Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa
File:                     323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (raw, json)
Hash identifier:          lM1yv3f+lAVD3F1lVoJZsplp2fXmk3txQgJq+/GLF8s=
Subject key identifier:   55:14:71:65:B3:0D:B3:AC:C8:1E:A9:FC:D4:54:D5:81:25:DD:27:39
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       4B2835AAC46A38FD4910F4F02310882C5CCD0632
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa
Signing time:             Thu 04 Apr 2024 03:01:31 +0000
ROA not before:           Thu 04 Apr 2024 02:56:31 +0000
ROA not after:            Thu 03 Apr 2025 03:01:31 +0000
asID:                     265036
IP address blocks:        2804:31c4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:28:35:aa:c4:6a:38:fd:49:10:f4:f0:23:10:88:2c:5c:cd:06:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Apr  4 02:56:31 2024 GMT
            Not After : Apr  3 03:01:31 2025 GMT
        Subject: CN=55147165B30DB3ACC81EA9FCD454D58125DD2739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:bb:a7:2d:c5:4d:e4:c6:d4:a9:cd:eb:52:
                    e6:26:24:50:76:73:d6:c2:d4:63:a3:6f:84:5b:b8:
                    02:18:cf:dd:bc:3f:59:35:24:86:12:f5:0c:21:4a:
                    a7:d7:aa:5d:cf:f4:31:60:84:2c:82:28:5d:d6:00:
                    8d:f8:fa:ff:6b:b0:28:42:b3:24:87:ee:91:9c:56:
                    0d:06:8f:11:3f:de:31:e6:49:70:28:64:8e:cd:59:
                    1b:62:fb:28:cf:1a:33:fc:31:a1:e7:d8:14:12:cd:
                    b8:44:e3:82:c7:e1:03:c0:0f:ee:96:7e:4a:f7:6a:
                    ac:85:1c:bc:60:8c:9c:c7:79:55:89:8f:7c:59:da:
                    53:d3:c1:c0:41:9b:ff:0b:d8:df:74:61:c7:d4:68:
                    d2:40:f0:d5:ca:ba:7e:6e:48:2b:1c:3e:32:5b:ea:
                    3f:f5:37:53:1e:e9:d5:05:62:87:1b:d3:0d:e6:ed:
                    00:41:08:86:e3:5f:46:85:61:4a:b2:45:cf:70:c6:
                    9b:6c:7b:7d:bc:0d:f4:6b:db:fa:47:a9:01:4d:73:
                    20:61:5b:c5:c8:3b:f1:78:45:c0:80:2f:56:5e:94:
                    88:b5:cd:9f:14:60:31:d2:4b:64:0b:5f:3c:5f:65:
                    c3:11:2f:97:e1:75:ba:ec:53:a7:4d:fa:22:8e:b3:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:14:71:65:B3:0D:B3:AC:C8:1E:A9:FC:D4:54:D5:81:25:DD:27:39
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:c5:e1:6c:73:12:05:53:df:c6:e0:6a:7e:17:1e:b2:9f:
         57:f2:1a:93:70:dd:f1:18:4d:1b:90:83:40:f2:7f:cb:1c:5e:
         16:80:84:ec:d3:60:a5:db:66:11:28:cc:77:8f:45:f8:9b:26:
         9d:06:d5:e8:2f:a4:6f:73:84:1e:f4:08:c3:bf:98:bd:c6:53:
         34:58:3f:7d:bc:7f:90:35:57:a1:78:a3:ad:00:52:e6:7f:54:
         69:24:36:bc:19:c4:7c:61:2b:05:bd:08:33:51:a0:ff:a4:95:
         37:0f:4e:36:e7:19:73:09:18:16:ff:0d:e6:05:9a:75:5b:15:
         34:39:0f:76:4e:ee:b8:aa:bc:64:0b:be:da:01:78:5d:0a:e0:
         e5:3e:27:77:65:2c:b2:1a:b0:21:d9:72:f8:92:5f:38:4d:b7:
         63:21:c1:63:ad:47:52:4f:0f:d4:74:df:7d:83:36:fd:28:18:
         7c:77:87:6c:1f:6c:95:b8:80:50:56:ce:b0:7b:82:c0:3c:8f:
         4d:92:4d:a3:22:c4:19:af:42:86:73:e1:17:8c:c8:78:5b:3a:
         e9:a8:06:9d:7a:19:cd:ac:33:63:a6:76:70:7f:93:60:8f:06:
         66:f9:9f:f4:1c:e8:9a:60:6a:8b:cf:60:b4:b6:8b:47:e4:4c:
         f2:ff:9e:54
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSyg1qsRqOP1JEPTwIxCILFzNBjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEzNThDNzhGQzdFMDA1RTEyMjgwQ0ZERTYwRTczNDE5
Q0M2QTM4QTAeFw0yNDA0MDQwMjU2MzFaFw0yNTA0MDMwMzAxMzFaMDMxMTAvBgNV
BAMTKDU1MTQ3MTY1QjMwREIzQUNDODFFQTlGQ0Q0NTRENTgxMjVERDI3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRbunLcVN5MbUqc3rUuYmJFB2
c9bC1GOjb4RbuAIYz928P1k1JIYS9QwhSqfXql3P9DFghCyCKF3WAI34+v9rsChC
sySH7pGcVg0GjxE/3jHmSXAoZI7NWRti+yjPGjP8MaHn2BQSzbhE44LH4QPAD+6W
fkr3aqyFHLxgjJzHeVWJj3xZ2lPTwcBBm/8L2N90YcfUaNJA8NXKun5uSCscPjJb
6j/1N1Me6dUFYocb0w3m7QBBCIbjX0aFYUqyRc9wxptse328DfRr2/pHqQFNcyBh
W8XIO/F4RcCAL1ZelIi1zZ8UYDHSS2QLXzxfZcMRL5fhdbrsU6dN+iKOs/ihAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVRRxZbMNs6zIHqn81FTVgSXdJzkwHwYDVR0j
BBgwFoAU4TWMePx+AF4SKAz95g5zQZzGo4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnMzbWlIbWNKWjFuaEpmcDhXUmJ2VGNKQXl4N3ZBMlUyR3kya2VCc3VX
ZkUvMS9FMTM1OEM3OEZDN0UwMDVFMTIyODBDRkRFNjBFNzM0MTlDQzZBMzhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMzU4Qzc4RkM3RTAwNUUx
MjI4MENGREU2MEU3MzQxOUNDNkEzOEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJzM21pSG1jSloxbmhKZnA4V1JidlRjSkF5eDd2QTJVMkd5MmtlQnN1V2ZFLzEv
MzIzODMwMzQzYTMzMzE2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxxDANBgkqhkiG9w0BAQsFAAOCAQEAaUzF4Wxz
EgVT38bgan4XHrKfV/Iak3Dd8RhNG5CDQPJ/yxxeFoCE7NNgpdtmESjMd49F+Jsm
nQbV6C+kb3OEHvQIw7+YvcZTNFg/fbx/kDVXoXijrQBS5n9UaSQ2vBnEfGErBb0I
M1Gg/6SVNw9ONucZcwkYFv8N5gWadVsVNDkPdk7uuKq8ZAu+2gF4XQrg5T4nd2Us
shqwIdly+JJfOE23YyHBY61HUk8P1HTffYM2/SgYfHeHbB9slbiAUFbOsHuCwDyP
TZJNoyLEGa9ChnPhF4zIeFs66agGnXoZzawzY6Z2cH+TYI8GZvmf9BzommBqi89g
tLaLR+RM8v+eVA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org