Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/323830343a353739383a3a2f33322d3332203d3e20323638303734.roa
File:                     323830343a353739383a3a2f33322d3332203d3e20323638303734.roa (raw, json)
Hash identifier:          D4JRlhZ6QI3oSE1IKaJQ00UOisyigjZH+SOtXJtsAts=
Subject key identifier:   59:52:F5:EF:ED:44:97:3D:E2:AC:75:EA:05:04:45:76:9F:4A:A3:48
Certificate issuer:       /CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
Certificate serial:       57B1B00932EECB04D706C9E54F343A12D6ACBED5
Authority key identifier: 3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/323830343a353739383a3a2f33322d3332203d3e20323638303734.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268074
IP address blocks:        2804:5798::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl
                          rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b1:b0:09:32:ee:cb:04:d7:06:c9:e5:4f:34:3a:12:d6:ac:be:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:24:a7:be:9c:a3:56:fd:86:65:2a:65:f4:
                    c7:fb:bf:84:d7:c9:b5:19:be:b4:15:ce:65:aa:7f:
                    f6:b3:1d:c2:94:64:c4:1e:33:c4:7c:16:e3:0c:97:
                    fe:60:36:c7:c5:be:db:0f:34:43:2f:00:41:32:46:
                    7e:0a:8b:de:ae:61:ed:7e:17:7f:3c:0f:38:bc:16:
                    6e:f8:db:19:f3:21:f3:db:fc:04:da:d2:d0:d1:e2:
                    16:84:db:9c:25:09:ec:da:de:35:c6:fa:5c:8f:13:
                    d6:b7:86:9f:11:fa:6d:b4:12:60:f9:4c:4b:19:18:
                    15:a3:a0:cc:f7:f3:dc:3a:88:74:2f:1d:bf:be:e7:
                    a1:18:d0:c0:82:13:a2:fc:38:b1:90:4e:3a:08:2c:
                    8a:c1:e1:1a:52:49:f1:56:45:fd:aa:e8:d1:58:76:
                    26:93:b9:f4:10:bb:be:bb:a0:b4:42:86:ec:84:72:
                    58:3f:bd:26:e3:b8:53:5e:33:47:72:c5:f0:77:ad:
                    b7:41:0e:11:b8:f0:ce:d2:a4:15:99:2c:ab:90:54:
                    b5:f1:e2:6f:0c:ad:84:8b:15:19:37:6c:2b:86:51:
                    f1:19:a0:89:59:43:e9:3e:6d:ff:49:65:22:1f:7d:
                    12:5b:34:be:24:d6:99:37:5a:21:e6:a5:48:6a:91:
                    a9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:F5:EF:ED:44:97:3D:E2:AC:75:EA:05:04:45:76:9F:4A:A3:48
            X509v3 Authority Key Identifier:
                keyid:3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/323830343a353739383a3a2f33322d3332203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5798::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:8b:cb:e3:75:86:e5:49:c3:84:e5:61:43:3e:bf:26:cb:
         24:a0:a0:78:c8:33:b0:d8:8c:20:65:7c:00:9b:8d:b1:f8:be:
         7f:34:9d:6c:15:c2:cf:55:d6:f0:c3:01:a2:73:c6:bc:43:2c:
         18:72:60:5d:12:22:a1:cc:0f:4b:c2:66:41:25:6a:b5:f7:4a:
         58:8e:f1:3e:12:45:05:b8:ba:a2:4a:bf:14:eb:f3:35:fd:e3:
         ae:b4:2c:ca:ad:0d:10:99:3d:cc:5c:9b:13:ec:c6:7f:3a:80:
         3d:4b:41:33:9f:57:df:e4:cd:c2:58:a2:ec:04:8a:71:8a:cc:
