Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a3a2f33322d3332203d3e20323638343234.roa
File:                     323830343a353130303a3a2f33322d3332203d3e20323638343234.roa (raw, json)
Hash identifier:          otmB3KaeuGIM6LxSYAROpWV69LBFYs0QjHp3djAXL9M=
Subject key identifier:   40:44:0B:8B:2C:93:EA:AB:B6:85:5F:9C:83:F9:0C:79:83:0A:68:DF
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       4ADF590FA741D1E6CDC6A588BB40C4CDDDC082DD
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a3a2f33322d3332203d3e20323638343234.roa
Signing time:             Thu 04 Apr 2024 01:36:17 +0000
ROA not before:           Thu 04 Apr 2024 01:31:17 +0000
ROA not after:            Thu 03 Apr 2025 01:36:17 +0000
asID:                     268424
IP address blocks:        2804:5100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:59:0f:a7:41:d1:e6:cd:c6:a5:88:bb:40:c4:cd:dd:c0:82:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Apr  4 01:31:17 2024 GMT
            Not After : Apr  3 01:36:17 2025 GMT
        Subject: CN=40440B8B2C93EAABB6855F9C83F90C79830A68DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:39:b9:7d:46:3b:2a:46:44:0a:d2:08:95:
                    7d:37:0c:63:4a:79:a0:16:d5:72:1f:81:8f:63:6e:
                    31:a8:fd:ac:32:64:99:aa:7c:f8:b6:d3:1f:9e:e6:
                    8a:09:50:0e:25:53:71:e5:58:34:0b:f6:11:69:ef:
                    ab:10:3a:f5:25:de:a4:08:6b:10:31:d8:50:f8:df:
                    0a:2b:8d:aa:84:b2:5c:5c:18:55:7d:07:a8:74:99:
                    e5:b6:36:7f:2e:96:05:3e:90:3d:96:a8:38:fe:14:
                    3c:c5:4b:6f:ad:4c:fb:1e:84:3c:45:38:53:02:b7:
                    fc:23:00:c0:51:89:24:51:4a:e8:8c:67:85:0c:dc:
                    17:c8:8a:6e:64:e8:58:45:c9:c7:43:67:af:a7:4e:
                    75:bc:3b:15:e3:0c:ab:1c:af:5a:44:01:bb:5b:64:
                    a4:2c:d2:e8:b2:66:af:74:ac:91:ca:44:34:93:4e:
                    9b:9d:fa:ec:0e:a5:b2:1b:e3:87:38:70:b6:b8:d2:
                    31:4a:05:3a:c2:5d:5e:72:63:34:85:31:e6:63:69:
                    79:3f:e1:b1:da:26:88:60:a3:33:90:01:48:d0:f3:
                    f2:88:05:f0:18:a4:6b:10:d5:36:cd:18:4a:c4:ed:
                    bd:c2:31:09:10:1a:9d:03:0f:1e:fe:df:6c:2b:f9:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:0B:8B:2C:93:EA:AB:B6:85:5F:9C:83:F9:0C:79:83:0A:68:DF
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a3a2f33322d3332203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:5e:d8:e3:98:2f:be:66:7e:bf:1c:e8:51:09:78:0b:f2:
