Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa
File:                     323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier:          mum7iPnAOISHy/tCwyOP6AVvsV/VH+9C2uqKDufrG9Y=
Subject key identifier:   EF:37:29:FE:8F:CB:94:BD:0E:01:64:A4:C5:9B:9E:92:0A:5F:2D:9A
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       74B0FD5B3DDAC25559BD7A41EB0F79D98574B30E
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:54 +0000
ROA not before:           Wed 03 Apr 2024 20:38:54 +0000
ROA not after:            Wed 02 Apr 2025 20:43:54 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b0:fd:5b:3d:da:c2:55:59:bd:7a:41:eb:0f:79:d9:85:74:b3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:54 2024 GMT
            Not After : Apr  2 20:43:54 2025 GMT
        Subject: CN=EF3729FE8FCB94BD0E0164A4C59B9E920A5F2D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:51:e6:d8:ed:a1:34:58:da:28:8c:5f:23:
                    e4:26:9c:d6:62:90:f3:a9:5f:df:ff:28:69:1b:a0:
                    2a:85:37:95:48:da:85:3f:f0:96:d4:5e:b4:f0:5a:
                    64:a4:19:38:5b:51:f9:c0:b3:7e:bf:34:97:08:36:
                    c9:c9:2c:9d:3e:15:c5:be:03:38:ff:3b:1b:29:ad:
                    83:6d:a0:7f:e8:6e:f8:8f:d6:e1:c1:eb:c4:ec:65:
                    df:6d:4d:ad:a6:ef:dc:c0:79:c5:e1:48:6e:d1:b3:
                    0b:6a:d8:4a:07:8a:af:3b:10:d5:c9:47:d6:c4:06:
                    a3:33:82:68:ec:e9:2a:cd:9c:30:00:01:72:f0:9c:
                    6b:34:8c:97:27:c9:e0:32:08:d3:9a:c7:6e:51:10:
                    a9:ab:20:0d:d6:c7:21:00:ab:8a:d5:5b:16:94:74:
                    88:cd:fb:5f:2e:02:57:fc:8b:bb:40:29:ec:c9:67:
                    b5:57:92:e1:e5:90:43:27:58:fe:0f:1b:71:cf:c9:
                    15:e5:1b:a9:84:fb:60:b1:25:ee:75:0b:c6:c1:88:
                    97:43:d5:69:15:e1:63:0c:7b:17:1f:e3:90:8c:c6:
                    5c:0a:78:81:23:01:34:61:3f:d2:84:be:b2:ab:e7:
                    59:17:55:d4:fc:0d:6b:47:ac:3a:97:54:8c:ca:82:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:37:29:FE:8F:CB:94:BD:0E:01:64:A4:C5:9B:9E:92:0A:5F:2D:9A
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:01:0e:c2:e0:e5:8a:a2:29:8d:b2:c0:9e:8d:af:2d:d2:bd:
         2c:66:59:e2:35:bb:c9:8e:4b:cd:03:b7:c0:7b:e7:c6:55:25:
         3c:01:7a:e4:2f:6c:8a:a3:44:21:27:05:55:24:b3:86:8f:2f:
         a3:f4:58:af:fa:93:66:a3:4e:65:81:77:7d:f8:e6:7c:a8:8d:
         e0:55:af:c3:d0:4c:a9:e5:6f:aa:6d:27:99:54:b4:06:e3:b5:
         a7:b7:c3:aa:0d:0e:6c:d2:da:3c:f7:fd:d5:a0:5d:b0:02:de:
         c4:48:01:a6:08:54:64:4a:11:c9:4f:b7:99:0c:94:a7:19:89:
         cb:b5:1b:98:ea:21:89:cd:e9:e7:fb:4d:af:d9:78:f9:0d:e1:
         94:8c:ef:6d:5e:e8:10:79:31:8e:43:eb:f6:23:e5:4a:4d:41:
         67:9e:cb:de:64:4d:07:8a:2f:98:3a:d3:4e:98:50:a8:f3:b3:
         b6:9e:a1:ab:98:3f:5d:0e:97:f6:e5:3c:de:1f:12:85:76:82:
         80:4b:c9:63:36:95:46:35:6e:7e:f6:66:60:bf:fc:1c:af:55:
         61:e5:a2:de:12:ee:37:49:1d:76:49:c5:1c:62:33:59:ea:e9:
         d8:b8:08:43:f0:72:8e:b9:de:cc:6c:35:e6:03:38:de:fc:e4:
         31:60:ac:f0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdLD9Wz3awlVZvXpB6w952YV0sw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZENDMzMjlFMzk4NjAxNjM3MzMzNkY0REM3MTUzNURE
RERBQTMzODAeFw0yNDA0MDMyMDM4NTRaFw0yNTA0MDIyMDQzNTRaMDMxMTAvBgNV
BAMTKEVGMzcyOUZFOEZDQjk0QkQwRTAxNjRBNEM1OUI5RTkyMEE1RjJEOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQlHm2O2hNFjaKIxfI+QmnNZi
kPOpX9//KGkboCqFN5VI2oU/8JbUXrTwWmSkGThbUfnAs36/NJcINsnJLJ0+FcW+
Azj/OxsprYNtoH/obviP1uHB68TsZd9tTa2m79zAecXhSG7Rswtq2EoHiq87ENXJ
R9bEBqMzgmjs6SrNnDAAAXLwnGs0jJcnyeAyCNOax25REKmrIA3WxyEAq4rVWxaU
dIjN+18uAlf8i7tAKezJZ7VXkuHlkEMnWP4PG3HPyRXlG6mE+2CxJe51C8bBiJdD
1WkV4WMMexcf45CMxlwKeIEjATRhP9KEvrKr51kXVdT8DWtHrDqXVIzKgpxZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7zcp/o/LlL0OAWSkxZuekgpfLZowHwYDVR0j
BBgwFoAUj9QzKeOYYBY3Mzb03HFTXd3aozgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMS84RkQ0MzMyOUUzOTg2MDE2MzczMzM2RjREQzcxNTM1REREREFBMzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGRDQzMzI5RTM5ODYwMTYz
NzMzMzZGNERDNzE1MzVEREREQUEzMzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzEv
MzIzODMwMzQzYTM1NjIzOTYzM2EzNDMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM4MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEW5xDMA0GCSqGSIb3DQEBCwUA
A4IBAQB2AQ7C4OWKoimNssCeja8t0r0sZlniNbvJjkvNA7fAe+fGVSU8AXrkL2yK
o0QhJwVVJLOGjy+j9Fiv+pNmo05lgXd9+OZ8qI3gVa/D0Eyp5W+qbSeZVLQG47Wn
t8OqDQ5s0to89/3VoF2wAt7ESAGmCFRkShHJT7eZDJSnGYnLtRuY6iGJzenn+02v
2Xj5DeGUjO9tXugQeTGOQ+v2I+VKTUFnnsveZE0Hii+YOtNOmFCo87O2nqGrmD9d
Dpf25TzeHxKFdoKAS8ljNpVGNW5+9mZgv/wcr1Vh5aLeEu43SR12ScUcYjNZ6unY
uAhD8HKOud7MbDXmAzje/OQxYKzw
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:22 2024 by rpki-client on console-ams.rpki-client.org