Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
File:                     323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (raw, json)
Hash identifier:          eXvVK2Ix1oMw1CwMXpadulGbD/x5E7vcmJn23p0jg1o=
Subject key identifier:   53:05:0F:DB:66:44:47:00:11:A6:F2:B9:4B:0A:DB:89:9C:DC:80:FF
Certificate issuer:       /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Certificate serial:       2C01C1C1555B19101DFE2F5F327971AC14B81C8B
Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     61779
IP address blocks:        2801:80:ae0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl
                          rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:01:c1:c1:55:5b:19:10:1d:fe:2f:5f:32:79:71:ac:14:b8:1c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject: CN=53050FDB6644470011A6F2B94B0ADB899CDC80FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:22:5f:ef:25:3f:92:e2:34:75:51:64:32:
                    d5:eb:c1:46:72:a7:c4:82:d7:af:a2:27:52:d4:54:
                    b3:fc:6a:f8:24:e2:0f:67:1f:59:39:14:ce:f6:b9:
                    4c:9b:dd:00:da:aa:7a:3c:a2:1a:57:3c:bd:26:b2:
                    6b:6a:92:68:08:6e:b0:e5:97:75:4b:0e:16:3d:5b:
                    2d:4b:b1:e2:90:72:86:19:95:99:5e:0c:e5:32:02:
                    d5:f9:7f:c0:fa:3d:5b:ce:4a:f5:ab:c2:9a:8c:ac:
                    70:b9:f7:75:c4:29:1b:91:e5:b6:3c:96:6b:f3:40:
                    85:ad:12:03:33:50:e5:33:95:e9:e9:c0:09:c3:37:
                    89:56:8a:82:50:85:7a:5a:15:45:b8:52:78:90:29:
                    0e:e3:19:db:93:78:b1:08:e3:83:97:63:11:bf:fc:
                    f7:d3:83:27:75:22:90:6d:4f:a3:65:99:3b:ab:ae:
                    75:44:9c:54:fe:f8:9d:84:d1:92:6a:c2:24:2c:5b:
                    e4:c6:61:b8:8a:42:7c:9e:9e:99:6e:43:a9:01:fa:
                    34:25:30:77:01:c8:a8:62:e0:01:02:0d:81:a5:0a:
                    44:b5:fa:57:29:2e:43:a4:c4:0a:92:a4:79:d8:ec:
                    10:f4:38:50:36:f0:db:ac:55:d7:5f:d5:5e:c7:0b:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:05:0F:DB:66:44:47:00:11:A6:F2:B9:4B:0A:DB:89:9C:DC:80:FF
            X509v3 Authority Key Identifier:
                keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:ae0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:32:7f:b4:e7:92:8e:d9:74:42:ae:ab:59:2a:73:68:08:
         b2:d9:47:be:34:ac:d0:07:0c:e0:eb:63:f5:d0:93:5a:9c:34:
         41:cb:68:95:71:1b:e1:4f:5d:d8:80:56:bd:23:7c:04:03:9b:
         b7:0b:dc:c9:92:c7:9d:db:8b:c4:28:7b:2a:d9:79:0f:d2:cd:
         c6:3d:35:4e:de:c9:59:a3:74:1a:6b:8e:04:33:3b:a1:b3:50:
         ad:5f:26:33:29:7f:d6:b7:fc:ca:f4:f2:95:15:87:8d:a4:48:
         f5:2a:b1:35:67:55:51:9e:f1:7c:e8:b0:0c:ee:98:cd:60:38:
         97:a2:97:4d:7f:e7:52:fe:40:6b:84:13:39:09:46:9a:3f:85:
         4e:d4:d6:78:16:08:9e:4a:80:f7:d3:93:98:59:6b:57:d2:18:
         99:76:18:8f:25:d3:12:44:c9:43:29:58:d3:da:92:1a:3f:45:
         70:6c:d4:dd:84:d8:d1:7f:94:9c:30:5f:5c:de:6b:c1:d3:19:
         38:88:f6:45:58:ad:c8:a5:af:13:c9:81:19:85:07:e5:9a:86:
         e4:61:14:3b:d5:6b:cd:a6:a1:99:99:6f:3c:f8:3a:90:0b:f2:
         d7:1d:ea:18:7f:5a:e1:f4:e1:da:6c:44:ac:b1:f9:2d:9a:4f:
         9e:74:94:9e
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIULAHBwVVbGRAd/i9fMnlxrBS4HIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ3NEJGQTNEMEJEQ0MyQ0M2MkVERDlFRkIxMUZDMDI4
Mzc0Mzc2NTAeFw0yNDA0MDMxODI1MThaFw0yNTA0MDIxODMwMThaMDMxMTAvBgNV
BAMTKDUzMDUwRkRCNjY0NDQ3MDAxMUE2RjJCOTRCMEFEQjg5OUNEQzgwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2CJf7yU/kuI0dVFkMtXrwUZy
p8SC16+iJ1LUVLP8avgk4g9nH1k5FM72uUyb3QDaqno8ohpXPL0msmtqkmgIbrDl
l3VLDhY9Wy1LseKQcoYZlZleDOUyAtX5f8D6PVvOSvWrwpqMrHC593XEKRuR5bY8
lmvzQIWtEgMzUOUzlenpwAnDN4lWioJQhXpaFUW4UniQKQ7jGduTeLEI44OXYxG/
/PfTgyd1IpBtT6NlmTurrnVEnFT++J2E0ZJqwiQsW+TGYbiKQnyenpluQ6kB+jQl
MHcByKhi4AECDYGlCkS1+lcpLkOkxAqSpHnY7BD0OFA28NusVddf1V7HC2jpAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUUwUP22ZERwARpvK5SwrbiZzcgP8wHwYDVR0j
BBgwFoAUDXS/o9C9zCzGLt2e+xH8AoN0N2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0ZZOFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUth
UjUvMS8wRDc0QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENzRCRkEzRDBCRENDMkND
NjJFREQ5RUZCMTFGQzAyODM3NDM3NjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNGWThRSkVleHFjejRzZm5yVWlKbnRxRGhVU1U4TFNVdW1yQUxjczFLYVI1LzEv
MzIzODMwMzEzYTM4MzAzYTYxNjUzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2
MzEzNzM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoAQCACuAwDQYJKoZIhvcNAQELBQADggEBAD3O
Mn+055KO2XRCrqtZKnNoCLLZR740rNAHDODrY/XQk1qcNEHLaJVxG+FPXdiAVr0j
fAQDm7cL3MmSx53bi8QoeyrZeQ/SzcY9NU7eyVmjdBprjgQzO6GzUK1fJjMpf9a3
/Mr08pUVh42kSPUqsTVnVVGe8XzosAzumM1gOJeil01/51L+QGuEEzkJRpo/hU7U
1ngWCJ5KgPfTk5hZa1fSGJl2GI8l0xJEyUMpWNPakho/RXBs1N2E2NF/lJwwX1ze
a8HTGTiI9kVYrcilrxPJgRmFB+WahuRhFDvVa82moZmZbzz4OpAL8tcd6hh/WuH0
4dpsRKyx+S2aT550lJ4=
-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:52 2024 by rpki-client on console-fra.rpki-client.org