Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/323830343a376262633a3a2f33322d313238203d3e20323731343531.roa
File:                     323830343a376262633a3a2f33322d313238203d3e20323731343531.roa (raw, json)
Hash identifier:          5MVY74nS7iyR6MBZ0CvAgtt7q9vMrrrjwjkugSYyyeY=
Subject key identifier:   BD:77:70:0B:2D:79:C5:28:FD:C3:D3:00:48:44:16:F7:D3:AD:BA:EC
Certificate issuer:       /CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9
Certificate serial:       2DE77DC7BD8E57D0ABCB746EDEDFA3233C2F5E01
Authority key identifier: 3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/323830343a376262633a3a2f33322d313238203d3e20323731343531.roa
Signing time:             Thu 04 Apr 2024 11:17:28 +0000
ROA not before:           Thu 04 Apr 2024 11:12:28 +0000
ROA not after:            Thu 03 Apr 2025 11:17:28 +0000
asID:                     271451
IP address blocks:        2804:7bbc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl
                          rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e7:7d:c7:bd:8e:57:d0:ab:cb:74:6e:de:df:a3:23:3c:2f:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9
        Validity
            Not Before: Apr  4 11:12:28 2024 GMT
            Not After : Apr  3 11:17:28 2025 GMT
        Subject: CN=BD77700B2D79C528FDC3D300484416F7D3ADBAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:67:9a:b8:02:9f:8a:21:e1:eb:8e:72:2b:
                    43:65:c1:bf:84:c4:80:33:84:ec:a8:db:f9:e4:d5:
                    4c:81:81:6b:bc:98:8c:f9:9e:13:ef:42:5f:eb:df:
                    36:d2:38:5b:3c:f4:3f:a9:df:38:ec:08:7e:65:95:
                    d4:7d:73:94:64:65:04:8d:b4:da:bf:eb:2d:0f:dd:
                    71:8a:f5:13:b6:7e:27:73:c8:53:3d:5e:25:fa:d5:
                    3b:6f:73:be:09:ef:10:e7:b5:a2:3c:96:e7:17:a4:
                    51:49:b3:f2:32:39:c4:9a:3a:14:8c:4d:e1:a7:99:
                    c2:f4:07:8d:43:91:1b:62:19:b5:cd:0f:fe:28:f4:
                    75:42:ce:52:36:48:b8:cf:4b:83:28:05:73:17:c4:
                    f5:af:b2:b3:98:39:37:ca:4b:a3:96:53:66:96:f4:
                    29:be:e5:63:cf:d7:9a:ac:bb:8a:0f:19:cf:f6:3c:
                    e8:36:cc:28:d7:1e:c3:a7:52:a9:68:45:39:c2:7b:
                    dc:a1:51:06:94:17:5c:eb:a1:24:60:f2:68:01:c9:
                    14:26:a1:ed:37:45:69:8f:3a:cb:84:d7:43:82:25:
                    6b:7f:55:7f:fa:e1:c1:5d:f1:aa:60:e3:68:06:6f:
                    49:d1:cf:a1:2a:65:5b:2f:44:44:63:17:4d:29:76:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:70:0B:2D:79:C5:28:FD:C3:D3:00:48:44:16:F7:D3:AD:BA:EC
            X509v3 Authority Key Identifier:
