Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a343030303a3a2f34382d3438203d3e20323635333131.roa
File:                     323830343a326465383a343030303a3a2f34382d3438203d3e20323635333131.roa (raw, json)
Hash identifier:          Y4M04G6j5g3jC57ohh0laJ7FrjMtibnLMskJIHy5s/8=
Subject key identifier:   F0:BB:61:48:29:A5:DD:7B:31:4B:02:6B:4C:09:4B:72:9A:C6:25:81
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       4729EBF8CFE2CA95121E84616D657CD6804BE99D
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a343030303a3a2f34382d3438203d3e20323635333131.roa
Signing time:             Thu 04 Apr 2024 16:23:05 +0000
ROA not before:           Thu 04 Apr 2024 16:18:05 +0000
ROA not after:            Thu 03 Apr 2025 16:23:05 +0000
asID:                     265311
IP address blocks:        2804:2de8:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:29:eb:f8:cf:e2:ca:95:12:1e:84:61:6d:65:7c:d6:80:4b:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Apr  4 16:18:05 2024 GMT
            Not After : Apr  3 16:23:05 2025 GMT
        Subject: CN=F0BB614829A5DD7B314B026B4C094B729AC62581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:cd:1a:26:29:33:c7:20:ca:0c:51:35:d6:
                    df:57:50:68:7a:7b:bf:81:16:09:9e:f2:0a:55:f8:
                    ae:fe:76:2f:da:e5:5f:29:5b:9c:7a:5f:07:eb:b1:
                    c8:82:2f:0e:79:0d:22:5f:b3:40:e4:46:ec:b4:4b:
                    63:5a:a0:2b:2e:63:86:49:97:dd:c0:90:31:b1:f5:
                    70:8f:1d:2f:0c:23:1f:a4:15:57:4f:b5:39:82:8d:
                    ab:51:ce:d0:e3:8a:8d:a7:64:bb:61:b5:a7:6c:05:
                    03:15:4f:20:5c:53:0d:17:e6:36:aa:f2:8b:3a:37:
                    a6:62:ad:95:ca:65:67:49:f8:b7:4a:ef:09:70:3d:
                    c9:9e:ac:91:db:3d:45:58:f0:f0:7b:41:eb:1e:16:
                    fc:68:da:f0:cb:8e:da:60:b6:f4:25:a2:23:1b:1f:
                    81:38:6f:ff:56:6b:20:b7:cc:40:a6:e8:0d:43:66:
                    1b:05:b8:90:d1:db:48:d2:ec:ae:88:8a:87:8a:28:
                    1b:2c:74:d1:2a:8e:bf:d0:1e:0f:72:93:a6:fc:c9:
                    ef:3f:3b:1e:00:fa:4e:54:a0:f0:cb:5d:82:a6:48:
                    b0:4b:c6:c2:59:cc:fe:0f:ec:fb:47:ad:23:96:42:
                    8c:a4:b2:27:1b:f5:77:7a:74:41:19:c9:f7:24:b7:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:61:48:29:A5:DD:7B:31:4B:02:6B:4C:09:4B:72:9A:C6:25:81
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a343030303a3a2f34382d3438203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:09:fb:29:7a:94:3f:ec:52:c1:ea:44:0c:3e:e2:f9:a6:
         aa:6d:7f:80:d5:d1:0a:fe:19:64:6b:9b:bb:81:67:8a:3e:c8:
