Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa
File:                     323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (raw, json)
Hash identifier:          gV21JBpo/fSSaPRkm+QCicq7+j/ayTR9teHldqaPhYc=
Subject key identifier:   87:3B:6E:2E:F3:2C:B6:4C:BF:31:28:0A:F9:94:E2:A8:99:63:6C:BB
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       6FAA8751A01FF3F1FEAB01DC15B317E76CC315CC
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa
Signing time:             Thu 04 Apr 2024 05:23:24 +0000
ROA not before:           Thu 04 Apr 2024 05:18:24 +0000
ROA not after:            Thu 03 Apr 2025 05:23:24 +0000
asID:                     263321
IP address blocks:        2804:1440::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:aa:87:51:a0:1f:f3:f1:fe:ab:01:dc:15:b3:17:e7:6c:c3:15:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr  4 05:18:24 2024 GMT
            Not After : Apr  3 05:23:24 2025 GMT
        Subject: CN=873B6E2EF32CB64CBF31280AF994E2A899636CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:76:e7:01:52:6a:2e:dc:0f:74:3b:40:38:
                    8f:8d:44:dc:e5:32:1d:d7:2f:73:23:36:77:64:d0:
                    1c:2b:80:b6:53:c4:c2:4e:00:10:93:3f:52:2a:61:
                    f2:de:1c:c6:7b:b8:b5:61:f6:55:63:c9:cb:6c:1a:
                    71:07:30:5f:f1:1f:06:d5:fd:b1:16:7e:14:a7:71:
                    6f:97:d3:2f:5a:30:3b:26:4c:23:c3:87:31:2c:f8:
                    5e:89:e4:5c:23:63:bb:12:1a:7e:59:de:c9:d0:51:
                    e3:61:be:5b:c0:ab:d3:47:84:f3:da:ba:80:8b:d6:
                    86:e8:83:70:9c:f1:5b:e4:9b:a0:eb:9f:71:6c:7f:
                    67:7b:6b:7c:37:9c:38:b8:93:fb:eb:06:26:c0:8a:
                    3b:a2:6c:f9:bc:22:59:6a:98:4f:12:af:65:28:88:
                    a5:34:d3:5b:b5:b6:c1:f7:16:e8:b2:95:54:ba:78:
                    a9:ab:4b:ec:79:b4:68:a0:23:0b:4f:8b:d1:21:51:
                    03:0d:0c:d4:74:80:38:02:c3:8c:45:58:07:1b:13:
                    03:41:2b:f7:48:d3:d2:52:a5:a6:11:5e:a1:d7:bc:
                    25:a5:bf:df:01:9b:fd:db:5c:0c:fd:31:c6:42:a6:
                    53:a5:69:85:42:01:7d:a6:c1:a6:0c:db:ab:00:86:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3B:6E:2E:F3:2C:B6:4C:BF:31:28:0A:F9:94:E2:A8:99:63:6C:BB
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:6b:ce:22:0a:54:4c:cc:36:49:ac:d0:fe:24:eb:fe:d3:
         05:d8:41:ce:e3:90:47:59:8b:eb:9b:4c:b3:29:af:a8:57:08:
         b8:95:8b:bd:c6:7a:f3:d2:ac:5e:a8:e8:f5:07:76:bd:9f:19:
         6a:59:99:72:c7:0a:72:86:46:82:94:f0:9c:9b:87:5b:57:90:
         7c:af:db:84:ac:33:aa:88:59:35:c8:7a:02:34:5d:df:a5:b2:
         8e:78:e4:f4:f4:19:ed:c4:5f:a2:7a:94:6d:f4:82:1c:28:45:
         0f:aa:dd:99:15:e7:12:86:8d:c9:7b:bd:33:2b:8b:4e:18:81:
         63:62:c0:a3:d2:e6:95:28:76:fc:cb:8e:7c:fd:a7:a8:c9:d9:
         bb:a8:9e:b5:3c:03:99:40:27:41:6d:a1:01:8a:4a:29:96:4b:
         94:5d:2b:6b:02:d8:29:ca:31:ab:a2:64:96:9e:de:84:cd:27:
         29:29:e9:44:0d:05:e7:7e:5d:c1:6d:a9:5b:68:63:20:5c:8e:
         07:a7:f7:4f:bc:54:2d:49:41:4d:ea:e4:81:ce:67:d3:6c:c6:
         25:ca:c4:ff:bb:0f:a4:23:64:c8:ef:e3:37:4a:15:54:ac:c7:
         ef:f2:cc:73:99:08:63:0d:d2:bd:19:ed:29:28:ec:80:12:c9:
         ac:97:1f:78
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUb6qHUaAf8/H+qwHcFbMX52zDFcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCRjAzNjdCNTU5MTIxNzc3QTIxQTg0RDk1M0E3MTdE
NkU4MkFFQTAeFw0yNDA0MDQwNTE4MjRaFw0yNTA0MDMwNTIzMjRaMDMxMTAvBgNV
BAMTKDg3M0I2RTJFRjMyQ0I2NENCRjMxMjgwQUY5OTRFMkE4OTk2MzZDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7nbnAVJqLtwPdDtAOI+NRNzl
Mh3XL3MjNndk0BwrgLZTxMJOABCTP1IqYfLeHMZ7uLVh9lVjyctsGnEHMF/xHwbV
/bEWfhSncW+X0y9aMDsmTCPDhzEs+F6J5FwjY7sSGn5Z3snQUeNhvlvAq9NHhPPa
uoCL1obog3Cc8Vvkm6Drn3Fsf2d7a3w3nDi4k/vrBibAijuibPm8IllqmE8Sr2Uo
iKU001u1tsH3FuiylVS6eKmrS+x5tGigIwtPi9EhUQMNDNR0gDgCw4xFWAcbEwNB
K/dI09JSpaYRXqHXvCWlv98Bm/3bXAz9McZCplOlaYVCAX2mwaYM26sAhpgnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhztuLvMstky/MSgK+ZTiqJljbLswHwYDVR0j
BBgwFoAUuL8DZ7VZEhd3ohqE2VOnF9boKuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMS9COEJGMDM2N0I1NTkxMjE3NzdBMjFBODREOTUzQTcxN0Q2RTgyQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QkYwMzY3QjU1OTEyMTc3
N0EyMUE4NEQ5NTNBNzE3RDZFODJBRUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzEv
MzIzODMwMzQzYTMxMzQzNDMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMz
MzMzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUQDANBgkqhkiG9w0BAQsFAAOCAQEAa9trziIK
VEzMNkms0P4k6/7TBdhBzuOQR1mL65tMsymvqFcIuJWLvcZ689KsXqjo9Qd2vZ8Z
almZcscKcoZGgpTwnJuHW1eQfK/bhKwzqohZNch6AjRd36Wyjnjk9PQZ7cRfonqU
bfSCHChFD6rdmRXnEoaNyXu9MyuLThiBY2LAo9LmlSh2/MuOfP2nqMnZu6ietTwD
mUAnQW2hAYpKKZZLlF0rawLYKcoxq6Jklp7ehM0nKSnpRA0F535dwW2pW2hjIFyO
B6f3T7xULUlBTerkgc5n02zGJcrE/7sPpCNkyO/jN0oVVKzH7/LMc5kIYw3SvRnt
KSjsgBLJrJcfeA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:37 2024 by rpki-client on console-ams.rpki-client.org