         00:3a:74:3b:d0:04:9c:25:1b:00:e6:fe:e0:db:9e:b5:89:1f:
         b9:9e:13:ef:0d:16:30:0b:65:15:38:84:74:af:06:4b:63:e7:
         5a:2a:05:cf:68:be:12:42:21:d7:eb:48:cc:6b:e7:e5:fa:fa:
         76:b0:31:ab:ea:3e:4c:92:44:e6:80:a1:f9:89:a4:4a:cf:6a:
         8d:14:eb:c8:09:64:60:b6:4a:f8:a3:ec:3a:7c:91:34:6a:fc:
         af:12:47:98:43:68:df:95:b5:66:9c:b1:e0:0a:4c:07:3f:55:
         da:95:6e:bd:d2:07:36:27:68:f6:14:33:18:13:86:0d:0c:0f:
         e7:00:dd:f2
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUV7GwCTLuywTXBsnlTzQ6EtasvtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RENTQ5NEMxRjI5NTgwRkNERjhDOUJBRDUxNDhCODg4
NURBMDNGMTAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ1NjI0QTdCRTlDQTM1NkZE
ODY2NTJBNjVGNEM3RkJCRjg0RDdDOUI1MTlCRUI0MTVDRTY1QUE3RkY2QjMxREMy
OTQ2NEM0MUUzM0M0N0MxNkUzMEM5N0ZFNjAzNkM3QzVCRURCMEYzNDQzMkYwMDQx
MzI0NjdFMEE4QkRFQUU2MUVEN0UxNzdGM0MwRjM4QkMxNjZFRjhEQjE5RjMyMUYz
REJGQzA0REFEMkQwRDFFMjE2ODREQjlDMjUwOUVDREFERTM1QzZGQTVDOEYxM0Q2
Qjc4NjlGMTFGQTZEQjQxMjYwRjk0QzRCMTkxODE1QTNBMENDRjdGM0RDM0E4ODc0
MkYxREJGQkVFN0ExMThEMEMwODIxM0EyRkMzOEIxOTA0RTNBMDgyQzhBQzFFMTFB
NTI0OUYxNTY0NUZEQUFFOEQxNTg3NjI2OTNCOUY0MTBCQkJFQkJBMEI0NDI4NkVD
ODQ3MjU4M0ZCRDI2RTNCODUzNUUzMzQ3NzJDNUYwNzdBREI3NDEwRTExQjhGMENF
RDJBNDE1OTkyQ0FCOTA1NEI1RjFFMjZGMENBRDg0OEIxNTE5Mzc2QzJCODY1MUYx
MTlBMDg5NTk0M0U5M0U2REZGNDk2NTIyMUY3RDEyNUIzNEJFMjRENjk5Mzc1QTIx
RTZBNTQ4NkE5MUE5QTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtFYkp76co1b9hmUqZfTH+7+E18m1Gb60Fc5lqn/2sx3ClGTEHjPE
fBbjDJf+YDbHxb7bDzRDLwBBMkZ+CovermHtfhd/PA84vBZu+NsZ8yHz2/wE2tLQ
0eIWhNucJQns2t41xvpcjxPWt4afEfpttBJg+UxLGRgVo6DM9/PcOoh0Lx2/vueh
GNDAghOi/DixkE46CCyKweEaUknxVkX9qujRWHYmk7n0ELu+u6C0QobshHJYP70m
47hTXjNHcsXwd623QQ4RuPDO0qQVmSyrkFS18eJvDK2EixUZN2wrhlHxGaCJWUPp
Pm3/SWUiH30SWzS+JNaZN1oh5qVIapGpqQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FFlS9e/tRJc94qx16gUERXafSqNIMB8GA1UdIwQYMBaAFD3VSUwfKVgPzfjJutUU
i4iF2gPxMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI2ZmpZVU5ZRXVReW8x
M0tqN1Fid1h5TWJOUXZING9LZHFkRzJUSkd5SkZ1LzEvM0RENTQ5NEMxRjI5NTgw
RkNERjhDOUJBRDUxNDhCODg4NURBMDNGMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zREQ1NDk0QzFGMjk1ODBGQ0RGOEM5QkFENTE0OEI4ODg1REEw
M0YxLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yNmZqWVVOWUV1UXlvMTNLajdR
YndYeU1iTlF2SDRvS2RxZEcyVEpHeUpGdS8xLzMyMzgzMDM0M2EzNTM3MzkzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzODMwMzczNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
V5gwDQYJKoZIhvcNAQELBQADggEBAEoQi8vjdYblScOE5WFDPr8myySgoHjIM7DY
jCBlfACbjbH4vn80nWwVws9V1vDDAaJzxrxDLBhyYF0SIqHMD0vCZkElarX3SliO
8T4SRQW4uqJKvxTr8zX94660LMqtDRCZPcxcmxPsxn86gD1LQTOfV9/kzcJYouwE
inGKzAA6dDvQBJwlGwDm/uDbnrWJH7meE+8NFjALZRU4hHSvBktj51oqBc9ovhJC
IdfrSMxr5+X6+nawMavqPkySROaAofmJpErPao0U68gJZGC2Svij7Dp8kTRq/K8S
R5hDaN+VtWacseAKTAc/VdqVbr3SBzYnaPYUMxgThg0MD+cA3fI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org