Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          WVFb7QmxD8WZhzW53/bWbjrEjBDjKqbMwCKk2NDOavE=
Subject key identifier:   92:D2:CE:BD:8E:23:00:9C:A1:E3:F1:6A:55:EF:1F:E7:FD:EF:8A:9E
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       6C288B66364E0DEAB0B5683067E35D00D0D55E35
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:45 +0000
ROA not before:           Thu 04 Apr 2024 15:32:45 +0000
ROA not after:            Thu 03 Apr 2025 15:37:45 +0000
asID:                     61717
IP address blocks:        2804:1b44:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:28:8b:66:36:4e:0d:ea:b0:b5:68:30:67:e3:5d:00:d0:d5:5e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:45 2024 GMT
            Not After : Apr  3 15:37:45 2025 GMT
        Subject: CN=92D2CEBD8E23009CA1E3F16A55EF1FE7FDEF8A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:e3:b6:f8:a8:63:b2:23:13:b5:4f:76:1d:
                    71:50:81:bd:ff:03:6b:87:94:18:ee:79:42:2e:45:
                    7c:bf:d5:ab:0b:0d:df:ac:de:f5:bf:19:c8:3e:f3:
                    ea:dc:d0:42:e0:cf:a2:ec:3c:00:ba:8c:ce:0c:9f:
                    3c:17:44:2e:4b:5f:97:54:de:ed:3a:5a:c8:46:67:
                    ea:9f:7b:b3:fa:ba:c4:f1:14:f4:67:bb:9e:80:a1:
                    c3:5e:70:b9:28:d1:10:8a:18:a4:fa:27:b3:a1:49:
                    8a:05:6f:eb:53:1b:c5:e2:58:8c:37:80:68:29:7d:
                    8e:69:70:6f:36:ec:45:6c:03:b7:bc:ad:58:15:47:
                    f6:6b:0e:c0:68:3d:fc:8b:49:e4:d8:b1:32:b4:ce:
                    c7:3f:4f:45:d9:2e:e5:7e:f3:f3:0b:25:36:af:e6:
                    97:af:19:08:0f:35:6b:96:e1:a7:ee:d2:4f:9b:6e:
                    2f:8e:01:4d:db:06:cd:9d:9f:56:c8:1c:05:a9:d3:
                    60:9d:f7:de:be:b2:85:11:43:ce:51:b1:54:4f:75:
                    8c:57:cf:9e:52:9d:96:cc:d1:03:5b:17:f4:d2:f0:
                    b2:8d:b3:02:df:d5:69:6c:74:e4:3a:e7:49:22:6c:
                    fc:d0:a6:e9:66:fc:4c:f4:09:d0:c3:bf:b8:88:30:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:CE:BD:8E:23:00:9C:A1:E3:F1:6A:55:EF:1F:E7:FD:EF:8A:9E
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         78:74:4e:4b:da:f6:e7:e7:4f:dd:4c:f6:2e:c0:60:5b:e9:05:
         5c:35:4a:26:f2:3f:c6:0a:6d:8d:58:8f:90:af:6c:3c:62:f3:
         b0:68:06:0a:8e:2b:df:5f:d7:6d:dd:0c:78:e7:18:af:52:39:
         d2:80:44:96:12:c2:2b:cb:72:3d:e2:d9:4a:61:0a:8b:c7:2d:
         ef:dc:e1:eb:b3:ec:3f:2c:ec:d1:c8:a0:a6:1c:25:7b:fb:15:
         6e:14:bd:4e:d7:19:f0:b3:82:80:34:29:9c:ab:a2:d1:0d:c3:
         85:d7:13:4b:e6:81:e9:a5:06:62:2e:48:85:13:6c:59:a4:3d:
         95:c0:b0:fb:6e:d5:6d:16:8e:5c:4d:eb:ab:e9:75:5d:74:d8:
         6f:85:6c:5a:ea:53:bb:53:a6:04:b7:78:52:af:a8:88:ee:c0:
         bc:22:ba:95:73:06:ca:56:9e:7c:79:ba:c2:a5:a9:ac:9a:b3:
         b6:89:b8:3b:bd:0a:6e:d2:48:39:6d:9e:c6:6d:af:67:32:2c:
         eb:00:50:a5:d3:6f:cb:af:31:5c:8e:5b:26:d3:9a:76:c3:1d:
         4f:49:ce:ac:08:57:9b:3e:71:80:ff:d1:3f:68:5f:81:71:65:
         96:fd:b8:29:a5:0c:eb:c4:41:98:56:87:db:4a:cb:26:c7:63:
         c8:44:f4:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbCiLZjZODeqwtWgwZ+NdANDVXjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4ODc3QjM5RDMyQkY4MzI0OEQyMkJEMjlEMTYyQUQy
MjQzRDk3QTAeFw0yNDA0MDQxNTMyNDVaFw0yNTA0MDMxNTM3NDVaMDMxMTAvBgNV
BAMTKDkyRDJDRUJEOEUyMzAwOUNBMUUzRjE2QTU1RUYxRkU3RkRFRjhBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4+O2+KhjsiMTtU92HXFQgb3/
A2uHlBjueUIuRXy/1asLDd+s3vW/Gcg+8+rc0ELgz6LsPAC6jM4MnzwXRC5LX5dU
3u06WshGZ+qfe7P6usTxFPRnu56AocNecLko0RCKGKT6J7OhSYoFb+tTG8XiWIw3
gGgpfY5pcG827EVsA7e8rVgVR/ZrDsBoPfyLSeTYsTK0zsc/T0XZLuV+8/MLJTav
5pevGQgPNWuW4afu0k+bbi+OAU3bBs2dn1bIHAWp02Cd996+soURQ85RsVRPdYxX
z55SnZbM0QNbF/TS8LKNswLf1WlsdOQ650kibPzQpulm/Ez0CdDDv7iIMAGNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUktLOvY4jAJyh4/FqVe8f5/3vip4wHwYDVR0j
BBgwFoAUgYh3s50yv4MkjSK9KdFirSJD2XowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85UEZrNlQxTEtH
SlgvMS84MTg4NzdCMzlEMzJCRjgzMjQ4RDIyQkQyOUQxNjJBRDIyNDNEOTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxODg3N0IzOUQzMkJGODMy
NDhEMjJCRDI5RDE2MkFEMjI0M0Q5N0EuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3dlBOem5nRThmRURWZ2ljRlhKQVp5dGZNODE4alhvOVBGazZUMUxLR0pYLzEv
MzIzODMwMzQzYTMxNjIzNDM0M2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBtEIDANBgkqhkiG9w0BAQsFAAOC
AQEAeHROS9r25+dP3Uz2LsBgW+kFXDVKJvI/xgptjViPkK9sPGLzsGgGCo4r31/X
bd0MeOcYr1I50oBElhLCK8tyPeLZSmEKi8ct79zh67PsPyzs0cigphwle/sVbhS9
TtcZ8LOCgDQpnKui0Q3DhdcTS+aB6aUGYi5IhRNsWaQ9lcCw+27VbRaOXE3rq+l1
XXTYb4VsWupTu1OmBLd4Uq+oiO7AvCK6lXMGylaefHm6wqWprJqztom4O70KbtJI
OW2exm2vZzIs6wBQpdNvy68xXI5bJtOadsMdT0nOrAhXmz5xgP/RP2hfgXFllv24
KaUM68RBmFaH20rLJsdjyET0PQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:06 2024 by rpki-client on console-ams.rpki-client.org