Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa
File:                     323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa (raw, json)
Hash identifier:          zWRRTx7hHOUZbywKm5yDWHoiVBQlwEWRIzjKGtnHV84=
Subject key identifier:   65:C9:9A:DE:45:50:57:10:E8:31:C5:47:27:D2:BD:D0:25:15:A1:73
Certificate issuer:       /CN=D6816262B9EC51281AB7A20B7EE9D1462396264F
Certificate serial:       6E97E07C97644A14914B7ADFC066BF9DD06D2758
Authority key identifier: D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa
Signing time:             Thu 04 Apr 2024 23:23:54 +0000
ROA not before:           Thu 04 Apr 2024 23:18:54 +0000
ROA not after:            Thu 03 Apr 2025 23:23:54 +0000
asID:                     266040
IP address blocks:        2804:39a0:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.crl
                          rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:e0:7c:97:64:4a:14:91:4b:7a:df:c0:66:bf:9d:d0:6d:27:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6816262B9EC51281AB7A20B7EE9D1462396264F
        Validity
            Not Before: Apr  4 23:18:54 2024 GMT
            Not After : Apr  3 23:23:54 2025 GMT
        Subject: CN=65C99ADE45505710E831C54727D2BDD02515A173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:32:9c:af:6f:6c:f0:bd:fd:f1:6d:57:5f:
                    77:e7:ce:cf:b4:29:8d:b2:89:34:7b:39:ce:d7:e9:
                    05:0e:be:39:ed:37:78:7c:2f:e0:de:9f:62:39:0a:
                    74:3f:21:30:af:c1:96:0c:3f:09:ce:ad:16:99:99:
                    32:f4:11:f3:c1:4c:23:ca:ff:09:88:ba:4e:2d:42:
                    b6:de:1d:4a:40:c7:20:ec:c5:64:5a:fc:5e:b1:3b:
                    11:de:e2:2b:a1:b6:eb:03:88:6e:a8:78:43:70:fa:
                    31:25:a0:87:15:af:3c:b4:8d:e0:99:97:4d:76:a5:
                    62:63:68:b8:98:b9:68:67:a3:2a:a6:bc:a5:ce:b3:
                    e3:c6:d4:80:30:97:92:5c:98:2f:5b:fd:8e:b0:0d:
                    a1:24:e4:2a:d6:02:f6:f8:c8:31:86:f3:92:6e:e3:
                    58:5f:ab:3d:67:b9:b9:10:f3:3c:cd:88:de:59:c3:
                    28:f0:b3:c7:dc:8f:0a:d6:e4:c8:fb:5d:86:9e:2a:
                    c8:d9:a4:a4:c6:a3:c3:68:ba:49:c4:c2:e8:56:c0:
                    ed:82:a0:7f:65:55:30:bb:63:c8:a6:4a:f4:3a:7d:
                    36:67:0b:07:60:87:4d:cf:09:ca:d1:d1:c9:1c:b0:
                    9e:73:1e:81:72:b2:ae:62:d1:e6:f9:42:c6:57:f5:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:9A:DE:45:50:57:10:E8:31:C5:47:27:D2:BD:D0:25:15:A1:73
            X509v3 Authority Key Identifier:
                keyid:D6:81:62:62:B9:EC:51:28:1A:B7:A2:0B:7E:E9:D1:46:23:96:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6816262B9EC51281AB7A20B7EE9D1462396264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/1/323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39a0:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:c1:76:6a:ee:b3:01:e3:43:9a:4a:6a:73:b2:d3:8d:f7:
