Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
File:                     323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          Vzzy94kvUWUhTx7QLr4vzuitWlbJCB8GpWrdimQi6+8=
Subject key identifier:   B5:87:31:F6:04:00:64:72:38:26:2D:04:F4:15:93:D2:3E:15:A2:92
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       58EF4AAD88661FA64A0CE9544E53AB555985D45D
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
Signing time:             Tue 12 Nov 2024 16:18:11 +0000
ROA not before:           Tue 12 Nov 2024 16:13:11 +0000
ROA not after:            Tue 11 Nov 2025 16:18:11 +0000
asID:                     262725
IP address blocks:        2804:3360::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 19:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:4a:ad:88:66:1f:a6:4a:0c:e9:54:4e:53:ab:55:59:85:d4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: Nov 12 16:13:11 2024 GMT
            Not After : Nov 11 16:18:11 2025 GMT
        Subject: CN=B58731F60400647238262D04F41593D23E15A292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:01:c4:98:1f:9f:9a:05:d8:6c:6e:42:d3:
                    8a:0e:ea:20:cc:4c:fc:9c:0f:ae:64:fd:16:62:04:
                    be:91:ee:07:0b:ae:42:15:2c:d2:cf:7c:bd:d8:42:
                    30:c0:62:e1:f2:e5:72:fc:04:37:31:e1:ea:31:8b:
                    66:94:e8:2b:15:c9:8b:47:1c:5d:2e:d6:f0:d2:8c:
                    2f:11:49:49:8a:1f:78:1d:66:8c:94:f7:de:db:9a:
                    dd:d5:a4:4f:85:f2:b7:20:fa:89:42:5d:86:f5:a8:
                    99:6a:5c:39:35:e7:ee:a4:db:09:0e:88:00:6d:3d:
                    46:ea:2e:65:b0:69:0e:d6:6d:d0:d3:dd:ef:8b:26:
                    68:85:38:06:65:54:73:0b:79:97:0e:a8:69:6b:3e:
                    30:54:24:7d:5b:8d:3d:ed:db:53:e8:fe:35:66:7c:
                    ef:0b:92:8d:92:0f:cb:e5:d8:d4:65:99:e5:53:a5:
                    58:aa:45:c6:d2:5b:9f:61:00:ba:f0:4c:61:c4:2c:
                    57:0b:e9:2e:a6:37:30:62:4e:48:a8:af:7b:ba:76:
                    f8:e4:57:cd:84:8a:53:c9:49:1a:e5:f1:0e:5b:58:
                    3d:db:04:dd:42:49:a4:03:fd:56:74:9b:e7:ad:2d:
                    a1:ef:79:08:93:a4:69:8b:b0:ed:b5:07:f9:d5:b4:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:87:31:F6:04:00:64:72:38:26:2D:04:F4:15:93:D2:3E:15:A2:92
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:eb:f8:1e:3e:7e:12:5e:93:79:05:5b:3f:b0:8d:e0:b8:52:
         3d:c5:ba:f2:60:8a:e1:82:43:e8:ba:ab:11:ce:4a:35:d6:28:
         d4:22:df:92:b8:00:a8:38:d2:be:a5:66:44:a4:1c:e9:a3:29:
         cf:be:df:ab:11:93:0a:49:83:c6:09:27:70:6b:fe:c6:b3:d2:
         81:c5:e4:f3:3e:91:72:de:57:df:cd:32:d9:fa:16:0f:c1:3d:
         a7:7c:0e:6d:2b:4a:a6:c2:bd:65:5b:95:4b:38:f4:4e:c2:87:
         4c:02:54:8f:70:58:4f:71:19:e5:98:54:ef:7b:e2:63:63:6e:
         0c:38:1c:8e:d3:81:61:dd:f8:a6:73:eb:66:bd:24:79:80:33:
         e7:48:d4:fb:41:46:db:f0:8c:31:ef:1b:96:f2:24:63:51:11:
         11:8f:f2:e1:ee:86:7a:d0:f2:d1:63:f9:d7:cf:08:22:92:c1:
         e2:45:cd:a7:01:e4:1e:21:df:c1:9a:3f:c4:89:4a:78:a2:67:
         75:0f:0f:66:15:80:e8:a6:c2:12:cc:38:49:00:de:24:ca:57:
         b9:2b:59:ea:83:73:bd:cc:aa:c2:69:e1:c9:63:3f:f6:8a:33:
         46:e0:3b:4c:dc:60:d1:55:2b:69:38:98:8c:ec:73:da:5b:27:
         65:e0:05:9a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWO9KrYhmH6ZKDOlUTlOrVVmF1F0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB
QTFGQjc2ODAeFw0yNDExMTIxNjEzMTFaFw0yNTExMTExNjE4MTFaMDMxMTAvBgNV
BAMTKEI1ODczMUY2MDQwMDY0NzIzODI2MkQwNEY0MTU5M0QyM0UxNUEyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIQHEmB+fmgXYbG5C04oO6iDM
TPycD65k/RZiBL6R7gcLrkIVLNLPfL3YQjDAYuHy5XL8BDcx4eoxi2aU6CsVyYtH
HF0u1vDSjC8RSUmKH3gdZoyU997bmt3VpE+F8rcg+olCXYb1qJlqXDk15+6k2wkO
iABtPUbqLmWwaQ7WbdDT3e+LJmiFOAZlVHMLeZcOqGlrPjBUJH1bjT3t21Po/jVm
fO8Lko2SD8vl2NRlmeVTpViqRcbSW59hALrwTGHELFcL6S6mNzBiTkior3u6dvjk
V82EilPJSRrl8Q5bWD3bBN1CSaQD/VZ0m+etLaHveQiTpGmLsO21B/nVtBxnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtYcx9gQAZHI4Ji0E9BWT0j4VopIwHwYDVR0j
BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO
VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3
REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLWGthbjFQMXhjN0pOSmp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAv
MzIzODMwMzQzYTMzMzMzNjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzYDANBgkqhkiG9w0BAQsFAAOCAQEATev4Hj5+
El6TeQVbP7CN4LhSPcW68mCK4YJD6LqrEc5KNdYo1CLfkrgAqDjSvqVmRKQc6aMp
z77fqxGTCkmDxgkncGv+xrPSgcXk8z6Rct5X380y2foWD8E9p3wObStKpsK9ZVuV
Szj0TsKHTAJUj3BYT3EZ5ZhU73viY2NuDDgcjtOBYd34pnPrZr0keYAz50jU+0FG
2/CMMe8blvIkY1EREY/y4e6GetDy0WP5188IIpLB4kXNpwHkHiHfwZo/xIlKeKJn
dQ8PZhWA6KbCEsw4SQDeJMpXuStZ6oNzvcyqwmnhyWM/9oozRuA7TNxg0VUraTiY
jOxz2lsnZeAFmg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:35:09 2025 by rpki-client