Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/323830343a343730633a3a2f33322d3334203d3e20323637303238.roa
File:                     323830343a343730633a3a2f33322d3334203d3e20323637303238.roa (raw, json)
Hash identifier:          QABCtX18wK/6oGxNhBP3CqXDgrX2JlFpFO0wkMua2AU=
Subject key identifier:   6A:96:25:C5:52:B3:4E:F3:BA:C5:D5:85:FA:98:7B:E2:38:BF:B4:EB
Certificate issuer:       /CN=7651A842E34BF1A427ECE613831D697900FC14F9
Certificate serial:       27E31E2402E464BED4FA9186BEEC8B2202766FF6
Authority key identifier: 76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/323830343a343730633a3a2f33322d3334203d3e20323637303238.roa
Signing time:             Thu 04 Apr 2024 16:32:17 +0000
ROA not before:           Thu 04 Apr 2024 16:27:17 +0000
ROA not after:            Thu 03 Apr 2025 16:32:17 +0000
asID:                     267028
IP address blocks:        2804:470c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl
                          rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e3:1e:24:02:e4:64:be:d4:fa:91:86:be:ec:8b:22:02:76:6f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651A842E34BF1A427ECE613831D697900FC14F9
        Validity
            Not Before: Apr  4 16:27:17 2024 GMT
            Not After : Apr  3 16:32:17 2025 GMT
        Subject: CN=6A9625C552B34EF3BAC5D585FA987BE238BFB4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:4c:f9:10:08:dd:09:68:38:01:41:07:b0:
                    4b:75:86:80:dd:ae:73:6c:1a:8e:c9:32:d5:bb:df:
                    f3:9d:88:87:47:47:79:51:f4:08:be:c0:82:23:e5:
                    5f:f1:b1:45:eb:4d:64:ac:8a:dd:47:1c:7b:f4:31:
                    08:4d:d4:c6:4d:e2:9c:7b:89:4c:0b:24:47:44:2d:
                    6f:56:dd:76:66:5e:f9:3e:d5:d5:f4:15:8f:11:0e:
                    22:63:9a:3d:fb:40:ee:21:cc:85:bc:38:fa:5c:60:
                    fd:d8:4c:31:dc:6f:1e:bf:49:ef:ff:dd:bf:2a:11:
                    a6:28:c1:c8:ce:ab:4f:99:78:fb:76:a0:3d:ef:2b:
                    85:c7:3b:f1:fc:f0:ed:bd:2c:a9:90:c8:83:7b:f6:
                    63:23:ac:b7:1b:ef:82:7b:3b:ef:1c:3c:1a:0c:4b:
                    d7:b8:a0:b3:09:7c:dd:94:88:cd:60:0f:0e:58:ce:
                    10:bf:6c:16:e0:dc:11:a5:a2:6f:a9:d6:07:28:ba:
                    48:23:3a:dc:cc:d8:bf:1a:b1:2c:8c:47:0f:d8:9a:
                    bd:c5:48:64:f7:18:1a:2c:d5:c1:e6:f1:ef:4d:20:
                    76:88:64:4f:bf:96:8f:0f:d5:31:a2:c2:7f:35:c3:
                    e6:89:f7:ce:e5:6a:1e:21:d2:fe:eb:97:a8:cc:72:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:96:25:C5:52:B3:4E:F3:BA:C5:D5:85:FA:98:7B:E2:38:BF:B4:EB
            X509v3 Authority Key Identifier:
                keyid:76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/323830343a343730633a3a2f33322d3334203d3e20323637303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:470c::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:7a:5e:eb:e0:82:63:c7:12:d3:84:ff:6e:d6:d5:4a:ea:e7:
