Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          9ao6wjWuCCMa8MCznJznZVw7zDzQj3wj61d8NhA0wdU=
Subject key identifier:   9E:C1:61:21:87:1E:1D:9F:BA:9F:C8:84:BE:B2:EA:B7:C8:8F:70:6E
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       7D663D4688B0AB798C4C09F60A5B0DC6E4FC4B38
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 04 Apr 2024 04:00:40 +0000
ROA not before:           Thu 04 Apr 2024 03:55:40 +0000
ROA not after:            Thu 03 Apr 2025 04:00:40 +0000
asID:                     52858
IP address blocks:        2804:774:8300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:66:3d:46:88:b0:ab:79:8c:4c:09:f6:0a:5b:0d:c6:e4:fc:4b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Apr  4 03:55:40 2024 GMT
            Not After : Apr  3 04:00:40 2025 GMT
        Subject: CN=9EC16121871E1D9FBA9FC884BEB2EAB7C88F706E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:df:2c:56:c1:e8:38:4e:89:4a:56:61:88:
                    43:b1:16:aa:ff:1a:cd:37:f7:3e:d4:5a:4b:0f:31:
                    c4:3a:15:9f:15:7c:3a:cc:9e:7f:41:9e:47:f2:5b:
                    d3:f9:e0:b0:97:3b:d9:4b:d6:13:14:17:c4:85:8e:
                    d3:c3:b7:d4:47:28:8b:5e:21:76:78:43:fd:37:cb:
                    b3:73:ea:ca:35:0f:d2:52:c7:7a:63:dc:cb:7d:bc:
                    89:3e:5e:d9:49:05:4e:e6:44:74:3d:f9:2c:02:c6:
                    a8:27:73:f6:a8:ec:b0:c4:c5:e3:4c:56:b3:51:b1:
                    5a:8b:ab:75:fd:8d:71:c9:61:42:89:9a:8c:3d:9c:
                    bb:70:88:59:4b:65:81:c6:02:b8:6b:46:14:c9:8d:
                    23:ab:ca:d2:13:0d:0e:9f:2d:f8:f7:cd:ec:7b:3d:
                    e3:15:3d:a4:bb:55:c5:c0:98:da:f4:fc:b9:38:51:
                    89:ee:ef:25:04:9b:3d:df:4f:c2:05:ad:c1:c2:0a:
                    15:bc:bc:ee:f9:06:34:95:06:43:c8:bb:97:4b:bb:
                    99:cb:22:b4:41:ba:f5:d2:d7:62:d6:49:37:b2:9c:
                    ab:25:7f:9c:a4:6d:f0:a5:cd:b4:6a:e8:b0:ac:22:
                    e6:b9:7f:90:78:99:21:77:8a:7b:d1:af:34:ef:15:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C1:61:21:87:1E:1D:9F:BA:9F:C8:84:BE:B2:EA:B7:C8:8F:70:6E
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383330303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:e7:26:ee:64:fa:2e:cb:18:85:ab:2a:73:3e:18:55:c7:fb:
         02:e3:0e:54:88:6c:e4:bd:21:54:c4:11:50:8c:c9:79:dc:cf:
         3e:fa:04:67:fc:ea:78:c4:1a:62:d3:70:7c:24:8c:62:ab:c6:
         fd:aa:a4:15:e3:ca:e1:67:1b:11:09:77:c1:e3:65:b5:23:cf:
