Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a633030303a3a2f33342d3334203d3e203631373238.roa
File:                     323830343a316237303a633030303a3a2f33342d3334203d3e203631373238.roa (raw, json)
Hash identifier:          EYjA/hKNyRbzD/qUGcEYbh84gObGZGFkGV7nlNy6mFc=
Subject key identifier:   F0:B5:BC:1E:40:E1:F4:B1:BC:2E:9F:B7:4B:DB:85:12:A6:F7:27:91
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       18A6A57238348AE38D799528444D16DE428F5F99
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a633030303a3a2f33342d3334203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:50 +0000
ROA not before:           Thu 16 May 2024 21:04:50 +0000
ROA not after:            Thu 15 May 2025 21:09:50 +0000
asID:                     61728
IP address blocks:        2804:1b70:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a6:a5:72:38:34:8a:e3:8d:79:95:28:44:4d:16:de:42:8f:5f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:50 2024 GMT
            Not After : May 15 21:09:50 2025 GMT
        Subject: CN=F0B5BC1E40E1F4B1BC2E9FB74BDB8512A6F72791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:59:6a:53:eb:fc:56:a7:71:d5:af:73:09:
                    8d:d7:f4:70:f1:52:ab:6a:81:ae:00:fb:d0:8f:9c:
                    ab:a0:3e:6b:94:d8:51:74:60:d2:48:e8:da:08:36:
                    69:e7:d5:64:c9:48:20:0f:aa:00:0d:15:90:b2:db:
                    27:1e:95:95:dc:91:28:e5:ff:a8:03:dc:02:c2:e2:
                    b9:75:e9:e8:12:49:55:ff:25:23:79:34:5a:31:f5:
                    3d:df:3e:16:6c:e7:26:ca:aa:9d:4d:e4:53:d1:46:
                    8a:5d:a2:f1:9c:18:4e:0d:b1:7f:e0:17:07:ee:d7:
                    ee:7d:9e:67:43:25:d7:98:a7:e4:ba:55:9b:a1:7e:
                    e7:3e:32:fa:54:50:1a:42:79:71:8d:0f:56:8e:4b:
                    4d:96:52:68:10:8f:cc:ec:20:a8:bb:73:c0:6a:8e:
                    7f:d2:00:e7:85:16:0d:bf:36:68:a8:10:35:fe:ad:
                    30:87:ce:08:d9:2f:5b:c3:7d:e1:dc:c5:72:97:fa:
                    3d:37:a8:31:15:42:c6:87:f1:f8:09:df:79:8e:15:
                    2b:96:f1:63:9a:19:3a:05:0d:bc:07:04:28:6a:b1:
                    81:9c:a7:43:6b:3c:14:df:a1:b9:86:b1:f8:f6:96:
                    17:92:dc:52:09:5b:c8:96:ee:a7:69:ca:14:25:9b:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B5:BC:1E:40:E1:F4:B1:BC:2E:9F:B7:4B:DB:85:12:A6:F7:27:91
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a633030303a3a2f33342d3334203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b70:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:db:e8:07:45:b2:42:1b:ad:b9:5e:0c:85:eb:87:4d:c6:
