Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa
File:                     323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa (raw, json)
Hash identifier:          2RWoXOTjLfpxq+zrWvTr7KdtC+PuoDM+eWlM7qv38DI=
Subject key identifier:   09:D3:62:18:51:5D:3B:FD:02:93:AB:7D:58:45:4A:A6:AA:69:84:32
Certificate issuer:       /CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
Certificate serial:       7B4E234B224421BDFB58D15FCBA9EAE2CB137411
Authority key identifier: 40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa
Signing time:             Thu 04 Apr 2024 06:19:53 +0000
ROA not before:           Thu 04 Apr 2024 06:14:53 +0000
ROA not after:            Thu 03 Apr 2025 06:19:53 +0000
asID:                     273412
IP address blocks:        2804:8e3c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4e:23:4b:22:44:21:bd:fb:58:d1:5f:cb:a9:ea:e2:cb:13:74:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Validity
            Not Before: Apr  4 06:14:53 2024 GMT
            Not After : Apr  3 06:19:53 2025 GMT
        Subject: CN=09D36218515D3BFD0293AB7D58454AA6AA698432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:7b:92:c7:72:e4:d8:2c:0b:1d:a6:ee:28:
                    47:cd:90:01:82:2d:5c:20:b7:78:22:5b:d7:27:36:
                    c5:6a:93:e8:80:bd:15:10:33:10:b3:c6:9f:7d:69:
                    55:25:12:16:3d:50:11:c2:e6:ed:a1:15:09:ba:14:
                    ad:89:9e:d1:c2:d4:32:b8:d1:46:6a:34:f0:57:f7:
                    9d:b9:c4:3a:f8:fb:99:de:e0:5b:63:ec:9e:df:7f:
                    3e:5a:b8:ce:86:2b:07:30:cb:e2:90:4a:bd:40:94:
                    f5:a0:4c:79:2e:6f:5c:1d:f0:78:bd:65:88:40:4c:
                    3f:a2:3e:1d:75:21:01:a5:50:51:f8:d9:d6:3b:d4:
                    3a:a2:0a:cb:0d:bb:8c:4a:9c:22:ed:13:30:53:1e:
                    02:45:7d:4e:f6:bf:12:49:06:63:46:6d:82:64:d3:
                    48:3d:e8:cc:79:90:b8:f8:21:41:95:83:80:b5:ab:
                    da:b9:ee:bb:4e:df:b5:2b:1f:1a:e2:6d:90:71:3e:
                    9c:08:6f:e9:76:7e:9c:33:24:6a:7f:45:0b:9a:95:
                    0b:54:ec:12:ea:15:a7:e0:0c:8f:cf:b7:40:26:e5:
                    09:b3:93:ea:a0:37:3e:bf:2b:93:b7:51:4d:8f:d0:
                    f2:e2:b9:ab:5c:26:0f:23:2d:d1:ab:3b:f3:00:e7:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D3:62:18:51:5D:3B:FD:02:93:AB:7D:58:45:4A:A6:AA:69:84:32
            X509v3 Authority Key Identifier:
                keyid:40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:9e:2e:03:81:66:85:37:f7:c5:ab:80:90:c1:05:75:d5:
         f9:eb:57:38:7c:82:02:54:ad:15:ca:5c:be:f4:33:9f:ec:cd:
         24:a8:62:3f:cf:41:57:1f:e9:cd:05:01:06:26:18:a6:ca:66:
         b3:c4:dd:26:f8:92:b7:5c:ea:a5:a6:6d:9a:e4:84:f6:82:cf:
         d9:a9:12:7e:89:75:d2:83:b9:8d:cb:c2:40:49:b6:2a:65:c3:
         0f:6b:fc:33:ee:88:8c:49:e2:3f:34:b6:5a:cd:31:7b:e7:ae:
         dd:10:38:29:c0:ff:06:ed:52:18:1a:a4:75:39:0b:64:a7:74:
         ba:6f:f0:94:2f:2b:ac:52:64:8b:f6:28:fb:63:c7:e8:3d:ea:
         28:da:b1:6d:a3:de:96:ac:9b:ab:0d:03:86:b3:ff:3f:2e:00:
         3e:ad:17:4f:fa:5b:45:c9:5c:45:e9:90:7d:ab:9c:fa:2c:f5:
         10:28:60:a3:93:07:4d:eb:0d:f5:ed:a9:e6:89:6e:aa:15:16:
         e2:e3:79:5c:4e:1a:33:96:1d:23:0b:03:86:f3:f9:58:49:ec:
         5b:15:71:0e:bc:9f:d8:9f:11:ee:a3:cf:52:13:ca:76:55:0c:
         92:00:39:b9:4c:c5:76:1c:af:ed:1b:b8:e2:af:85:04:f4:67:
         98:36:84:59
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe04jSyJEIb37WNFfy6nq4ssTdBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA1NURBMEFDQjM4MkQzQ0YxRjI5MDk3OTk2MzIzMUM4
QkFCMzRDMjAeFw0yNDA0MDQwNjE0NTNaFw0yNTA0MDMwNjE5NTNaMDMxMTAvBgNV
BAMTKDA5RDM2MjE4NTE1RDNCRkQwMjkzQUI3RDU4NDU0QUE2QUE2OTg0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UHuSx3Lk2CwLHabuKEfNkAGC
LVwgt3giW9cnNsVqk+iAvRUQMxCzxp99aVUlEhY9UBHC5u2hFQm6FK2JntHC1DK4
0UZqNPBX9525xDr4+5ne4Ftj7J7ffz5auM6GKwcwy+KQSr1AlPWgTHkub1wd8Hi9
ZYhATD+iPh11IQGlUFH42dY71DqiCssNu4xKnCLtEzBTHgJFfU72vxJJBmNGbYJk
00g96Mx5kLj4IUGVg4C1q9q57rtO37UrHxribZBxPpwIb+l2fpwzJGp/RQualQtU
7BLqFafgDI/Pt0Am5Qmzk+qgNz6/K5O3UU2P0PLiuatcJg8jLdGrO/MA59dXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCdNiGFFdO/0Ck6t9WEVKpqpphDIwHwYDVR0j
BBgwFoAUQFXaCss4LTzx8pCXmWMjHIurNMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMS80MDU1REEwQUNCMzgyRDNDRjFGMjkwOTc5OTYzMjMxQzhCQUIzNEMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNTVEQTBBQ0IzODJEM0NG
MUYyOTA5Nzk5NjMyMzFDOEJBQjM0QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzEv
MzIzODMwMzQzYTM4NjUzMzYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM0MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEjjzAMA0GCSqGSIb3DQEBCwUA
A4IBAQA9qZ4uA4FmhTf3xauAkMEFddX561c4fIICVK0Vyly+9DOf7M0kqGI/z0FX
H+nNBQEGJhimymazxN0m+JK3XOqlpm2a5IT2gs/ZqRJ+iXXSg7mNy8JASbYqZcMP
a/wz7oiMSeI/NLZazTF7567dEDgpwP8G7VIYGqR1OQtkp3S6b/CULyusUmSL9ij7
Y8foPeoo2rFto96WrJurDQOGs/8/LgA+rRdP+ltFyVxF6ZB9q5z6LPUQKGCjkwdN
6w317anmiW6qFRbi43lcThozlh0jCwOG8/lYSexbFXEOvJ/YnxHuo89SE8p2VQyS
ADm5TMV2HK/tG7jir4UE9GeYNoRZ
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:07 2024 by rpki-client on console-ams.rpki-client.org