Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/323830343a333736383a3a2f33322d313238203d3e20323636343130.roa
File:                     323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (raw, json)
Hash identifier:          2ubj/Ln3DtA5NDRhamfAL1+ZGl4XqRbDmBZzdQv11vE=
Subject key identifier:   35:08:5A:94:A3:34:50:68:5A:E9:F2:91:40:51:E1:F4:EF:68:71:C2
Certificate issuer:       /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial:       404C430FED31C7B77EB7E26FC24D2A44305F6F05
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/323830343a333736383a3a2f33322d313238203d3e20323636343130.roa
Signing time:             Thu 04 Apr 2024 00:41:43 +0000
ROA not before:           Thu 04 Apr 2024 00:36:43 +0000
ROA not after:            Thu 03 Apr 2025 00:41:43 +0000
asID:                     266410
IP address blocks:        2804:3768::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
                          rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:43:0f:ed:31:c7:b7:7e:b7:e2:6f:c2:4d:2a:44:30:5f:6f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
        Validity
            Not Before: Apr  4 00:36:43 2024 GMT
            Not After : Apr  3 00:41:43 2025 GMT
        Subject: CN=35085A94A33450685AE9F2914051E1F4EF6871C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:9d:e4:36:7b:72:94:29:0e:b2:9e:6e:42:
                    c5:d8:d5:8b:4b:67:8f:38:5a:0a:d0:56:f8:62:a7:
                    37:fc:80:9b:7a:97:42:67:5c:9b:73:81:0f:b2:d1:
                    0a:f6:6c:5e:9d:06:74:bb:35:92:f1:cc:cc:8b:76:
                    f6:ba:32:74:d6:93:c1:0a:e8:c4:60:e6:09:f9:40:
                    1f:88:30:d7:f5:47:0e:80:6b:c5:ed:a0:07:39:ef:
                    84:7a:af:b6:39:06:8b:11:9f:b4:a2:86:ab:e9:13:
                    99:38:78:d2:d0:b1:39:ab:15:bc:aa:3b:f8:64:a3:
                    76:d4:db:df:d4:fb:07:c4:c5:5d:ab:56:a1:b6:6a:
                    35:c1:bb:a3:3e:d2:af:00:94:86:7d:cf:cb:fb:40:
                    19:5a:54:ad:52:46:90:c3:84:00:16:54:1e:98:ab:
                    09:38:5b:1b:67:0c:e0:33:84:1d:c9:d8:e1:2d:f5:
                    49:5c:51:9c:94:8e:e2:da:bf:19:2c:29:d3:bf:e3:
                    14:c7:00:43:6e:e4:2a:58:74:ab:77:2d:07:8c:2d:
                    cf:5e:4c:64:75:09:14:3e:50:12:e0:fe:5f:43:c9:
                    d8:5d:43:ff:1c:06:10:33:f4:2c:a6:cd:6e:4e:eb:
                    f2:c7:ef:23:d9:73:8a:c1:ce:6f:30:b5:b2:c6:76:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:5A:94:A3:34:50:68:5A:E9:F2:91:40:51:E1:F4:EF:68:71:C2
            X509v3 Authority Key Identifier:
                keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/323830343a333736383a3a2f33322d313238203d3e20323636343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3768::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:54:e9:4e:d1:89:ce:79:db:57:1c:23:b0:82:82:35:47:
         41:1a:d4:5b:72:69:3c:1f:5d:84:d4:57:d0:17:34:fe:e7:71:
         41:73:09:f7:ed:04:48:02:8f:e6:c7:65:72:15:41:b8:19:52:
         ea:b6:c6:ae:af:fd:c4:e0:a7:71:6f:83:47:07:06:ea:5e:55:
         b7:f2:a6:4e:4f:36:84:f2:c0:13:66:e1:18:bc:2d:93:05:93:
         4d:f9:d3:e9:be:21:f0:cf:2b:60:c2:7e:33:a4:eb:80:18:d0:
         9e:9b:50:c2:ba:a5:21:b3:c7:c3:28:6c:b4:52:fc:31:c7:e5:
         dd:1b:e5:73:f1:d1:af:0a:74:97:fb:d1:6d:79:d7:5b:e1:e6:
         15:06:b2:5d:af:04:41:a4:d0:eb:7b:7c:86:e8:fe:2f:52:3f:
         13:c3:f8:cf:c0:17:86:72:0f:ae:ee:10:13:52:50:5c:a8:35:
         34:c2:d7:e5:c1:70:36:1a:f4:54:8a:57:bc:79:63:c6:2f:b3:
         a6:c9:2d:49:dc:51:d4:94:c0:09:2d:77:53:9f:81:db:e6:fb:
         26:77:71:52:2a:e1:72:4a:37:be:8b:99:ea:6b:cf:28:ad:2b:
         17:64:4c:4f:82:90:bc:38:4d:1d:9f:af:31:a8:37:1f:68:81:
         46:21:d5:be
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUQExDD+0xx7d+t+Jvwk0qRDBfbwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JGRTkzNzY5RERCRkNBNzA0RjgzNjA0MDdGNTVCMEQ4
RkE4NkNDNzAeFw0yNDA0MDQwMDM2NDNaFw0yNTA0MDMwMDQxNDNaMDMxMTAvBgNV
BAMTKDM1MDg1QTk0QTMzNDUwNjg1QUU5RjI5MTQwNTFFMUY0RUY2ODcxQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/p3kNntylCkOsp5uQsXY1YtL
Z484WgrQVvhipzf8gJt6l0JnXJtzgQ+y0Qr2bF6dBnS7NZLxzMyLdva6MnTWk8EK
6MRg5gn5QB+IMNf1Rw6Aa8XtoAc574R6r7Y5BosRn7SihqvpE5k4eNLQsTmrFbyq
O/hko3bU29/U+wfExV2rVqG2ajXBu6M+0q8AlIZ9z8v7QBlaVK1SRpDDhAAWVB6Y
qwk4WxtnDOAzhB3J2OEt9UlcUZyUjuLavxksKdO/4xTHAENu5CpYdKt3LQeMLc9e
TGR1CRQ+UBLg/l9DydhdQ/8cBhAz9CymzW5O6/LH7yPZc4rBzm8wtbLGdnHnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUNQhalKM0UGha6fKRQFHh9O9occIwHwYDVR0j
BBgwFoAUy/6Tdp3b/KcE+DYEB/VbDY+obMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pW
bmUvMS9DQkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRkU5Mzc2OUREQkZDQTcw
NEY4MzYwNDA3RjU1QjBEOEZBODZDQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzUnNCTnNjSzVWajZFRzJpbng0akxpdmtRR3A4N2VRaDNLOXRIZWd6Vm5lLzEv
MzIzODMwMzQzYTMzMzczNjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDdoMA0GCSqGSIb3DQEBCwUAA4IBAQBk+FTp
TtGJznnbVxwjsIKCNUdBGtRbcmk8H12E1FfQFzT+53FBcwn37QRIAo/mx2VyFUG4
GVLqtsaur/3E4Kdxb4NHBwbqXlW38qZOTzaE8sATZuEYvC2TBZNN+dPpviHwzytg
wn4zpOuAGNCem1DCuqUhs8fDKGy0Uvwxx+XdG+Vz8dGvCnSX+9Fteddb4eYVBrJd
rwRBpNDre3yG6P4vUj8Tw/jPwBeGcg+u7hATUlBcqDU0wtflwXA2GvRUile8eWPG
L7OmyS1J3FHUlMAJLXdTn4Hb5vsmd3FSKuFySje+i5nqa88orSsXZExPgpC8OE0d
n68xqDcfaIFGIdW+
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:18 2024 by rpki-client on console-ams.rpki-client.org