         54:3c:0f:0a:42:b5:58:fa:c1:85:de:8d:5a:8c:7e:6d:89:c7:
         a1:b5:26:8a:c9:1a:ed:cc:f5:7a:29:1c:fe:29:5b:47:9b:77:
         11:d6:d5:d9:b5:67:97:01:a9:6a:53:50:60:53:72:03:78:ac:
         67:cb:c0:81:c2:44:a7:d3:9a:dd:ea:c2:84:4d:79:51:a4:19:
         61:35:7e:75:97:e9:3c:0b:88:47:ab:9e:5a:a7:f4:1d:6c:aa:
         b6:8d:c0:b1:9c:22:cb:45:2e:d2:e1:7e:b0:b0:d2:16:00:83:
         4d:db:c9:e5:8f:de:b3:81:af:2f:e9:55:95:90:96:63:e8:c1:
         da:51:bc:95:d9:f9:04:82:dc:f9:c9:bf:87:7a:94:5c:bc:d7:
         88:7d:9f:1d:54:35:48:a4:79:bd:9e:e1:da:6a:93:7d:02:2e:
         97:fc:ca:25:dd:96:a6:d1:8d:bd:86:cc:92:3b:13:4a:23:25:
         70:e4:f7:d5:ad:b9:ec:7a:4d:40:8c:9f:c6:68:96:5f:48:fa:
         96:76:be:71:5f:49:25:28:66:24:8c:8c:f0:3f:4b:21:a1:02:
         8b:43:86:e4:46:24:e8:ba:3f:1d:bd:b0:72:d9:70:4b:06:5c:
         b8:6b:e2:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGKalcjg0iuONeZUoRE0W3kKPX5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEwNjVENkFCRkVCMzAwRDJDNDIzODRGRTM1Q0JGNUYz
OUQwNUYxMzAeFw0yNDA1MTYyMTA0NTBaFw0yNTA1MTUyMTA5NTBaMDMxMTAvBgNV
BAMTKEYwQjVCQzFFNDBFMUY0QjFCQzJFOUZCNzRCREI4NTEyQTZGNzI3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDek1lqU+v8Vqdx1a9zCY3X9HDx
Uqtqga4A+9CPnKugPmuU2FF0YNJI6NoINmnn1WTJSCAPqgANFZCy2ycelZXckSjl
/6gD3ALC4rl16egSSVX/JSN5NFox9T3fPhZs5ybKqp1N5FPRRopdovGcGE4NsX/g
Fwfu1+59nmdDJdeYp+S6VZuhfuc+MvpUUBpCeXGND1aOS02WUmgQj8zsIKi7c8Bq
jn/SAOeFFg2/NmioEDX+rTCHzgjZL1vDfeHcxXKX+j03qDEVQsaH8fgJ33mOFSuW
8WOaGToFDbwHBChqsYGcp0NrPBTfobmGsfj2lheS3FIJW8iW7qdpyhQlmxhLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8LW8HkDh9LG8Lp+3S9uFEqb3J5EwHwYDVR0j
BBgwFoAU2gZdar/rMA0sQjhP41y/XznQXxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRuNmtTZkpaSHU0ekJieHNRQkxCMmQ4QmY3cUx6cHBjRzlBM2RSWXdv
MUEvMC9EQTA2NUQ2QUJGRUIzMDBEMkM0MjM4NEZFMzVDQkY1RjM5RDA1RjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMDY1RDZBQkZFQjMwMEQy
QzQyMzg0RkUzNUNCRjVGMzlEMDVGMTMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkbjZrU2ZKWkh1NHpCYnhzUUJMQjJkOEJmN3FMenBwY0c5QTNkUll3bzFBLzAv
MzIzODMwMzQzYTMxNjIzNzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNzMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBtwwDANBgkqhkiG9w0BAQsFAAOC
AQEAReTb6AdFskIbrbleDIXrh03GVDwPCkK1WPrBhd6NWox+bYnHobUmiska7cz1
eikc/ilbR5t3EdbV2bVnlwGpalNQYFNyA3isZ8vAgcJEp9Oa3erChE15UaQZYTV+
dZfpPAuIR6ueWqf0HWyqto3AsZwiy0Uu0uF+sLDSFgCDTdvJ5Y/es4GvL+lVlZCW
Y+jB2lG8ldn5BILc+cm/h3qUXLzXiH2fHVQ1SKR5vZ7h2mqTfQIul/zKJd2WptGN
vYbMkjsTSiMlcOT31a257HpNQIyfxmiWX0j6lna+cV9JJShmJIyM8D9LIaECi0OG
5EYk6Lo/Hb2wctlwSwZcuGviRA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org