MTAeFw0yNDA0MDQwMTMxMTdaFw0yNTA0MDMwMTM2MTdaMDMxMTAvBgNV
BAMTKDZDRDQ3RjVDRURFRTM4RTFFMUUxNzU0NTZCMzkzMkUxODU0RUVENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zNIB5Qm+jbWS3dbL6uV7MGC9
EWRb/jmigwaCIe6iC9lmQ0+0v0So1LD7jIRczvaCPFsMnEdCE9fp2yF5exrtE+YW
tCPrCXotMJBccut0cxsvKcyE4JZ2p9wSKb+hhZFWzcV09drsEK1+kFs+6geHIsdC
cJSd9ydeZgR8ckp7yM7tpb+e5j2RTn8iWMxqzs9aXIf21KEFnprxzD7oRTU6T8xN
um3PjQ0rwKcdqIzMb1tJM+rDKS9Ewr9+SRKjQiRQEqnovmI4Hb/KqNlLiRrfFZln
fSCdsaAHo5c0gwUmfjLl6SevTbNeMSLAdjmejNzSHmDTAHpKuiS7Te57vBh7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbNR/XO3uOOHh4XVFazky4YVO7WAwHwYDVR0j
BBgwFoAUk5LR3KN3AfOs26Xa5rRNElwornEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1ybUVtUlI2YXg0aldUaThrOHA4M0xjbjZTVVdBakpHRE1WOVJoSmhU
ZTUvMS85MzkyRDFEQ0EzNzcwMUYzQUNEQkE1REFFNkI0NEQxMjVDMjhBRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTJEMURDQTM3NzAxRjNB
Q0RCQTVEQUU2QjQ0RDEyNUMyOEFFNzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNcm1FbVJSNmF4NGpXVGk4azhwODNMY242U1VXQWpKR0RNVjlSaEpoVGU1LzEv
MzIzODMwMzQzYTM1MzEzMDMwM2EzMzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEUQAwMA0GCSqGSIb3DQEBCwUA
A4IBAQAJiDbP3zFzMaXiLJTBuQ1rFkNaKOlm6ZF8QxDIgbP5nddrQsW/U1MiBtua
xjHCwg7VYMzITIPp/t2bcUk24XIVni58mAMwbmxYsvzvTYhGv53Xr334ELpKggWj
YeRqfSnS4dYrF6lqNz2OXgJp5ZwsfFtrGW+x8ALCZERPXnPx8opqAmDP/nc1rAmK
f+J01jQ1GRjkPzQGUnSoRltxUlt2OmnTa59WgEneMKv8310rUQuD8A5M+paRPFmu
Xb5yFMhHjS3nN6H3u5Rvo+BrnEfJzd6jR/rvne+N9Mqka+BC64uvhorjRsiSofls
mN0xABcaQ380hhyl8/FoRyts4XVW
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:15 2024 by rpki-client on console-fra.rpki-client.org