Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/323830343a383331383a3a2f34382d3438203d3e20323732313736.roa
File:                     323830343a383331383a3a2f34382d3438203d3e20323732313736.roa (raw, json)
Hash identifier:          hWUc3EZG1OHUg7Kwveqx8Owcb4x2tOd6Tnq4xsP/5vg=
Subject key identifier:   11:7B:45:87:96:31:C9:79:BD:31:A4:27:E6:50:7A:8D:2F:F5:C0:4C
Certificate issuer:       /CN=5CB0D337B6247AB499A605FF2A3112EF674AC9FB
Certificate serial:       6B3E34DB39A2FB3967E5C9B755CC657507758737
Authority key identifier: 5C:B0:D3:37:B6:24:7A:B4:99:A6:05:FF:2A:31:12:EF:67:4A:C9:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/323830343a383331383a3a2f34382d3438203d3e20323732313736.roa
Signing time:             Thu 04 Apr 2024 19:16:51 +0000
ROA not before:           Thu 04 Apr 2024 19:11:51 +0000
ROA not after:            Thu 03 Apr 2025 19:16:51 +0000
asID:                     272176
IP address blocks:        2804:8318::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.crl
                          rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3e:34:db:39:a2:fb:39:67:e5:c9:b7:55:cc:65:75:07:75:87:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB0D337B6247AB499A605FF2A3112EF674AC9FB
        Validity
            Not Before: Apr  4 19:11:51 2024 GMT
            Not After : Apr  3 19:16:51 2025 GMT
        Subject: CN=117B45879631C979BD31A427E6507A8D2FF5C04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:62:c4:dc:43:f1:36:c1:37:88:7c:f1:d1:
                    5e:18:ae:5f:1b:0a:9b:78:91:90:2a:49:a9:70:e9:
                    77:5c:da:05:85:9e:a2:01:b2:ce:0e:1f:8c:80:27:
                    dd:69:8a:0b:c0:43:4f:34:4c:63:67:81:07:46:5b:
                    63:77:89:17:f8:f4:02:a4:9d:80:e3:b2:c5:6a:b7:
                    f6:d1:01:8b:b3:b8:9b:27:fe:d7:88:52:ed:cd:a3:
                    f9:87:be:f6:c6:19:d0:f4:b7:15:d0:d1:54:75:3e:
                    6a:6b:4d:e5:78:66:b0:64:6a:2b:6c:2f:1e:31:28:
                    f1:30:5b:3c:a1:d8:73:29:12:34:7a:d1:6c:7b:26:
                    95:f3:2c:9b:7e:11:9c:a2:e4:98:a3:5a:85:ae:19:
                    d1:10:0b:e6:c1:66:28:59:5c:ec:9a:78:5e:6a:66:
                    c0:c7:72:86:c2:43:44:5e:3c:a4:cb:e5:e6:6a:8a:
                    a8:2d:e0:72:5a:79:9d:8e:25:47:ef:84:da:e0:b7:
                    83:a8:1c:45:f4:bd:f5:7e:da:78:71:b5:4d:e7:d5:
                    00:82:de:ae:7f:9e:74:15:3d:7c:ed:f9:58:2d:e9:
                    49:c2:6b:05:7d:ca:75:ae:61:1a:05:98:20:5d:6f:
                    75:75:31:fd:3e:b0:b1:99:17:66:7e:c4:60:80:33:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7B:45:87:96:31:C9:79:BD:31:A4:27:E6:50:7A:8D:2F:F5:C0:4C
            X509v3 Authority Key Identifier:
