Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          NlQx1E7pNi0Ty99co6KQ8P/HR+muNiu0h3DNKgBrPBA=
Subject key identifier:   E4:C2:71:59:20:EE:67:D0:46:D4:AB:76:D6:5E:82:AF:09:EE:AC:1D
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       1617C2840D6DCC4E3F91B887EF9E3307F9FB8E74
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:01 +0000
ROA not before:           Thu 04 Apr 2024 08:37:01 +0000
ROA not after:            Thu 03 Apr 2025 08:42:01 +0000
asID:                     268296
IP address blocks:        2804:4efc:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:17:c2:84:0d:6d:cc:4e:3f:91:b8:87:ef:9e:33:07:f9:fb:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:01 2024 GMT
            Not After : Apr  3 08:42:01 2025 GMT
        Subject: CN=E4C2715920EE67D046D4AB76D65E82AF09EEAC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:69:55:f6:ea:79:6c:68:f5:a7:b7:a8:b2:
                    6b:e1:0c:bb:ae:95:51:bc:75:30:8c:fc:57:89:65:
                    6f:15:61:72:25:05:bd:4a:f8:72:60:ea:5b:13:51:
                    a0:76:22:a9:44:7c:d4:f6:29:e5:44:98:56:bc:4c:
                    a3:10:b3:5a:cc:a7:6a:80:e0:f2:6f:48:27:85:56:
                    fb:3f:07:16:a7:70:ed:2d:c8:c7:c7:6f:14:82:87:
                    1d:bc:55:5d:c4:dd:90:43:d4:99:01:b9:0a:40:aa:
                    cc:68:62:63:9b:5e:d3:85:e8:1b:d0:45:7b:54:1f:
                    1c:3d:ba:9f:5d:d1:97:d9:56:14:56:6a:f6:ed:b0:
                    e0:53:2e:69:71:56:98:eb:b0:a5:77:0a:97:83:2c:
                    fd:00:f3:f4:e7:bc:41:cf:3c:9b:56:23:c2:69:69:
                    a2:87:ad:29:a4:bf:3c:2c:66:15:61:91:75:6c:38:
                    32:40:9b:01:23:46:c7:ff:6f:03:01:98:49:13:57:
                    78:ca:73:15:43:1a:84:3b:a9:ff:68:bf:3b:73:e1:
                    ac:e9:64:fb:12:6b:2d:5e:64:86:a1:6e:a7:90:db:
                    2b:a8:24:d2:f5:7c:25:88:ca:a1:59:18:0e:84:b2:
                    72:1f:a5:db:43:1f:03:77:89:90:58:53:1a:4e:91:
                    4b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:71:59:20:EE:67:D0:46:D4:AB:76:D6:5E:82:AF:09:EE:AC:1D
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:31:c3:b4:8e:5a:35:51:a6:ba:45:c3:32:b8:7f:8b:33:
         9d:41:c7:b0:8d:2a:dc:13:85:cd:8d:21:58:ff:c5:ef:a4:17:
         82:6e:0b:b4:fc:48:0e:ee:13:58:97:08:7e:7c:bc:75:08:09:
         d3:99:0a:1a:01:e4:b5:c1:9f:77:22:b2:f3:f5:0e:85:c5:8b:
         05:62:70:b9:de:45:2b:23:7d:3d:58:e2:7b:fc:22:47:b2:4a:
         8b:6a:ac:1a:68:4f:ed:fd:eb:93:6c:f2:6f:e7:d2:77:81:38:
         25:af:46:83:5a:bd:be:cc:04:2c:44:37:5d:51:e4:e8:4b:ab:
         16:dd:51:96:bc:dc:49:39:72:1a:6a:85:ae:6e:6f:3d:7f:86:
         8c:51:6d:71:30:29:e6:77:8e:4a:e1:29:e0:07:41:46:59:20:
         51:2a:54:16:07:16:fe:88:8e:3a:2a:e5:52:db:89:59:8b:ce:
         34:7d:e9:3d:6c:65:7c:66:92:56:0c:5c:e1:ce:61:dd:2a:60:
         da:a1:70:f9:c0:7a:0f:9d:61:53:83:d9:ca:da:3b:21:cd:29:
         94:c6:ee:7f:90:83:c9:6f:73:da:ac:b7:e0:dc:28:a3:a6:5a:
         3d:d4:5b:2a:4f:8e:0e:3e:a9:1c:92:bb:05:a9:91:c6:04:08:
         5f:3d:2e:e4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFhfChA1tzE4/kbiH754zB/n7jnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCQjQwODAzNEQ4NkFCNDExQzhDOEI1RTVGQTk2Nzgw
RDBDNTQ2NjAeFw0yNDA0MDQwODM3MDFaFw0yNTA0MDMwODQyMDFaMDMxMTAvBgNV
BAMTKEU0QzI3MTU5MjBFRTY3RDA0NkQ0QUI3NkQ2NUU4MkFGMDlFRUFDMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vWlV9up5bGj1p7eosmvhDLuu
lVG8dTCM/FeJZW8VYXIlBb1K+HJg6lsTUaB2IqlEfNT2KeVEmFa8TKMQs1rMp2qA
4PJvSCeFVvs/BxancO0tyMfHbxSChx28VV3E3ZBD1JkBuQpAqsxoYmObXtOF6BvQ
RXtUHxw9up9d0ZfZVhRWavbtsOBTLmlxVpjrsKV3CpeDLP0A8/TnvEHPPJtWI8Jp
aaKHrSmkvzwsZhVhkXVsODJAmwEjRsf/bwMBmEkTV3jKcxVDGoQ7qf9ovztz4azp
ZPsSay1eZIahbqeQ2yuoJNL1fCWIyqFZGA6EsnIfpdtDHwN3iZBYUxpOkUsrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5MJxWSDuZ9BG1Kt21l6CrwnurB0wHwYDVR0j
BBgwFoAUb7tAgDTYarQRyMi15fqWeA0MVGYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMS82RkJCNDA4MDM0RDg2QUI0MTFDOEM4QjVFNUZBOTY3ODBEMEM1NDY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGQkI0MDgwMzREODZBQjQx
MUM4QzhCNUU1RkE5Njc4MEQwQzU0NjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzEv
MzIzODMwMzQzYTM0NjU2NjYzM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAqMzHDtI5aNVGmukXDMrh/izOdQcewjSrcE4XNjSFY/8XvpBeCbgu0/EgO
7hNYlwh+fLx1CAnTmQoaAeS1wZ93IrLz9Q6FxYsFYnC53kUrI309WOJ7/CJHskqL
aqwaaE/t/euTbPJv59J3gTglr0aDWr2+zAQsRDddUeToS6sW3VGWvNxJOXIaaoWu
bm89f4aMUW1xMCnmd45K4SngB0FGWSBRKlQWBxb+iI46KuVS24lZi840fek9bGV8
ZpJWDFzhzmHdKmDaoXD5wHoPnWFTg9nK2jshzSmUxu5/kIPJb3ParLfg3Cijplo9
1FsqT44OPqkckrsFqZHGBAhfPS7k
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:05 2024 by rpki-client on console-ams.rpki-client.org