Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          ZsebtnhqknD3/OaCEqoGXsHmGpo1R49yhjQZxm4Hjac=
Subject key identifier:   5A:AD:D9:E1:E5:26:97:DF:30:FE:3B:A3:D9:7A:91:B5:BD:51:8C:D3
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       382EFF7143614EDA569005413F955ECD3E8A7D7C
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Wed 02 Apr 2025 18:31:50 +0000
asID:                     266623
IP address blocks:        2804:3ed4:1002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2e:ff:71:43:61:4e:da:56:90:05:41:3f:95:5e:cd:3e:8a:7d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Apr  2 18:31:50 2025 GMT
        Subject: CN=5AADD9E1E52697DF30FE3BA3D97A91B5BD518CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:b8:38:aa:84:66:d0:0d:ab:31:b5:62:11:
                    eb:7c:b7:ac:33:6b:2e:f3:c2:17:93:67:63:8a:b1:
                    ee:68:d6:e8:f4:50:87:35:58:f9:9a:d0:8a:a1:18:
                    a0:9e:28:34:07:91:a4:34:ae:e6:f5:df:2d:d0:3b:
                    5a:38:65:c2:54:87:89:fb:b0:c5:a0:55:11:f1:dd:
                    ce:17:b6:81:e3:50:6a:d8:77:30:24:5f:fb:ed:77:
                    11:9b:5d:5f:89:a4:50:4b:c2:92:6d:bb:ea:2a:7e:
                    38:ef:04:c8:2e:34:bc:25:3e:7d:59:66:ba:f2:80:
                    79:5a:76:d6:1d:95:29:b9:62:fa:77:44:45:6e:fe:
                    6a:f5:3a:e2:70:d5:91:cc:32:5f:eb:54:ad:40:78:
                    dd:13:05:78:4b:b1:c3:32:a1:dd:37:b8:40:00:30:
                    e0:71:cf:7a:84:af:00:42:c8:3a:b0:f9:c5:a3:d5:
                    b5:24:f3:6d:b7:8a:d8:76:d6:33:b3:82:6a:52:66:
                    a0:4c:de:a3:f5:b3:88:b8:42:5f:b4:78:fb:f5:6a:
                    f0:ef:51:5e:da:e9:c5:4b:f9:1a:00:ed:d4:9d:e0:
                    03:38:69:e6:ec:58:6c:cf:ca:31:fc:1e:c7:e3:8c:
                    f8:f5:80:aa:58:e7:eb:f6:61:34:5a:67:44:83:86:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AD:D9:E1:E5:26:97:DF:30:FE:3B:A3:D9:7A:91:B5:BD:51:8C:D3
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:da:0f:1c:e4:7b:cb:35:5f:c9:8f:06:6a:c0:ef:3a:ce:ab:
         9d:8b:71:c4:9c:25:7e:f6:cd:a2:73:63:41:c7:30:c4:61:54:
         79:e3:75:19:ca:4e:88:48:47:ec:60:4b:1a:cd:4a:c3:37:d4:
         23:32:4f:da:af:88:42:04:3c:55:62:c9:0a:f0:e4:a2:c2:95:
         53:ba:e7:f3:6a:29:92:fe:ad:d3:86:e7:bb:4a:05:bc:26:93:
         aa:ac:48:27:a3:06:3c:4f:89:f3:5c:fa:58:1c:84:c7:bd:24:
         d1:bf:e6:44:78:4a:f7:1f:8c:ab:b7:94:1b:c7:15:33:98:3a:
         73:c7:ab:4a:3f:c9:72:a7:df:c4:ce:57:ed:ea:cf:45:47:05:
         9e:65:8b:bd:2e:5f:91:7c:c9:b3:c3:2c:11:61:a0:a6:93:52:
         d6:d2:33:83:6a:d2:50:22:12:e5:6c:22:ae:e7:87:c9:21:eb:
         a8:68:9a:5b:24:b7:61:6f:e5:8a:a5:0e:f2:d6:03:e1:92:1a:
         e5:7e:4b:e9:b3:0c:25:6c:67:19:63:6c:d5:50:de:9f:98:fd:
         c5:ff:70:f9:86:58:68:a6:ed:e3:1d:28:f3:5e:3d:10:74:39:
         cf:a1:f2:89:5b:a3:6c:a7:20:2e:e0:d3:c6:c8:bf:5b:c8:f3:
         9a:6c:73:7a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUOC7/cUNhTtpWkAVBP5VezT6KfXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzNzY2RUQ3MDNBNEE5RTlDQTQzN0YzRTdGREIyREI1
RThDOEE3ODAeFw0yNDA0MDMxODI2NTBaFw0yNTA0MDIxODMxNTBaMDMxMTAvBgNV
BAMTKDVBQUREOUUxRTUyNjk3REYzMEZFM0JBM0Q5N0E5MUI1QkQ1MThDRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKprg4qoRm0A2rMbViEet8t6wz
ay7zwheTZ2OKse5o1uj0UIc1WPma0IqhGKCeKDQHkaQ0rub13y3QO1o4ZcJUh4n7
sMWgVRHx3c4XtoHjUGrYdzAkX/vtdxGbXV+JpFBLwpJtu+oqfjjvBMguNLwlPn1Z
ZrrygHladtYdlSm5Yvp3REVu/mr1OuJw1ZHMMl/rVK1AeN0TBXhLscMyod03uEAA
MOBxz3qErwBCyDqw+cWj1bUk8223ith21jOzgmpSZqBM3qP1s4i4Ql+0ePv1avDv
UV7a6cVL+RoA7dSd4AM4aebsWGzPyjH8HsfjjPj1gKpY5+v2YTRaZ0SDhsFbAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUWq3Z4eUml98w/juj2XqRtb1RjNMwHwYDVR0j
BBgwFoAUQTdm7XA6Sp6cpDfz5/2y216MingwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMS80MTM3NjZFRDcwM0E0QTlFOUNBNDM3RjNFN0ZEQjJEQjVFOEM4QTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMzc2NkVENzAzQTRBOUU5
Q0E0MzdGM0U3RkRCMkRCNUU4QzhBNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzEv
MzIzODMwMzQzYTMzNjU2NDM0M2EzMTMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPtQQAjANBgkqhkiG9w0BAQsF
AAOCAQEAItoPHOR7yzVfyY8GasDvOs6rnYtxxJwlfvbNonNjQccwxGFUeeN1GcpO
iEhH7GBLGs1KwzfUIzJP2q+IQgQ8VWLJCvDkosKVU7rn82opkv6t04bnu0oFvCaT
qqxIJ6MGPE+J81z6WByEx70k0b/mRHhK9x+Mq7eUG8cVM5g6c8erSj/JcqffxM5X
7erPRUcFnmWLvS5fkXzJs8MsEWGgppNS1tIzg2rSUCIS5WwirueHySHrqGiaWyS3
YW/liqUO8tYD4ZIa5X5L6bMMJWxnGWNs1VDen5j9xf9w+YZYaKbt4x0o8149EHQ5
z6HyiVujbKcgLuDTxsi/W8jzmmxzeg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org