Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa
File:                     323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa (raw, json)
Hash identifier:          j+Hw23ZqFkq2+gxYj3hCGjSnicjGUoGwBPumGXK/I20=
Subject key identifier:   9C:2D:1B:DE:79:92:C8:F0:07:52:D5:51:52:8A:F6:52:84:0F:9D:09
Certificate issuer:       /CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
Certificate serial:       2E6C2E389E5E5E66C23EFE812B1410E07EC38AD2
Authority key identifier: 40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa
Signing time:             Thu 04 Apr 2024 06:19:52 +0000
ROA not before:           Thu 04 Apr 2024 06:14:52 +0000
ROA not after:            Thu 03 Apr 2025 06:19:52 +0000
asID:                     273412
IP address blocks:        2804:8e3c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6c:2e:38:9e:5e:5e:66:c2:3e:fe:81:2b:14:10:e0:7e:c3:8a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Validity
            Not Before: Apr  4 06:14:52 2024 GMT
            Not After : Apr  3 06:19:52 2025 GMT
        Subject: CN=9C2D1BDE7992C8F00752D551528AF652840F9D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:b7:23:f5:88:8d:ad:2d:be:f5:5b:aa:87:
                    9f:dc:bf:32:22:ca:ea:77:2d:c5:d4:8a:ef:86:45:
                    67:d5:9d:bb:e3:6a:00:be:cb:9c:5c:f3:7c:86:10:
                    2b:08:33:0b:53:cc:df:67:b1:03:32:f3:79:02:3a:
                    62:d1:b7:2d:c7:cb:f1:53:a1:22:12:59:08:33:f3:
                    9b:64:14:49:cf:85:4a:ba:65:f7:79:54:15:00:86:
                    c4:05:fd:e9:26:a2:83:06:fa:94:bc:d9:c0:ac:93:
                    d4:b6:7f:2b:33:39:d9:37:fc:ae:dc:3c:63:40:0a:
                    a5:47:0e:7a:b5:a2:80:93:70:ea:78:5a:2a:64:ee:
                    2f:e2:79:b7:3c:8c:15:4a:ba:97:a5:56:fc:05:9e:
                    a9:57:89:57:5f:a1:ca:fb:5d:42:03:89:4b:ee:57:
                    94:7a:16:e1:19:7c:d6:86:75:48:83:ae:97:5e:e5:
                    b5:7c:67:ff:81:c5:4c:34:fc:73:6f:e1:46:67:ac:
                    d7:ea:4e:62:3f:af:21:98:c4:97:27:64:93:cf:a1:
                    6f:01:09:af:72:8b:6f:48:f7:30:b1:ae:db:02:1a:
                    17:42:0d:8f:7d:c4:f1:f1:bb:58:18:f4:fc:f8:c6:
                    78:31:c8:00:63:2c:37:d8:e1:04:fe:7b:00:f0:ec:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2D:1B:DE:79:92:C8:F0:07:52:D5:51:52:8A:F6:52:84:0F:9D:09
            X509v3 Authority Key Identifier:
                keyid:40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:0a:82:dc:df:8b:f2:40:ed:fd:ca:95:95:fc:43:89:6e:
         66:14:c4:83:1c:12:88:ed:91:09:4d:be:bd:f5:39:4d:45:6d:
         46:e6:68:c3:20:ca:a8:18:11:63:24:a8:c4:82:39:61:15:0f:
         f1:e9:ad:94:6a:6c:bd:62:c5:a0:91:75:f8:9b:b9:71:83:17:
         7c:dc:61:df:ed:0a:1a:19:a4:90:5e:d5:0b:8d:c0:31:7c:30:
         c8:88:95:f4:b8:31:0b:be:55:29:db:b7:25:dd:0f:22:4c:44:
         30:96:38:55:ac:2a:d8:b0:8a:91:3e:3a:45:1f:6c:19:1d:9a:
         70:57:36:65:eb:72:13:8f:e8:53:6c:39:d7:55:25:2e:2b:6c:
         82:4d:7b:cd:96:61:42:49:ea:34:21:86:08:92:3e:9c:a7:16:
         86:ae:64:83:b9:a9:d9:75:6f:00:e4:80:bc:07:df:51:02:c4:
         d3:cd:25:6a:53:68:d5:bf:f9:fd:ff:dc:7e:94:6e:37:38:a7:
         60:d8:8c:75:ba:42:29:88:fa:4f:f2:6a:c9:f0:2b:e2:60:ca:
         4a:c5:5a:7d:35:ad:4f:f4:fc:4d:fb:9b:fe:5b:e6:9e:28:79:
         43:59:25:6a:21:d6:34:4d:00:54:27:67:5c:2e:fa:41:dd:8e:
         bd:6a:e3:d9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULmwuOJ5eXmbCPv6BKxQQ4H7DitIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA1NURBMEFDQjM4MkQzQ0YxRjI5MDk3OTk2MzIzMUM4
QkFCMzRDMjAeFw0yNDA0MDQwNjE0NTJaFw0yNTA0MDMwNjE5NTJaMDMxMTAvBgNV
BAMTKDlDMkQxQkRFNzk5MkM4RjAwNzUyRDU1MTUyOEFGNjUyODQwRjlEMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgLcj9YiNrS2+9Vuqh5/cvzIi
yup3LcXUiu+GRWfVnbvjagC+y5xc83yGECsIMwtTzN9nsQMy83kCOmLRty3Hy/FT
oSISWQgz85tkFEnPhUq6Zfd5VBUAhsQF/ekmooMG+pS82cCsk9S2fyszOdk3/K7c
PGNACqVHDnq1ooCTcOp4Wipk7i/iebc8jBVKupelVvwFnqlXiVdfocr7XUIDiUvu
V5R6FuEZfNaGdUiDrpde5bV8Z/+BxUw0/HNv4UZnrNfqTmI/ryGYxJcnZJPPoW8B
Ca9yi29I9zCxrtsCGhdCDY99xPHxu1gY9Pz4xngxyABjLDfY4QT+ewDw7H0hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnC0b3nmSyPAHUtVRUor2UoQPnQkwHwYDVR0j
BBgwFoAUQFXaCss4LTzx8pCXmWMjHIurNMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMS80MDU1REEwQUNCMzgyRDNDRjFGMjkwOTc5OTYzMjMxQzhCQUIzNEMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNTVEQTBBQ0IzODJEM0NG
MUYyOTA5Nzk5NjMyMzFDOEJBQjM0QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzEv
MzIzODMwMzQzYTM4NjUzMzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzM0MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEjjyAMA0GCSqGSIb3DQEBCwUA
A4IBAQAU6AqC3N+L8kDt/cqVlfxDiW5mFMSDHBKI7ZEJTb699TlNRW1G5mjDIMqo
GBFjJKjEgjlhFQ/x6a2Uamy9YsWgkXX4m7lxgxd83GHf7QoaGaSQXtULjcAxfDDI
iJX0uDELvlUp27cl3Q8iTEQwljhVrCrYsIqRPjpFH2wZHZpwVzZl63ITj+hTbDnX
VSUuK2yCTXvNlmFCSeo0IYYIkj6cpxaGrmSDuanZdW8A5IC8B99RAsTTzSVqU2jV
v/n9/9x+lG43OKdg2Ix1ukIpiPpP8mrJ8CviYMpKxVp9Na1P9PxN+5v+W+aeKHlD
WSVqIdY0TQBUJ2dcLvpB3Y69auPZ
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:04 2024 by rpki-client on console-fra.rpki-client.org