Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa
File:                     323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa (raw, json)
Hash identifier:          pfahADdCN+IcX4jZMx2cIC4GsfQygS6fU/8rQhZoEhY=
Subject key identifier:   36:FC:B3:2D:1E:84:AE:9B:58:04:CE:21:49:E2:AE:75:F6:2E:D5:E8
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       181B3098A5C1EEEB7FC050922CB545BFB74C8EB2
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa
Signing time:             Wed 03 Apr 2024 21:27:54 +0000
ROA not before:           Wed 03 Apr 2024 21:22:54 +0000
ROA not after:            Wed 02 Apr 2025 21:27:54 +0000
asID:                     61951
IP address blocks:        2804:18c0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1b:30:98:a5:c1:ee:eb:7f:c0:50:92:2c:b5:45:bf:b7:4c:8e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Apr  3 21:22:54 2024 GMT
            Not After : Apr  2 21:27:54 2025 GMT
        Subject: CN=36FCB32D1E84AE9B5804CE2149E2AE75F62ED5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:4b:5f:9d:1c:13:86:ba:7b:e9:99:f0:4a:
                    24:3d:88:ab:df:aa:75:d6:8f:f5:c9:28:b2:f8:f7:
                    d7:63:82:ab:4d:db:b3:a2:a1:f0:1d:2f:8a:9b:08:
                    5e:b5:00:88:d1:3b:78:b3:d4:7b:63:8e:9b:2b:6f:
                    c2:86:6c:c5:4f:20:53:83:91:86:1c:1a:c4:b6:cb:
                    4c:86:c3:5b:07:7d:d8:58:4d:31:57:47:65:35:11:
                    e0:2d:f6:7c:26:5e:0d:75:ef:21:e0:4b:cb:50:9a:
                    1b:f6:8c:36:fb:ce:99:2b:5f:ff:7f:3b:e0:50:5c:
                    b1:5c:31:11:40:fe:4e:79:bf:4b:01:01:d9:3d:7f:
                    12:2f:d8:38:2c:b8:2e:33:c2:d5:ba:7e:a7:32:66:
                    b6:30:0a:18:6b:29:79:aa:f2:8b:fe:fd:66:32:b3:
                    24:8a:e4:8e:c4:6f:e2:34:d0:0e:2e:69:5d:fb:f7:
                    c3:b1:25:b2:10:c2:1f:f3:fc:9f:38:41:47:78:ed:
                    03:f4:d1:9a:d3:5b:e3:83:f2:72:da:d0:47:ba:5b:
                    e5:00:12:93:6d:46:b8:88:f9:e6:dd:c6:df:8e:90:
                    bd:14:7b:f6:d2:1f:b2:d1:bb:26:12:9f:f6:91:c8:
                    92:aa:8a:c4:fa:9d:8c:84:8a:fe:8a:7a:c0:45:51:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FC:B3:2D:1E:84:AE:9B:58:04:CE:21:49:E2:AE:75:F6:2E:D5:E8
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:cc:b4:a0:04:4e:92:76:46:53:fd:07:87:db:1f:ac:ef:
         71:c6:5a:f5:f6:dd:57:de:14:24:d9:8a:f6:44:e1:3c:bf:af:
         2e:37:a2:90:20:ee:8e:67:f5:9e:6f:5c:51:ca:86:ca:48:67:
         d0:a7:66:f1:d7:e8:39:d6:83:5a:4c:b8:2f:d3:79:cd:59:a6:
         09:2b:6b:17:45:50:3f:3b:32:44:23:4a:83:3e:a9:df:dd:e9:
         fa:41:de:2e:d7:a8:be:41:d5:c2:a7:82:ed:39:b1:82:ae:f1:
         a6:a3:98:10:1d:fe:dd:20:e4:90:17:75:cf:59:e5:34:c8:2f:
         04:40:16:aa:e1:46:f0:6c:7e:94:22:d4:50:d2:d1:26:46:6c:
         ea:69:2d:54:97:6b:44:30:f2:50:75:c9:f8:f2:33:c6:c9:23:
         d7:96:33:ec:df:c5:b8:ac:84:d5:2a:de:44:4f:d2:0e:f3:08:
         bd:72:1e:84:25:cb:67:d2:27:30:01:f3:c4:bd:45:17:25:2f:
         9f:64:b4:41:5a:be:ba:e0:02:9b:0e:08:16:1a:22:fc:d3:0b:
         38:fc:53:c4:9c:8d:11:90:02:37:ff:d0:b6:95:5f:31:47:64:
         92:bf:7f:88:76:a6:ec:bd:9e:b4:a0:0e:ef:c4:57:b8:cb:f7:
         ed:87:44:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGBswmKXB7ut/wFCSLLVFv7dMjrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5ODY0NDJBQjYzMEU5QkE0OTgwQTJGOUVGMjAxMzAz
M0VGOUMxNzAeFw0yNDA0MDMyMTIyNTRaFw0yNTA0MDIyMTI3NTRaMDMxMTAvBgNV
BAMTKDM2RkNCMzJEMUU4NEFFOUI1ODA0Q0UyMTQ5RTJBRTc1RjYyRUQ1RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvktfnRwThrp76ZnwSiQ9iKvf
qnXWj/XJKLL499djgqtN27OiofAdL4qbCF61AIjRO3iz1Htjjpsrb8KGbMVPIFOD
kYYcGsS2y0yGw1sHfdhYTTFXR2U1EeAt9nwmXg117yHgS8tQmhv2jDb7zpkrX/9/
O+BQXLFcMRFA/k55v0sBAdk9fxIv2DgsuC4zwtW6fqcyZrYwChhrKXmq8ov+/WYy
sySK5I7Eb+I00A4uaV3798OxJbIQwh/z/J84QUd47QP00ZrTW+OD8nLa0Ee6W+UA
EpNtRriI+ebdxt+OkL0Ue/bSH7LRuyYSn/aRyJKqisT6nYyEiv6KesBFUZ01AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNvyzLR6ErptYBM4hSeKudfYu1egwHwYDVR0j
BBgwFoAU05hkQqtjDpukmAovnvIBMDPvnBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZMdVhQeXlNRE1wUHIxc0JXWkZKNFJ2NVB5YmJEVzZpU05jRjNlSmhK
OE4vMS9EMzk4NjQ0MkFCNjMwRTlCQTQ5ODBBMkY5RUYyMDEzMDMzRUY5QzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOTg2NDQyQUI2MzBFOUJB
NDk4MEEyRjlFRjIwMTMwMzNFRjlDMTcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2THVYUHl5TURNcFByMXNCV1pGSjRSdjVQeWJiRFc2aVNOY0YzZUpoSjhOLzEv
MzIzODMwMzQzYTMxMzg2MzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBjAQDANBgkqhkiG9w0BAQsFAAOC
AQEAP37MtKAETpJ2RlP9B4fbH6zvccZa9fbdV94UJNmK9kThPL+vLjeikCDujmf1
nm9cUcqGykhn0Kdm8dfoOdaDWky4L9N5zVmmCStrF0VQPzsyRCNKgz6p393p+kHe
LteovkHVwqeC7Tmxgq7xpqOYEB3+3SDkkBd1z1nlNMgvBEAWquFG8Gx+lCLUUNLR
JkZs6mktVJdrRDDyUHXJ+PIzxskj15Yz7N/FuKyE1SreRE/SDvMIvXIehCXLZ9In
MAHzxL1FFyUvn2S0QVq+uuACmw4IFhoi/NMLOPxTxJyNEZACN//QtpVfMUdkkr9/
iHam7L2etKAO78RXuMv37YdEtQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org