Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/323830343a313134383a3a2f33322d3438203d3e20323633363638.roa
File:                     323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (raw, json)
Hash identifier:          ovOfNhZHWXVIGXcRXN0XGeOIarfY9y3Exgn7CwMh0Wg=
Subject key identifier:   35:43:EA:69:9C:BC:B2:36:1A:D4:D7:ED:73:02:15:C1:D1:C8:C6:D1
Certificate issuer:       /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Certificate serial:       4437C28187BC336099B50E28B5B5899E63AF0435
Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/323830343a313134383a3a2f33322d3438203d3e20323633363638.roa
Signing time:             Thu 04 Apr 2024 09:56:23 +0000
ROA not before:           Thu 04 Apr 2024 09:51:23 +0000
ROA not after:            Thu 03 Apr 2025 09:56:23 +0000
asID:                     263668
IP address blocks:        2804:1148::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl
                          rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:37:c2:81:87:bc:33:60:99:b5:0e:28:b5:b5:89:9e:63:af:04:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
        Validity
            Not Before: Apr  4 09:51:23 2024 GMT
            Not After : Apr  3 09:56:23 2025 GMT
        Subject: CN=3543EA699CBCB2361AD4D7ED730215C1D1C8C6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:f4:30:26:c9:20:29:68:ad:1c:ac:3b:6f:
                    0d:16:37:46:be:9a:20:09:de:d5:b8:7d:88:ca:77:
                    73:df:a5:36:39:15:76:bb:b8:d4:58:5e:92:75:46:
                    cf:06:95:fb:69:51:7f:f2:8d:e1:66:7c:bf:3d:b5:
                    56:f5:e0:aa:5d:1f:57:ec:1c:7b:a7:f1:a3:95:da:
                    2e:c1:c5:42:f4:e9:6b:ff:19:f1:13:d2:ef:f1:0d:
                    3a:40:d7:ea:a7:47:77:45:92:c1:24:42:8f:b4:ec:
                    7d:9a:70:df:b9:47:4d:51:79:cc:9c:cb:3f:c0:1f:
                    22:63:85:b9:a2:04:6d:e7:d9:0d:75:5b:80:7b:a2:
                    ba:7e:a9:77:b1:f9:25:83:44:a6:0d:27:74:a2:3c:
                    24:61:33:b7:be:9f:3b:fc:44:8a:91:3e:05:57:3d:
                    04:da:cd:35:18:f6:c5:45:d3:0b:da:fc:06:d1:c6:
                    ff:93:ca:06:34:12:18:21:ab:fb:13:0f:e0:73:4a:
                    c9:42:c2:e6:9c:e6:81:e7:7c:27:42:9b:fd:b9:0b:
                    8a:ec:8f:03:80:5f:90:e8:ca:1a:16:ba:6c:59:60:
                    88:4a:ef:08:db:38:09:16:b3:f6:4c:b2:4d:9e:91:
                    03:21:6c:08:a0:ef:2c:44:f3:f1:94:34:66:99:8b:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:EA:69:9C:BC:B2:36:1A:D4:D7:ED:73:02:15:C1:D1:C8:C6:D1
            X509v3 Authority Key Identifier:
                keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/323830343a313134383a3a2f33322d3438203d3e20323633363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1148::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:8d:b6:d3:d1:e7:72:d2:29:74:92:4c:30:b4:ed:0c:16:
         31:0e:b4:73:04:92:41:8c:9c:51:6e:d4:c1:a5:6d:2d:69:c6:
         a8:27:aa:a4:ff:90:12:72:f8:83:74:03:91:fb:f9:43:67:7d:
         2a:5e:31:05:00:15:f4:39:d7:ab:8e:41:df:4c:cc:98:33:0f:
         63:c6:73:04:3d:a1:c5:58:f3:b1:af:e1:8a:dd:19:6b:cc:bf:
         16:39:2b:47:64:6d:26:24:c2:58:15:39:f8:fe:94:f0:e3:fc:
         03:3b:45:1a:6d:96:45:0e:30:c7:24:6b:cc:84:49:28:67:2a:
         7b:fc:11:b9:1b:71:08:ae:2d:9d:fc:44:17:f4:85:34:0e:05:
         fd:e6:80:2b:72:61:b5:50:c9:43:83:e3:ac:b6:8b:d1:7f:95:
         b3:f7:60:ad:36:7d:4d:9d:a5:a1:91:16:06:7f:16:46:bc:5e:
         f3:0b:c3:15:b1:49:fd:76:3d:4d:4f:3e:3e:82:94:4c:16:b9:
         b6:8f:f6:ec:33:ac:44:51:c2:9e:38:80:9b:d6:79:91:31:3e:
         5f:2c:ff:f1:71:0e:ac:bc:e3:ae:26:29:72:53:cb:12:1d:76:
         8b:3c:c0:8d:f1:cf:4f:c1:7b:46:6c:32:1e:40:bd:b9:27:59:
         0d:b5:48:ec
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURDfCgYe8M2CZtQ4otbWJnmOvBDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzNkRBOUZBMUNGN0UzMTJBQUY3NzIxRUQxNTM4NEUw
NjNBRTJFMjAeFw0yNDA0MDQwOTUxMjNaFw0yNTA0MDMwOTU2MjNaMDMxMTAvBgNV
BAMTKDM1NDNFQTY5OUNCQ0IyMzYxQUQ0RDdFRDczMDIxNUMxRDFDOEM2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzfQwJskgKWitHKw7bw0WN0a+
miAJ3tW4fYjKd3PfpTY5FXa7uNRYXpJ1Rs8GlftpUX/yjeFmfL89tVb14KpdH1fs
HHun8aOV2i7BxUL06Wv/GfET0u/xDTpA1+qnR3dFksEkQo+07H2acN+5R01Recyc
yz/AHyJjhbmiBG3n2Q11W4B7orp+qXex+SWDRKYNJ3SiPCRhM7e+nzv8RIqRPgVX
PQTazTUY9sVF0wva/AbRxv+TygY0Ehghq/sTD+BzSslCwuac5oHnfCdCm/25C4rs
jwOAX5DoyhoWumxZYIhK7wjbOAkWs/ZMsk2ekQMhbAig7yxE8/GUNGaZixI/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUNUPqaZy8sjYa1NftcwIVwdHIxtEwHwYDVR0j
BBgwFoAUNTban6HPfjEqr3ch7RU4TgY64uIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdE
aDgvMS8zNTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MzZEQTlGQTFDRjdFMzEy
QUFGNzcyMUVEMTUzODRFMDYzQUUyRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIOVFDeDJIQXptVWduNFh5N2lubmREbTJmREx5dUVIbXFudzc0UnV3RGg4LzEv
MzIzODMwMzQzYTMxMzEzNDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQRSDANBgkqhkiG9w0BAQsFAAOCAQEAUhyNttPR
53LSKXSSTDC07QwWMQ60cwSSQYycUW7UwaVtLWnGqCeqpP+QEnL4g3QDkfv5Q2d9
Kl4xBQAV9DnXq45B30zMmDMPY8ZzBD2hxVjzsa/hit0Za8y/FjkrR2RtJiTCWBU5
+P6U8OP8AztFGm2WRQ4wxyRrzIRJKGcqe/wRuRtxCK4tnfxEF/SFNA4F/eaAK3Jh
tVDJQ4PjrLaL0X+Vs/dgrTZ9TZ2loZEWBn8WRrxe8wvDFbFJ/XY9TU8+PoKUTBa5
to/27DOsRFHCnjiAm9Z5kTE+Xyz/8XEOrLzjriYpclPLEh12izzAjfHPT8F7Rmwy
HkC9uSdZDbVI7A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org