Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          zlxuFWXdkZ9BArHypxRNRGXPrh+xKdY89YDKoLeGFvU=
Subject key identifier:   B2:C3:57:DE:47:10:72:5A:9A:40:81:1A:50:3C:5F:58:DD:3A:78:B9
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       6DE55AECA3C8F86556001942075E55D8934AA6BF
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:32 +0000
ROA not before:           Wed 15 May 2024 14:44:32 +0000
ROA not after:            Wed 14 May 2025 14:49:32 +0000
asID:                     264422
IP address blocks:        2804:1e58:f001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:5a:ec:a3:c8:f8:65:56:00:19:42:07:5e:55:d8:93:4a:a6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:32 2024 GMT
            Not After : May 14 14:49:32 2025 GMT
        Subject: CN=B2C357DE4710725A9A40811A503C5F58DD3A78B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:2a:94:ba:fb:49:03:23:5b:c3:e4:2e:82:
                    e5:2c:7c:cb:d2:da:85:13:2f:eb:89:a4:44:8b:b1:
                    83:f3:42:e9:be:68:77:08:f3:03:eb:0f:28:f8:1a:
                    a8:f2:6a:42:e5:b0:30:29:16:42:62:bf:3d:43:eb:
                    07:dd:05:33:6e:5c:0e:6c:da:7c:5a:46:f1:78:ef:
                    84:52:e4:f3:28:e0:ca:84:48:c0:8e:ba:91:c5:e9:
                    c6:76:9e:b2:0d:1d:77:e5:de:b1:cd:4f:ea:5c:48:
                    32:46:7a:79:78:b3:aa:df:56:68:6c:21:da:90:3a:
                    6c:3f:29:33:3b:0f:89:be:05:21:dd:ba:b5:4b:6e:
                    79:12:13:fa:db:54:c3:26:da:fc:f5:58:69:c2:5d:
                    f3:b2:f2:3b:f1:be:41:29:ea:85:74:89:2f:b7:85:
                    83:96:42:59:d5:b2:1d:77:48:69:b3:d2:59:3b:d4:
                    ec:9a:48:06:a8:bc:27:57:14:d3:22:07:cd:ce:41:
                    28:61:76:03:e8:dd:c4:66:30:2f:06:f5:89:cc:f5:
                    48:b6:e2:21:7c:52:25:f9:a0:f9:47:36:05:15:09:
                    2f:37:eb:7f:82:ba:77:6e:97:94:3f:e2:8e:08:6b:
                    59:63:84:38:a9:e8:28:74:5d:27:f6:0d:a2:2e:bd:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C3:57:DE:47:10:72:5A:9A:40:81:1A:50:3C:5F:58:DD:3A:78:B9
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:cd:7f:8a:44:21:fe:52:e0:c2:d7:d2:b7:2b:71:75:40:
         a5:6a:51:5a:34:ff:06:a9:30:5c:a8:b5:79:56:4c:35:fa:1a:
         30:63:78:d7:1c:f0:fc:9c:e8:0d:f0:db:28:49:af:cb:cd:60:
         4a:01:22:86:6f:e0:46:11:b4:a0:a3:dc:8b:f9:b2:dc:c8:a9:
         70:d8:c9:47:ee:e6:70:f3:4e:32:22:ed:09:5b:63:bc:81:a0:
         ff:df:d9:9e:2b:0f:94:58:95:f6:59:e0:97:d7:c9:88:65:bc:
         fc:5a:71:ee:24:85:b7:27:24:59:e0:96:5a:2f:d6:bf:09:87:
         5e:b1:c7:f9:03:0e:0a:7e:21:b2:1a:fe:03:16:da:39:9b:5d:
         87:3d:7a:2d:bd:6c:25:28:60:98:9b:7d:89:3e:e7:cc:b8:da:
         3b:d4:38:e3:c1:81:f3:d5:ef:10:46:94:76:5d:25:9f:ab:de:
         0b:06:b9:af:84:ac:b7:0d:75:58:4b:04:a5:57:d0:d8:0a:ae:
         12:20:84:c1:ea:a5:1b:e7:e7:63:74:a6:86:fe:9e:81:48:23:
         bd:a0:58:04:3b:70:1b:26:6a:a6:d8:b5:f7:9e:9b:19:fa:90:
         ba:07:6f:e2:8e:e2:f6:d5:ee:f5:0e:de:10:0d:06:27:61:21:
         19:db:88:1b
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUbeVa7KPI+GVWABlCB15V2JNKpr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNDA1MTUxNDQ0MzJaFw0yNTA1MTQxNDQ5MzJaMDMxMTAvBgNV
BAMTKEIyQzM1N0RFNDcxMDcyNUE5QTQwODExQTUwM0M1RjU4REQzQTc4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDclCqUuvtJAyNbw+QuguUsfMvS
2oUTL+uJpESLsYPzQum+aHcI8wPrDyj4GqjyakLlsDApFkJivz1D6wfdBTNuXA5s
2nxaRvF474RS5PMo4MqESMCOupHF6cZ2nrINHXfl3rHNT+pcSDJGenl4s6rfVmhs
IdqQOmw/KTM7D4m+BSHdurVLbnkSE/rbVMMm2vz1WGnCXfOy8jvxvkEp6oV0iS+3
hYOWQlnVsh13SGmz0lk71OyaSAaovCdXFNMiB83OQShhdgPo3cRmMC8G9YnM9Ui2
4iF8UiX5oPlHNgUVCS8363+Cundul5Q/4o4Ia1ljhDip6Ch0XSf2DaIuvT0xAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUssNX3kcQclqaQIEaUDxfWN06eLkwHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2E2NjMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHljwATANBgkqhkiG9w0BAQsF
AAOCAQEAjpjNf4pEIf5S4MLX0rcrcXVApWpRWjT/BqkwXKi1eVZMNfoaMGN41xzw
/JzoDfDbKEmvy81gSgEihm/gRhG0oKPci/my3MipcNjJR+7mcPNOMiLtCVtjvIGg
/9/ZnisPlFiV9lngl9fJiGW8/Fpx7iSFtyckWeCWWi/WvwmHXrHH+QMOCn4hshr+
AxbaOZtdhz16Lb1sJShgmJt9iT7nzLjaO9Q448GB89XvEEaUdl0ln6veCwa5r4Ss
tw11WEsEpVfQ2AquEiCEweqlG+fnY3Smhv6egUgjvaBYBDtwGyZqpti1956bGfqQ
ugdv4o7i9tXu9Q7eEA0GJ2EhGduIGw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:00 2024 by rpki-client on console-ams.rpki-client.org