Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          inmVc5WNpvdn/R46Cp7VKIH6PA5PhknL7cjC9yJjPNc=
Subject key identifier:   E2:56:64:59:61:9E:64:8E:3E:BC:1F:65:50:28:E2:63:7D:94:E3:BE
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       48C0C2C19B126F2E9808CAB53C9D4C10377CA8EE
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:17 +0000
ROA not before:           Mon 27 May 2024 21:46:17 +0000
ROA not after:            Mon 26 May 2025 21:51:17 +0000
asID:                     265010
IP address blocks:        2804:3160:7003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c0:c2:c1:9b:12:6f:2e:98:08:ca:b5:3c:9d:4c:10:37:7c:a8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:17 2024 GMT
            Not After : May 26 21:51:17 2025 GMT
        Subject: CN=E2566459619E648E3EBC1F655028E2637D94E3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:b8:7c:50:23:a8:da:30:92:94:74:e3:44:
                    0f:84:e7:69:99:b6:28:b7:81:8e:31:d4:77:ab:10:
                    a6:e2:8a:14:38:6a:88:02:dc:8c:42:c3:d2:2c:03:
                    16:f5:65:b1:57:54:40:e3:69:8e:c4:4c:3e:ea:0a:
                    d4:80:f9:04:21:60:30:37:66:8c:23:4f:30:f7:a9:
                    eb:40:8e:e2:34:4c:68:10:2a:61:f2:9b:2e:44:c5:
                    3a:83:56:0c:69:7d:36:ce:42:40:f8:bf:8c:4b:b4:
                    e0:9a:0a:4f:4c:fe:2d:0b:d1:1d:6d:68:46:bc:51:
                    3c:d4:e5:b3:28:6e:a7:d1:16:3c:34:0a:9a:f1:0d:
                    44:2c:c1:cf:94:a1:56:1f:b9:93:2c:a8:ab:8c:dc:
                    00:42:c3:30:ea:f0:88:fc:f7:47:9d:cc:45:e7:9a:
                    28:68:0e:e5:83:e4:56:d0:66:cd:ea:65:9e:07:df:
                    a6:d5:8e:b8:80:33:f0:2e:e1:29:c8:7e:d5:27:55:
                    47:28:02:a4:b2:e3:41:0b:9c:e0:43:83:f5:f5:79:
                    26:83:b6:f2:cc:8f:07:b8:0a:21:58:b3:ab:7c:d1:
                    61:ab:6d:3d:79:ea:84:69:b3:b0:5c:7a:17:6b:0c:
                    29:53:3a:f9:d0:84:f4:b0:fc:56:fb:3a:00:9c:e8:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:64:59:61:9E:64:8E:3E:BC:1F:65:50:28:E2:63:7D:94:E3:BE
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:39:25:0d:0c:96:db:0d:8c:3c:cc:54:46:eb:55:17:ec:79:
         12:90:80:cd:b1:b9:b6:d8:71:2b:25:27:1b:cc:b9:55:d6:0e:
         29:3b:96:42:3c:fb:c3:46:52:3b:cc:52:9c:0c:6b:2e:b4:1c:
         f0:3f:74:62:03:f0:6e:8e:f3:69:6d:2d:c1:13:2b:11:06:1e:
         c9:2a:62:3d:38:85:83:07:2e:55:63:80:67:f8:79:7b:0b:03:
         e2:f3:86:c2:3c:94:83:25:4e:55:32:93:76:51:1d:ce:f7:93:
         ec:d3:c8:e4:fd:6a:3a:6a:54:5b:c6:94:a6:e9:47:6c:c5:2e:
         dd:51:4b:6e:0f:f2:11:be:48:dc:56:d4:9a:6e:6d:c9:4f:15:
         00:5c:73:f1:33:bb:2a:f9:f7:93:92:96:4f:cc:49:b1:07:11:
         84:87:75:91:14:58:1d:a8:9e:eb:f1:5a:79:e0:72:38:49:6b:
         4c:fd:de:5a:5b:33:7a:0e:a1:47:d5:54:9c:4e:da:aa:63:93:
         7c:01:6e:8f:70:b3:e4:96:dd:90:e4:ea:ce:9e:25:c4:5a:d9:
         2a:f8:7b:04:07:8d:4c:1d:a0:3a:af:b8:b8:87:bc:f0:74:3e:
         80:97:b5:18:73:ca:9b:e7:04:8c:14:3b:41:50:77:60:30:b4:
         9a:af:14:45
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUSMDCwZsSby6YCMq1PJ1MEDd8qO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNEOUM5MjQ3QzJDQUM2OTJFMEM2ODFBRENGQTY5MjY2
OUNCQ0ZENzAeFw0yNDA1MjcyMTQ2MTdaFw0yNTA1MjYyMTUxMTdaMDMxMTAvBgNV
BAMTKEUyNTY2NDU5NjE5RTY0OEUzRUJDMUY2NTUwMjhFMjYzN0Q5NEUzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzU7h8UCOo2jCSlHTjRA+E52mZ
tii3gY4x1HerEKbiihQ4aogC3IxCw9IsAxb1ZbFXVEDjaY7ETD7qCtSA+QQhYDA3
ZowjTzD3qetAjuI0TGgQKmHymy5ExTqDVgxpfTbOQkD4v4xLtOCaCk9M/i0L0R1t
aEa8UTzU5bMobqfRFjw0CprxDUQswc+UoVYfuZMsqKuM3ABCwzDq8Ij890edzEXn
mihoDuWD5FbQZs3qZZ4H36bVjriAM/Au4SnIftUnVUcoAqSy40ELnOBDg/X1eSaD
tvLMjwe4CiFYs6t80WGrbT156oRps7BcehdrDClTOvnQhPSw/Fb7OgCc6OaJAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU4lZkWWGeZI4+vB9lUCjiY32U474wHwYDVR0j
BBgwFoAU09nJJHwsrGkuDGga3PppJmnLz9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMC9EM0Q5QzkyNDdDMkNBQzY5MkUwQzY4MUFEQ0ZBNjkyNjY5Q0JDRkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRDlDOTI0N0MyQ0FDNjky
RTBDNjgxQURDRkE2OTI2NjlDQkNGRDcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzAv
MzIzODMwMzQzYTMzMzEzNjMwM2EzNzMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTMwMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMWBwAzANBgkqhkiG9w0BAQsF
AAOCAQEAaDklDQyW2w2MPMxURutVF+x5EpCAzbG5tthxKyUnG8y5VdYOKTuWQjz7
w0ZSO8xSnAxrLrQc8D90YgPwbo7zaW0twRMrEQYeySpiPTiFgwcuVWOAZ/h5ewsD
4vOGwjyUgyVOVTKTdlEdzveT7NPI5P1qOmpUW8aUpulHbMUu3VFLbg/yEb5I3FbU
mm5tyU8VAFxz8TO7Kvn3k5KWT8xJsQcRhId1kRRYHaie6/FaeeByOElrTP3eWlsz
eg6hR9VUnE7aqmOTfAFuj3Cz5JbdkOTqzp4lxFrZKvh7BAeNTB2gOq+4uIe88HQ+
gJe1GHPKm+cEjBQ7QVB3YDC0mq8URQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 18:12:42 2024 by rpki-client on console-fra.rpki-client.org