         8c:94:50:a1:ba:f9:0a:ef:74:f9:cb:ae:83:ac:ad:80:26:7a:
         66:a9:b5:72:a2:6a:fd:8a:cb:7e:55:ef:e1:b5:50:30:51:fd:
         4a:37:aa:28:41:84:32:11:0f:19:de:50:61:10:1a:3c:03:bf:
         09:6f:29:28:54:ca:42:7a:9b:e0:41:be:5f:c4:cf:b9:f1:39:
         ee:7d:a3:67:92:b4:2f:7a:50:ca:6a:18:14:93:9c:0a:5f:4a:
         fc:b4:df:b0:e4:52:8c:ad:35:2e:c9:df:2c:30:10:9b:53:fb:
         a7:f1:90:df:ad:5e:f4:f2:0f:a6:47:fd:fd:a1:e2:4a:88:2f:
         fa:07:74:d1:04:9e:3b:f3:cc:66:09:43:7b:bc:61:c7:df:c6:
         7b:e2:3b:d2:6c:3d:21:1b:aa:bb:65:12:ac:37:13:43:b6:11:
         f6:21:f6:69:8e:00:df:dc:17:07:60:74:06:0e:ca:30:f8:1b:
         7e:39:d1:cc:ec:76:b4:55:9a:01:67:84:dc:91:65:ed:b4:87:
         9e:b6:e9:f4:0a:fb:ca:6b:21:09:63:a9:df:1c:b5:05:08:31:
         5a:7b:24:1b:55:6d:aa:13:fc:9e:03:fb:94:3c:92:4b:e5:14:
         3d:40:0f:5d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ+MeJALkZL7U+pGGvuyLIgJ2b/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1MUE4NDJFMzRCRjFBNDI3RUNFNjEzODMxRDY5Nzkw
MEZDMTRGOTAeFw0yNDA0MDQxNjI3MTdaFw0yNTA0MDMxNjMyMTdaMDMxMTAvBgNV
BAMTKDZBOTYyNUM1NTJCMzRFRjNCQUM1RDU4NUZBOTg3QkUyMzhCRkI0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EEz5EAjdCWg4AUEHsEt1hoDd
rnNsGo7JMtW73/OdiIdHR3lR9Ai+wIIj5V/xsUXrTWSsit1HHHv0MQhN1MZN4px7
iUwLJEdELW9W3XZmXvk+1dX0FY8RDiJjmj37QO4hzIW8OPpcYP3YTDHcbx6/Se//
3b8qEaYowcjOq0+ZePt2oD3vK4XHO/H88O29LKmQyIN79mMjrLcb74J7O+8cPBoM
S9e4oLMJfN2UiM1gDw5YzhC/bBbg3BGlom+p1gcoukgjOtzM2L8asSyMRw/Ymr3F
SGT3GBos1cHm8e9NIHaIZE+/lo8P1TGiwn81w+aJ987lah4h0v7rl6jMckSXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUapYlxVKzTvO6xdWF+ph74ji/tOswHwYDVR0j
BBgwFoAUdlGoQuNL8aQn7OYTgx1peQD8FPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1ZkamRtYXB0MkdSVnVhVG8xZGdYcUtGQk42aHNScXB3V1I1bXdFVGFz
YUIvMS83NjUxQTg0MkUzNEJGMUE0MjdFQ0U2MTM4MzFENjk3OTAwRkMxNEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NTFBODQyRTM0QkYxQTQy
N0VDRTYxMzgzMUQ2OTc5MDBGQzE0RjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWZGpkbWFwdDJHUlZ1YVRvMWRnWHFLRkJONmhzUnFwd1dSNW13RVRhc2FCLzEv
MzIzODMwMzQzYTM0MzczMDYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM3
MzAzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHDDANBgkqhkiG9w0BAQsFAAOCAQEAdXpe6+CC
Y8cS04T/btbVSurnjJRQobr5Cu90+cuug6ytgCZ6Zqm1cqJq/YrLflXv4bVQMFH9
SjeqKEGEMhEPGd5QYRAaPAO/CW8pKFTKQnqb4EG+X8TPufE57n2jZ5K0L3pQymoY
FJOcCl9K/LTfsORSjK01LsnfLDAQm1P7p/GQ361e9PIPpkf9/aHiSogv+gd00QSe
O/PMZglDe7xhx9/Ge+I70mw9IRuqu2USrDcTQ7YR9iH2aY4A39wXB2B0Bg7KMPgb
fjnRzOx2tFWaAWeE3JFl7bSHnrbp9Ar7ymshCWOp3xy1BQgxWnskG1VtqhP8ngP7
lDySS+UUPUAPXQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:28 2024 by rpki-client on console-fra.rpki-client.org