         0c:5b:d5:6e:28:35:96:d9:85:bc:dc:5f:bf:cd:dd:74:99:a9:
         f0:52:bd:96:85:e5:13:ac:50:46:d2:a2:08:90:02:25:63:15:
         46:dc:56:a3:f6:0b:79:25:4b:c1:fe:19:08:c3:72:ef:ea:cd:
         4d:9a:51:30:d1:e3:7d:15:ff:e6:dd:e8:ec:75:3d:92:a3:50:
         74:8d:54:b5:c1:d6:1e:80:4e:13:07:18:db:e3:89:09:70:07:
         26:7a:4d:d4:8f:b3:00:a2:a6:a4:95:25:75:75:46:ac:3a:f0:
         10:72:3c:1b:2f:b7:34:5b:0a:9d:f1:42:90:8d:97:32:ce:3f:
         75:d8:6a:fb:e4:c0:2a:8d:f0:72:6b:a3:5f:f7:70:e9:05:96:
         3e:69:ba:30:47:04:41:68:97:18:51:42:16:0b:3f:9e:dd:b4:
         1e:77:a5:3e:1b:ac:65:f0:ff:e8:6a:cc:d2:ff:f8:c7:24:5b:
         94:c0:fb:1e:a5:b9:62:f1:46:70:b8:7f:47:d2:0e:95:33:65:
         40:4e:74:88:77:a5:37:7b:f6:d8:9d:d9:8a:ef:a8:27:30:e6:
         f3:04:17:9b:f5:88:9c:e5:a5:3f:82:77:91:54:20:23:c3:b2:
         04:17:4a:7d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSt9ZD6dB0ebNxqWIu0DEzd3Agt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM5MkQxRENBMzc3MDFGM0FDREJBNURBRTZCNDREMTI1
QzI4QUU3MTAeFw0yNDA0MDQwMTMxMTdaFw0yNTA0MDMwMTM2MTdaMDMxMTAvBgNV
BAMTKDQwNDQwQjhCMkM5M0VBQUJCNjg1NUY5QzgzRjkwQzc5ODMwQTY4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYzm5fUY7KkZECtIIlX03DGNK
eaAW1XIfgY9jbjGo/awyZJmqfPi20x+e5ooJUA4lU3HlWDQL9hFp76sQOvUl3qQI
axAx2FD43worjaqEslxcGFV9B6h0meW2Nn8ulgU+kD2WqDj+FDzFS2+tTPsehDxF
OFMCt/wjAMBRiSRRSuiMZ4UM3BfIim5k6FhFycdDZ6+nTnW8OxXjDKscr1pEAbtb
ZKQs0uiyZq90rJHKRDSTTpud+uwOpbIb44c4cLa40jFKBTrCXV5yYzSFMeZjaXk/
4bHaJohgozOQAUjQ8/KIBfAYpGsQ1TbNGErE7b3CMQkQGp0DDx7+32wr+TOfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQEQLiyyT6qu2hV+cg/kMeYMKaN8wHwYDVR0j
BBgwFoAUk5LR3KN3AfOs26Xa5rRNElwornEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1ybUVtUlI2YXg0aldUaThrOHA4M0xjbjZTVVdBakpHRE1WOVJoSmhU
ZTUvMS85MzkyRDFEQ0EzNzcwMUYzQUNEQkE1REFFNkI0NEQxMjVDMjhBRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTJEMURDQTM3NzAxRjNB
Q0RCQTVEQUU2QjQ0RDEyNUMyOEFFNzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNcm1FbVJSNmF4NGpXVGk4azhwODNMY242U1VXQWpKR0RNVjlSaEpoVGU1LzEv
MzIzODMwMzQzYTM1MzEzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARRADANBgkqhkiG9w0BAQsFAAOCAQEAfBBe2OOY
L75mfr8c6FEJeAvyDFvVbig1ltmFvNxfv83ddJmp8FK9loXlE6xQRtKiCJACJWMV
RtxWo/YLeSVLwf4ZCMNy7+rNTZpRMNHjfRX/5t3o7HU9kqNQdI1UtcHWHoBOEwcY
2+OJCXAHJnpN1I+zAKKmpJUldXVGrDrwEHI8Gy+3NFsKnfFCkI2XMs4/ddhq++TA
Ko3wcmujX/dw6QWWPmm6MEcEQWiXGFFCFgs/nt20HnelPhusZfD/6GrM0v/4xyRb
lMD7HqW5YvFGcLh/R9IOlTNlQE50iHelN3v22J3Ziu+oJzDm8wQXm/WInOWlP4J3
kVQgI8OyBBdKfQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org