         c1:3a:46:f6:ce:1c:aa:67:37:b2:7a:45:67:f1:1d:26:68:af:
         6c:74:43:88:e9:31:13:9b:a1:f1:17:14:5b:3e:1c:0b:83:80:
         77:8f:25:16:db:a5:78:d3:62:44:f4:81:b8:e4:ad:dc:12:0a:
         b5:8b:d4:14:f5:41:58:f1:2b:5a:37:f2:2f:ae:b2:36:a4:94:
         27:f4:6c:2d:9d:2f:40:2e:15:d1:9b:14:6a:04:34:fe:5e:e4:
         20:82:4b:b9:24:dd:bf:6d:66:4c:48:25:2f:66:ba:12:fc:c9:
         b1:8b:76:99:82:aa:3c:72:f8:fe:1d:0e:55:6a:7b:9e:07:bd:
         10:69:da:d9:a4:f6:36:6c:21:b8:70:44:4e:d3:57:ee:25:72:
         22:9f:e8:87:1d:89:bd:42:93:72:a3:ba:a0:85:23:6a:71:22:
         37:26:c9:d7:66:d5:d5:0a:6b:04:d6:d7:05:79:ec:b9:b0:2f:
         df:e3:03:da:af:47:45:58:96:c4:2b:5b:db:e1:30:75:97:6a:
         52:1f:dd:43:68:20:f1:81:12:97:3f:ee:ce:36:4d:62:a4:e2:
         a0:d8:8d:a3
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIURynr+M/iypUSHoRhbWV81oBL6Z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0MjQxRTY5ODJBMDEyNjQ4Mjk0MDAyQjY5NzQ1MTYy
N0RGRjY2MTAeFw0yNDA0MDQxNjE4MDVaFw0yNTA0MDMxNjIzMDVaMDMxMTAvBgNV
BAMTKEYwQkI2MTQ4MjlBNUREN0IzMTRCMDI2QjRDMDk0QjcyOUFDNjI1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuM0aJikzxyDKDFE11t9XUGh6
e7+BFgme8gpV+K7+di/a5V8pW5x6XwfrsciCLw55DSJfs0DkRuy0S2NaoCsuY4ZJ
l93AkDGx9XCPHS8MIx+kFVdPtTmCjatRztDjio2nZLthtadsBQMVTyBcUw0X5jaq
8os6N6ZirZXKZWdJ+LdK7wlwPcmerJHbPUVY8PB7QeseFvxo2vDLjtpgtvQloiMb
H4E4b/9WayC3zECm6A1DZhsFuJDR20jS7K6IioeKKBssdNEqjr/QHg9yk6b8ye8/
Ox4A+k5UoPDLXYKmSLBLxsJZzP4P7PtHrSOWQoyksicb9Xd6dEEZyfckt2zXAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU8LthSCml3XsxSwJrTAlLcprGJYEwHwYDVR0j
BBgwFoAU8kJB5pgqASZIKUACtpdFFiff9mEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0h1bk5yVXFOd1RRZ2ZTdU14U0g2UDd0WmJUdlpDeWRBRmZGenRTQ2R1
aHUvMS9GMjQyNDFFNjk4MkEwMTI2NDgyOTQwMDJCNjk3NDUxNjI3REZGNjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyNDI0MUU2OTgyQTAxMjY0
ODI5NDAwMkI2OTc0NTE2MjdERkY2NjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIdW5OclVxTndUUWdmU3VNeFNINlA3dFpiVHZaQ3lkQUZmRnp0U0NkdWh1LzEv
MzIzODMwMzQzYTMyNjQ2NTM4M2EzNDMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgELehAADANBgkqhkiG9w0BAQsF
AAOCAQEAjqUJ+yl6lD/sUsHqRAw+4vmmqm1/gNXRCv4ZZGubu4Fnij7IwTpG9s4c
qmc3snpFZ/EdJmivbHRDiOkxE5uh8RcUWz4cC4OAd48lFtuleNNiRPSBuOSt3BIK
tYvUFPVBWPErWjfyL66yNqSUJ/RsLZ0vQC4V0ZsUagQ0/l7kIIJLuSTdv21mTEgl
L2a6EvzJsYt2mYKqPHL4/h0OVWp7nge9EGna2aT2NmwhuHBETtNX7iVyIp/ohx2J
vUKTcqO6oIUjanEiNybJ12bV1QprBNbXBXnsubAv3+MD2q9HRViWxCtb2+EwdZdq
Uh/dQ2gg8YESlz/uzjZNYqTioNiNow==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:57 2024 by rpki-client on console-ams.rpki-client.org