         46:70:b9:51:a3:b1:8a:d8:52:27:b1:cb:d3:3c:a9:b7:55:b1:
         91:59:15:b4:4a:8d:2c:13:c6:fa:95:a6:0b:c3:b4:62:e4:11:
         57:3b:4c:ba:ab:cf:7c:ad:ba:26:56:5a:fa:80:91:62:46:1a:
         a0:d2:a9:2b:a4:62:59:4b:42:38:de:6e:da:93:f4:fc:cb:91:
         1a:97:34:dd:d3:cc:3a:f5:74:4a:44:78:d8:e5:8c:c3:c9:e2:
         9d:5f:4f:aa:f9:0b:c4:8b:a8:e9:b1:95:39:3c:08:40:bb:15:
         88:1c:90:ba:95:4d:ea:b2:81:5b:db:cd:51:eb:7c:57:dd:51:
         a4:72:24:5f:03:db:b9:b6:da:bc:d6:5f:d9:40:b2:38:ea:cd:
         a4:50:c5:3e:16:e1:09:9c:9a:bc:73:5e:b7:79:25:27:24:a4:
         07:2b:55:f0:cf:5f:cb:c9:41:9b:5c:03:4e:c6:96:a9:ca:00:
         58:c4:64:f8
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUfWY9Roiwq3mMTAn2ClsNxuT8SzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NURGODMzNjk3MjBFRTFBRjUxNEM3Q0E2NjYwQTQ3
NUQxODU5MjAeFw0yNDA0MDQwMzU1NDBaFw0yNTA0MDMwNDAwNDBaMDMxMTAvBgNV
BAMTKDlFQzE2MTIxODcxRTFEOUZCQTlGQzg4NEJFQjJFQUI3Qzg4RjcwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Lt8sVsHoOE6JSlZhiEOxFqr/
Gs039z7UWksPMcQ6FZ8VfDrMnn9BnkfyW9P54LCXO9lL1hMUF8SFjtPDt9RHKIte
IXZ4Q/03y7Nz6so1D9JSx3pj3Mt9vIk+XtlJBU7mRHQ9+SwCxqgnc/ao7LDExeNM
VrNRsVqLq3X9jXHJYUKJmow9nLtwiFlLZYHGArhrRhTJjSOrytITDQ6fLfj3zex7
PeMVPaS7VcXAmNr0/Lk4UYnu7yUEmz3fT8IFrcHCChW8vO75BjSVBkPIu5dLu5nL
IrRBuvXS12LWSTeynKslf5ykbfClzbRq6LCsIua5f5B4mSF3invRrzTvFSD1AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUnsFhIYceHZ+6n8iEvrLqt8iPcG4wHwYDVR0j
BBgwFoAUR2XfgzaXIO4a9RTHymZgpHXRhZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJwa2hrSm10VWZZQXV2YnltVEpQOVEzVTRlS2ZFcEVISmlDcXdNVFNk
REMvMS80NzY1REY4MzM2OTcyMEVFMUFGNTE0QzdDQTY2NjBBNDc1RDE4NTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NjVERjgzMzY5NzIwRUUx
QUY1MTRDN0NBNjY2MEE0NzVEMTg1OTIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCcGtoa0ptdFVmWUF1dmJ5bVRKUDlRM1U0ZUtmRXBFSEppQ3F3TVRTZERDLzEv
MzIzODMwMzQzYTM3MzczNDNhMzgzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzNTMyMzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQHdIMwDQYJKoZIhvcNAQELBQADggEB
AHHnJu5k+i7LGIWrKnM+GFXH+wLjDlSIbOS9IVTEEVCMyXnczz76BGf86njEGmLT
cHwkjGKrxv2qpBXjyuFnGxEJd8HjZbUjz0ZwuVGjsYrYUiexy9M8qbdVsZFZFbRK
jSwTxvqVpgvDtGLkEVc7TLqrz3ytuiZWWvqAkWJGGqDSqSukYllLQjjebtqT9PzL
kRqXNN3TzDr1dEpEeNjljMPJ4p1fT6r5C8SLqOmxlTk8CEC7FYgckLqVTeqygVvb
zVHrfFfdUaRyJF8D27m22rzWX9lAsjjqzaRQxT4W4QmcmrxzXrd5JSckpAcrVfDP
X8vJQZtcA07GlqnKAFjEZPg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org