Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a633030303a3a2f33342d3334203d3e20323635323636.roa
File:                     323830343a326433343a633030303a3a2f33342d3334203d3e20323635323636.roa (raw, json)
Hash identifier:          hjZawM6AYMeNG34t86MnQhVln/R+zpInrUwni6KG5MM=
Subject key identifier:   E6:CC:3B:F3:C8:AC:A2:81:AC:FF:54:35:80:0B:0D:45:8A:6E:B9:D1
Certificate issuer:       /CN=40B2EE8786079947D0F70A861B591AFA74854AA7
Certificate serial:       7382DD188947F3215B8EDE4C6E868C65B109E772
Authority key identifier: 40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a633030303a3a2f33342d3334203d3e20323635323636.roa
Signing time:             Thu 18 Apr 2024 20:24:34 +0000
ROA not before:           Thu 18 Apr 2024 20:19:34 +0000
ROA not after:            Thu 17 Apr 2025 20:24:34 +0000
asID:                     265266
IP address blocks:        2804:2d34:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl
                          rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:82:dd:18:89:47:f3:21:5b:8e:de:4c:6e:86:8c:65:b1:09:e7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2EE8786079947D0F70A861B591AFA74854AA7
        Validity
            Not Before: Apr 18 20:19:34 2024 GMT
            Not After : Apr 17 20:24:34 2025 GMT
        Subject: CN=E6CC3BF3C8ACA281ACFF5435800B0D458A6EB9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:12:aa:f4:b0:59:7d:14:80:94:c5:13:92:
                    6c:b1:fe:fc:51:61:3b:96:4f:41:7f:f1:81:45:31:
                    39:04:27:79:1b:5e:1d:ad:ba:1e:05:6a:df:24:69:
                    f1:ec:42:4a:01:bb:c2:64:6c:27:a0:cf:65:0f:0e:
                    a2:91:cc:3e:4e:c8:a4:d0:67:03:4d:71:d2:49:62:
                    88:f3:d2:ca:11:23:25:02:53:e2:e8:29:f1:96:b2:
                    7b:cf:23:2d:66:bf:c3:2e:99:43:5b:e4:95:85:25:
                    a1:70:c4:89:50:18:b2:8e:3d:77:70:59:6d:50:f9:
                    25:be:f3:c1:35:b2:48:59:0a:70:63:ac:49:68:81:
                    06:d6:f5:eb:1e:dd:3f:50:71:51:4e:4d:9d:a2:a1:
                    96:fb:13:de:af:ff:76:7f:de:02:5a:59:c1:fc:3f:
                    1a:12:8e:c8:9a:e0:1d:2e:a9:80:3a:67:48:49:18:
                    b9:60:dd:32:94:3f:1e:a5:f6:6a:99:9c:30:76:61:
                    eb:24:6a:b9:e3:2e:26:8f:8b:19:b2:da:df:5e:dd:
                    a1:e3:b8:73:11:cd:36:ec:77:e7:ca:ba:8a:9a:4c:
                    8c:3e:d8:2a:9b:36:15:ec:62:4c:84:3b:d9:43:8e:
                    41:a6:dc:78:fe:9c:ec:9a:50:a6:bf:e7:06:57:01:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CC:3B:F3:C8:AC:A2:81:AC:FF:54:35:80:0B:0D:45:8A:6E:B9:D1
            X509v3 Authority Key Identifier:
                keyid:40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a633030303a3a2f33342d3334203d3e20323635323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d34:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         51:60:98:9f:7b:2c:2f:99:8c:f2:de:c0:7f:c9:d4:63:ef:6c:
