Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          dZ67s7hW9m0WcDJEM3tSpdjcz1lt/o01eJzLlNoFl4M=
Subject key identifier:   9B:8D:84:A9:D3:BC:99:F8:06:50:2E:5E:C1:60:1B:56:2E:AD:C7:0B
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       70EB50FD34872E7DD229BEA5D04A0E3EF9D771D8
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:45 +0000
ROA not before:           Thu 04 Apr 2024 16:40:45 +0000
ROA not after:            Thu 03 Apr 2025 16:45:45 +0000
asID:                     266437
IP address blocks:        2804:37d0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:eb:50:fd:34:87:2e:7d:d2:29:be:a5:d0:4a:0e:3e:f9:d7:71:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:45 2024 GMT
            Not After : Apr  3 16:45:45 2025 GMT
        Subject: CN=9B8D84A9D3BC99F806502E5EC1601B562EADC70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:a5:42:4f:90:5a:f6:b0:13:22:fc:75:6f:
                    3a:1e:a3:9d:cd:30:30:95:b6:87:cf:0e:6e:c4:49:
                    1b:d7:d9:96:4d:68:cd:ee:d2:32:40:7a:8b:da:2e:
                    e2:15:7d:71:84:4c:64:d9:3f:22:84:35:9c:9d:dc:
                    6e:a1:65:16:02:44:47:5b:94:8e:26:54:25:2c:8e:
                    3c:04:5b:6f:16:15:f6:2a:cb:e1:9d:0e:23:99:12:
                    89:48:20:c2:15:39:14:68:32:8b:f5:19:fc:67:0f:
                    5e:2f:a1:27:63:30:7f:b0:72:d1:2b:b4:45:56:48:
                    b0:a6:46:f7:f9:2b:d8:a1:e9:81:8b:97:41:ca:fe:
                    0c:f8:e7:ad:18:5a:23:38:a9:4a:54:69:74:0a:89:
                    53:8c:78:ae:03:72:7e:22:3a:8c:8e:e6:30:33:7f:
                    97:98:cb:62:06:b0:57:5c:6c:6e:e3:41:fa:3a:59:
                    c2:bf:0d:8e:a9:1d:d0:e8:f8:7b:43:b1:39:4b:22:
                    4a:68:5a:21:bb:76:7f:fd:af:94:2e:bf:ee:12:53:
                    44:bc:0b:0b:a4:ce:24:ad:a2:12:96:52:cb:b7:db:
                    0e:64:de:c5:64:ea:a0:96:bb:1c:50:0b:ef:19:e5:
                    c9:be:4b:ce:a5:a7:57:20:19:7c:38:94:88:47:1c:
                    97:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:84:A9:D3:BC:99:F8:06:50:2E:5E:C1:60:1B:56:2E:AD:C7:0B
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:f1:ed:1c:48:93:b1:d6:9b:4e:aa:10:04:53:17:a4:0d:20:
         d4:25:8c:9a:e0:eb:22:76:a7:74:5f:9e:24:b9:7a:3a:c1:2a:
         0d:fb:4c:4a:57:3d:ee:34:21:ab:02:25:ab:20:17:e5:c7:99:
         0a:a2:e6:32:1a:f4:fd:da:1d:3f:67:ec:77:d8:be:c7:30:36:
         2b:f7:96:a2:7f:f7:ff:23:d8:c1:70:08:86:86:5e:d4:35:23:
         ab:33:c6:22:3a:9e:2e:4d:c3:af:7d:28:cd:3e:cc:44:6d:56:
         58:a8:6f:71:71:4c:00:b9:64:a3:38:55:d7:5c:04:af:b1:9e:
         b4:79:d8:75:e7:66:45:98:dd:7b:ec:07:ff:5b:a3:f1:bb:96:
         5c:6c:9e:25:8b:28:0f:79:a0:dd:5c:a5:11:cd:57:17:d1:9d:
         26:bf:42:a2:b8:e9:c2:59:1c:30:c6:ba:80:e8:8a:5b:c7:91:
         65:e2:32:bf:e3:79:1a:7d:5d:8b:a7:91:ce:1f:66:48:aa:a5:
         b9:86:ba:9b:4a:b5:a8:8c:14:39:2f:8d:40:db:b1:fd:cc:3d:
         b7:b0:ab:2a:95:34:21:76:05:48:70:a2:1e:45:2a:07:63:d4:
         4d:a5:e1:fd:2e:e2:bd:f1:ad:e8:f1:28:a8:f1:4b:58:10:e8:
         c3:08:71:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcOtQ/TSHLn3SKb6l0EoOPvnXcdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNDA0MDQxNjQwNDVaFw0yNTA0MDMxNjQ1NDVaMDMxMTAvBgNV
BAMTKDlCOEQ4NEE5RDNCQzk5RjgwNjUwMkU1RUMxNjAxQjU2MkVBREM3MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjqVCT5Ba9rATIvx1bzoeo53N
MDCVtofPDm7ESRvX2ZZNaM3u0jJAeovaLuIVfXGETGTZPyKENZyd3G6hZRYCREdb
lI4mVCUsjjwEW28WFfYqy+GdDiOZEolIIMIVORRoMov1GfxnD14voSdjMH+wctEr
tEVWSLCmRvf5K9ih6YGLl0HK/gz4560YWiM4qUpUaXQKiVOMeK4Dcn4iOoyO5jAz
f5eYy2IGsFdcbG7jQfo6WcK/DY6pHdDo+HtDsTlLIkpoWiG7dn/9r5Quv+4SU0S8
CwukziStohKWUsu32w5k3sVk6qCWuxxQC+8Z5cm+S86lp1cgGXw4lIhHHJezAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm42EqdO8mfgGUC5ewWAbVi6txwswHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzIzODMwMzQzYTMzMzc2NDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM2
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKAQ30AAwDQYJKoZIhvcNAQELBQADggEBALHx7RxI
k7HWm06qEARTF6QNINQljJrg6yJ2p3RfniS5ejrBKg37TEpXPe40IasCJasgF+XH
mQqi5jIa9P3aHT9n7HfYvscwNiv3lqJ/9/8j2MFwCIaGXtQ1I6szxiI6ni5Nw699
KM0+zERtVliob3FxTAC5ZKM4VddcBK+xnrR52HXnZkWY3XvsB/9bo/G7llxsniWL
KA95oN1cpRHNVxfRnSa/QqK46cJZHDDGuoDoilvHkWXiMr/jeRp9XYunkc4fZkiq
pbmGuptKtaiMFDkvjUDbsf3MPbewqyqVNCF2BUhwoh5FKgdj1E2l4f0u4r3xrejx
KKjxS1gQ6MMIcbw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org