                keyid:5C:B0:D3:37:B6:24:7A:B4:99:A6:05:FF:2A:31:12:EF:67:4A:C9:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/323830343a383331383a3a2f34382d3438203d3e20323732313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8318::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:53:fa:a9:fc:77:72:8c:37:7d:8e:7f:de:13:88:e4:6b:1e:
         e5:67:06:a1:bc:5f:0f:ed:ef:2a:19:69:4c:df:74:a4:00:cc:
         e9:61:69:fd:90:51:37:8f:27:1f:b4:a2:c8:5b:5e:19:ee:44:
         e9:1c:f9:9c:ec:53:37:8c:61:2b:17:e4:c3:de:dd:cb:b2:40:
         d8:e2:f4:46:f5:78:4e:91:ea:8f:4c:40:eb:de:70:60:51:01:
         ef:6b:f8:c1:88:40:84:51:02:6f:db:78:cb:7a:22:44:6c:21:
         0d:d0:6e:a6:1c:cc:87:87:1d:f9:54:5a:88:26:21:d9:a0:04:
         f9:df:19:ff:96:de:ee:02:a6:df:ce:7f:9a:68:86:7e:c7:4e:
         bc:e5:4e:e1:c4:95:43:2c:85:42:ca:18:c8:5f:3e:0f:c1:c4:
         25:ff:23:0c:06:8a:49:59:a3:34:72:cb:84:b4:33:a7:3b:38:
         69:1f:42:b4:19:96:16:68:f5:a7:01:a3:98:95:f3:9a:1d:57:
         43:28:5a:77:f1:97:37:00:ab:97:16:09:c9:57:dd:2b:24:56:
         e4:77:54:38:f1:c6:a3:7a:fd:6c:62:9c:2e:80:28:5b:bb:21:
         01:ac:93:b4:05:03:ac:d8:16:b3:da:45:0f:3c:0f:d2:cd:90:
         e8:84:2a:0d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUaz402zmi+zln5cm3VcxldQd1hzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNCMEQzMzdCNjI0N0FCNDk5QTYwNUZGMkEzMTEyRUY2
NzRBQzlGQjAeFw0yNDA0MDQxOTExNTFaFw0yNTA0MDMxOTE2NTFaMDMxMTAvBgNV
BAMTKDExN0I0NTg3OTYzMUM5NzlCRDMxQTQyN0U2NTA3QThEMkZGNUMwNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1WLE3EPxNsE3iHzx0V4Yrl8b
Cpt4kZAqSalw6Xdc2gWFnqIBss4OH4yAJ91pigvAQ080TGNngQdGW2N3iRf49AKk
nYDjssVqt/bRAYuzuJsn/teIUu3No/mHvvbGGdD0txXQ0VR1PmprTeV4ZrBkaits
Lx4xKPEwWzyh2HMpEjR60Wx7JpXzLJt+EZyi5JijWoWuGdEQC+bBZihZXOyaeF5q
ZsDHcobCQ0RePKTL5eZqiqgt4HJaeZ2OJUfvhNrgt4OoHEX0vfV+2nhxtU3n1QCC
3q5/nnQVPXzt+Vgt6UnCawV9ynWuYRoFmCBdb3V1Mf0+sLGZF2Z+xGCAM8U5AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUEXtFh5YxyXm9MaQn5lB6jS/1wEwwHwYDVR0j
BBgwFoAUXLDTN7YkerSZpgX/KjES72dKyfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZUVjZiaHY0cjZSSE1uaG5XQmNlc1NkNHNndDNybmd1OVZDcXRtZHFD
WTgvMS81Q0IwRDMzN0I2MjQ3QUI0OTlBNjA1RkYyQTMxMTJFRjY3NEFDOUZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDQjBEMzM3QjYyNDdBQjQ5
OUE2MDVGRjJBMzExMkVGNjc0QUM5RkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2VFY2Ymh2NHI2UkhNbmhuV0JjZXNTZDRzZ3Qzcm5ndTlWQ3F0bWRxQ1k4LzEv
MzIzODMwMzQzYTM4MzMzMTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMy
MzEzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKASDGAAAMA0GCSqGSIb3DQEBCwUAA4IBAQDUU/qp
/HdyjDd9jn/eE4jkax7lZwahvF8P7e8qGWlM33SkAMzpYWn9kFE3jycftKLIW14Z
7kTpHPmc7FM3jGErF+TD3t3LskDY4vRG9XhOkeqPTEDr3nBgUQHva/jBiECEUQJv
23jLeiJEbCEN0G6mHMyHhx35VFqIJiHZoAT53xn/lt7uAqbfzn+aaIZ+x0685U7h
xJVDLIVCyhjIXz4PwcQl/yMMBopJWaM0csuEtDOnOzhpH0K0GZYWaPWnAaOYlfOa
HVdDKFp38Zc3AKuXFgnJV90rJFbkd1Q48cajev1sYpwugChbuyEBrJO0BQOs2Baz
2kUPPA/SzZDohCoN
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:04:04 2024 by rpki-client on console-fra.rpki-client.org