         cd:e1:0b:84:b1:d6:d8:d2:71:c5:59:23:8f:58:fd:b0:bb:83:
         92:80:c4:74:3e:f8:74:2f:8b:7e:a6:1c:10:00:2f:10:31:cb:
         ce:d6:98:e6:64:b6:04:46:ef:12:12:45:33:3e:23:8e:01:2b:
         8c:ec:df:ca:e1:a8:1c:52:80:a2:f7:ae:15:24:2a:59:28:34:
         40:06:43:99:35:63:ec:22:7c:d4:f6:b5:09:96:98:e2:c9:3b:
         d2:d2:3a:d4:7f:0e:30:a2:73:f2:f0:b2:d6:79:b3:91:cb:d4:
         d2:82:28:d6:50:37:8c:56:49:7b:c3:68:cf:5b:0e:ba:2f:2d:
         15:19:b4:b0:01:99:91:e8:1f:89:ae:0c:b4:cb:b4:e9:1b:f0:
         88:0a:3d:00:3a:cb:d8:98:8a:6e:91:67:da:41:cd:a3:e7:20:
         14:68:1f:0c:a2:2c:70:af:50:73:1e:c4:4f:f4:ac:6a:5d:2b:
         a5:3f:54:da:8c:3e:bb:1e:ec:c5:3f:ae:01:d7:b1:e6:94:e8:
         a8:33:8e:66:90:2f:d4:60:8c:a1:fe:e8:e6:bc:db:61:75:23:
         47:f5:ef:22:37:e4:5a:5e:04:d0:51:cb:aa:91:05:d9:66:1a:
         aa:2b:62:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbpfgfJdkShSRS3rfwGa/ndBtJ1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MTYyNjJCOUVDNTEyODFBQjdBMjBCN0VFOUQxNDYy
Mzk2MjY0RjAeFw0yNDA0MDQyMzE4NTRaFw0yNTA0MDMyMzIzNTRaMDMxMTAvBgNV
BAMTKDY1Qzk5QURFNDU1MDU3MTBFODMxQzU0NzI3RDJCREQwMjUxNUExNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDjKcr29s8L398W1XX3fnzs+0
KY2yiTR7Oc7X6QUOvjntN3h8L+Den2I5CnQ/ITCvwZYMPwnOrRaZmTL0EfPBTCPK
/wmIuk4tQrbeHUpAxyDsxWRa/F6xOxHe4iuhtusDiG6oeENw+jEloIcVrzy0jeCZ
l012pWJjaLiYuWhnoyqmvKXOs+PG1IAwl5JcmC9b/Y6wDaEk5CrWAvb4yDGG85Ju
41hfqz1nubkQ8zzNiN5Zwyjws8fcjwrW5Mj7XYaeKsjZpKTGo8NouknEwuhWwO2C
oH9lVTC7Y8imSvQ6fTZnCwdgh03PCcrR0ckcsJ5zHoFysq5i0eb5QsZX9V37AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZcma3kVQVxDoMcVHJ9K90CUVoXMwHwYDVR0j
BBgwFoAU1oFiYrnsUSgat6ILfunRRiOWJk8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR4RjNjU3h1NmM3bW9jdkNaeUpjakM5ZVpHYnkzTXpSd0gxNzJvdVJ3
UlEvMS9ENjgxNjI2MkI5RUM1MTI4MUFCN0EyMEI3RUU5RDE0NjIzOTYyNjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODE2MjYyQjlFQzUxMjgx
QUI3QTIwQjdFRTlEMTQ2MjM5NjI2NEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0eEYzY1N4dTZjN21vY3ZDWnlKY2pDOWVaR2J5M016UndIMTcyb3VSd1JRLzEv
MzIzODMwMzQzYTMzMzk2MTMwM2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNjMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEOaCAMA0GCSqGSIb3DQEBCwUA
A4IBAQClPcF2au6zAeNDmkpqc7LTjffN4QuEsdbY0nHFWSOPWP2wu4OSgMR0Pvh0
L4t+phwQAC8QMcvO1pjmZLYERu8SEkUzPiOOASuM7N/K4agcUoCi964VJCpZKDRA
BkOZNWPsInzU9rUJlpjiyTvS0jrUfw4wonPy8LLWebORy9TSgijWUDeMVkl7w2jP
Ww66Ly0VGbSwAZmR6B+Jrgy0y7TpG/CICj0AOsvYmIpukWfaQc2j5yAUaB8Moixw
r1BzHsRP9KxqXSulP1TajD67HuzFP64B17HmlOioM45mkC/UYIyh/ujmvNthdSNH
9e8iN+RaXgTQUcuqkQXZZhqqK2Kd
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org