         72:02:04:29:ee:90:86:d8:5b:21:89:2e:c2:26:87:bc:de:cf:
         e2:09:b9:ab:5f:ef:fc:a9:c5:3c:eb:d4:34:17:3a:d1:5b:16:
         5d:c8:e4:82:1e:ef:61:d0:f2:8d:13:9d:71:3c:7f:74:41:ca:
         da:e8:c3:92:f5:51:0e:32:ea:91:93:ef:d5:23:cd:00:54:d1:
         6d:63:cd:ad:ee:38:e3:d0:43:9e:0c:3b:1d:fa:8c:af:50:44:
         19:b4:0d:e2:f6:90:dd:0b:f1:5b:0c:6c:ec:89:db:ad:65:5a:
         eb:44:39:b6:31:d1:3b:8b:b7:c2:3f:1f:fd:47:8f:c1:49:80:
         19:35:e8:1d:dd:72:4b:f1:f2:bb:53:60:e8:5c:22:10:db:f4:
         f6:f3:bf:29:54:65:29:3c:e0:67:6e:c1:eb:93:44:2b:88:4c:
         31:78:fa:25:7b:52:ec:b0:45:98:d5:2b:f8:7b:86:56:5b:30:
         c2:88:ce:b5:e9:c4:d0:80:89:0d:89:c6:7c:06:43:cd:71:ba:
         80:a2:c0:9c:c6:54:1a:fc:03:b0:a5:08:80:af:46:3e:67:c6:
         7d:f7:50:15:dc:62:23:1b:f9:91:01:ba:ca:15:9a:3d:cb:1e:
         b6:50:e9:75
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUc4LdGIlH8yFbjt5MboaMZbEJ53IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCMkVFODc4NjA3OTk0N0QwRjcwQTg2MUI1OTFBRkE3
NDg1NEFBNzAeFw0yNDA0MTgyMDE5MzRaFw0yNTA0MTcyMDI0MzRaMDMxMTAvBgNV
BAMTKEU2Q0MzQkYzQzhBQ0EyODFBQ0ZGNTQzNTgwMEIwRDQ1OEE2RUI5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBBKq9LBZfRSAlMUTkmyx/vxR
YTuWT0F/8YFFMTkEJ3kbXh2tuh4Fat8kafHsQkoBu8JkbCegz2UPDqKRzD5OyKTQ
ZwNNcdJJYojz0soRIyUCU+LoKfGWsnvPIy1mv8MumUNb5JWFJaFwxIlQGLKOPXdw
WW1Q+SW+88E1skhZCnBjrElogQbW9ese3T9QcVFOTZ2ioZb7E96v/3Z/3gJaWcH8
PxoSjsia4B0uqYA6Z0hJGLlg3TKUPx6l9mqZnDB2YeskarnjLiaPixmy2t9e3aHj
uHMRzTbsd+fKuoqaTIw+2CqbNhXsYkyEO9lDjkGm3Hj+nOyaUKa/5wZXARohAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5sw788isooGs/1Q1gAsNRYpuudEwHwYDVR0j
BBgwFoAUQLLuh4YHmUfQ9wqGG1ka+nSFSqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFl2VjZYTkpqdHR1bkxmaERTZkxvYXB0eFBkYmJFZE1obmZuUTZnV1VC
NTgvMC80MEIyRUU4Nzg2MDc5OTQ3RDBGNzBBODYxQjU5MUFGQTc0ODU0QUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQjJFRTg3ODYwNzk5NDdE
MEY3MEE4NjFCNTkxQUZBNzQ4NTRBQTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRZdlY2WE5KanR0dW5MZmhEU2ZMb2FwdHhQZGJiRWRNaG5mblE2Z1dVQjU4LzAv
MzIzODMwMzQzYTMyNjQzMzM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigELTTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBRYJifeywvmYzy3sB/ydRj72xyAgQp7pCG2FshiS7CJoe83s/iCbmrX+/8
qcU869Q0FzrRWxZdyOSCHu9h0PKNE51xPH90Qcra6MOS9VEOMuqRk+/VI80AVNFt
Y82t7jjj0EOeDDsd+oyvUEQZtA3i9pDdC/FbDGzsidutZVrrRDm2MdE7i7fCPx/9
R4/BSYAZNegd3XJL8fK7U2DoXCIQ2/T2878pVGUpPOBnbsHrk0QriEwxePole1Ls
sEWY1Sv4e4ZWWzDCiM616cTQgIkNicZ8BkPNcbqAosCcxlQa/AOwpQiAr0Y+Z8Z9
91AV3GIjG/mRAbrKFZo9yx62UOl1
-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:36 2024 by rpki-client on console-ams.rpki-client.org