                keyid:3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/323830343a376262633a3a2f33322d313238203d3e20323731343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:93:73:2e:2d:f1:03:0c:c2:30:a6:a2:17:7d:86:77:06:c7:
         48:1c:12:a5:cc:89:5c:8f:35:21:f2:76:64:4b:b3:29:b7:49:
         3d:e3:74:63:a4:8b:12:70:bd:62:de:a8:e5:78:14:a1:5a:a7:
         ec:82:28:77:ec:50:98:9e:65:32:3a:c3:e3:ca:9c:93:c1:f8:
         d3:2f:89:87:da:54:d2:c0:cb:8f:75:3c:fd:b2:41:10:1c:34:
         28:d5:bc:e4:8d:64:3c:60:ad:49:4a:7e:fa:58:bf:99:7a:c1:
         36:38:4c:85:d3:d3:ce:ba:4b:44:8b:67:db:9a:65:24:f6:49:
         58:00:2f:6c:4d:b8:5b:b5:a6:0d:b3:2a:a4:a0:7b:7e:04:a9:
         7b:e3:3a:c4:c1:06:d5:27:f7:48:0a:be:05:06:51:7d:8c:3e:
         0c:1f:63:d8:73:b3:f6:96:ec:c1:51:2d:a3:be:a0:4e:67:eb:
         82:8b:91:f3:78:e3:56:5a:1b:1a:7e:25:4e:87:d6:aa:e0:82:
         0b:8b:0b:55:e7:33:21:c6:62:a1:5a:81:bc:45:cd:cc:cf:d4:
         7f:bd:7a:e6:25:79:4f:ac:0a:10:b1:9f:59:e7:14:87:c1:cb:
         9e:40:84:16:8d:27:2d:41:92:a6:85:d9:75:a3:61:bb:17:93:
         cc:8e:c1:0a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULed9x72OV9Cry3Ru3t+jIzwvXgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E3QTA4RTFFMzNFMzhCODJGRTQ2OUU5NEYwNkMzMTc0
QjVGOENGOTAeFw0yNDA0MDQxMTEyMjhaFw0yNTA0MDMxMTE3MjhaMDMxMTAvBgNV
BAMTKEJENzc3MDBCMkQ3OUM1MjhGREMzRDMwMDQ4NDQxNkY3RDNBREJBRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dGeauAKfiiHh645yK0Nlwb+E
xIAzhOyo2/nk1UyBgWu8mIz5nhPvQl/r3zbSOFs89D+p3zjsCH5lldR9c5RkZQSN
tNq/6y0P3XGK9RO2fidzyFM9XiX61Ttvc74J7xDntaI8lucXpFFJs/IyOcSaOhSM
TeGnmcL0B41DkRtiGbXND/4o9HVCzlI2SLjPS4MoBXMXxPWvsrOYOTfKS6OWU2aW
9Cm+5WPP15qsu4oPGc/2POg2zCjXHsOnUqloRTnCe9yhUQaUF1zroSRg8mgByRQm
oe03RWmPOsuE10OCJWt/VX/64cFd8apg42gGb0nRz6EqZVsvRERjF00pdpW3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUvXdwCy15xSj9w9MASEQW99OtuuwwHwYDVR0j
BBgwFoAUOnoI4eM+OLgv5GnpTwbDF0tfjPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRL
QTcvMS8zQTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBN0EwOEUxRTMzRTM4Qjgy
RkU0NjlFOTRGMDZDMzE3NEI1RjhDRjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyVVJYVzI4bWIxeHI1S1ZVSmdINm9MRjRjSGprV1JUUDdLdTNDTXA0S0E3LzEv
MzIzODMwMzQzYTM3NjI2MjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHu8MA0GCSqGSIb3DQEBCwUAA4IBAQBgk3Mu
LfEDDMIwpqIXfYZ3BsdIHBKlzIlcjzUh8nZkS7Mpt0k943RjpIsScL1i3qjleBSh
Wqfsgih37FCYnmUyOsPjypyTwfjTL4mH2lTSwMuPdTz9skEQHDQo1bzkjWQ8YK1J
Sn76WL+ZesE2OEyF09POuktEi2fbmmUk9klYAC9sTbhbtaYNsyqkoHt+BKl74zrE
wQbVJ/dICr4FBlF9jD4MH2PYc7P2luzBUS2jvqBOZ+uCi5HzeONWWhsafiVOh9aq
4IILiwtV5zMhxmKhWoG8Rc3Mz9R/vXrmJXlPrAoQsZ9Z5xSHwcueQIQWjSctQZKm
hdl1o2G7F5PMjsEK
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:24 2024 by rpki-client on console-fra.rpki-client.org