Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
File:                     323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier:          w0BX+p3imqlccnxEFOZ08TvRm/yHQ/Mj+c06PZQivpg=
Subject key identifier:   0F:D2:9A:51:2C:24:AB:3B:40:A9:F8:70:48:6C:E0:91:89:CF:38:46
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       4763E3DC6C26D67F47016D1AB84B6B78B70108E0
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:39 +0000
ROA not before:           Thu 04 Apr 2024 18:17:39 +0000
ROA not after:            Thu 03 Apr 2025 18:22:39 +0000
asID:                     61672
IP address blocks:        2804:1cbc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:63:e3:dc:6c:26:d6:7f:47:01:6d:1a:b8:4b:6b:78:b7:01:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:39 2024 GMT
            Not After : Apr  3 18:22:39 2025 GMT
        Subject: CN=0FD29A512C24AB3B40A9F870486CE09189CF3846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:59:c6:a1:0a:f6:ac:3b:c4:e9:13:10:a2:
                    97:fe:27:f9:2d:91:10:bc:f9:04:7a:ed:f6:f2:ac:
                    22:dc:46:17:bb:a4:68:38:75:e2:4d:4b:3e:70:71:
                    a7:69:9a:e1:d1:4e:8b:83:95:f6:2c:45:ca:a6:77:
                    c8:6e:ec:18:07:39:52:41:7e:73:0c:7f:b2:3e:e0:
                    fb:c2:64:7f:9f:b4:a8:b6:75:74:66:b6:d7:c2:fd:
                    fa:a3:d2:83:24:61:5b:5f:67:eb:cb:b3:d9:6f:1e:
                    d3:a6:14:34:24:c1:d6:ba:e7:36:ef:5f:07:46:6a:
                    a0:0a:da:2d:a0:92:1e:bd:a6:10:91:55:f1:2a:24:
                    9c:46:6d:4e:a4:e0:be:6a:19:0f:ce:c6:d0:ae:2a:
                    7e:b6:75:a2:15:72:35:fc:ea:97:dc:06:d1:ca:40:
                    fd:3a:e1:5f:e1:dc:70:80:8d:4c:8d:77:71:b4:7e:
                    2e:8a:79:6a:42:87:57:eb:cc:52:59:53:21:1d:9f:
                    b0:5f:4e:44:ea:e2:83:9b:13:f1:6c:d8:2b:e2:fe:
                    d3:92:71:85:fd:af:a8:71:7e:94:16:5f:98:2e:6f:
                    49:b4:57:ff:7e:eb:c8:f5:da:bf:a7:10:35:8d:93:
                    db:fe:40:db:70:3d:9e:cc:d7:2d:4b:52:5b:08:66:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:9A:51:2C:24:AB:3B:40:A9:F8:70:48:6C:E0:91:89:CF:38:46
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:03:72:90:bb:a9:fc:4a:f3:4d:d4:a8:56:7e:8a:5f:10:
         b6:12:ee:b3:90:e2:af:91:b1:54:69:2a:39:95:91:c8:c0:55:
         9b:bc:78:3c:af:35:91:d3:67:9b:7c:59:6a:8d:eb:ec:ec:54:
         92:ea:be:3c:a6:27:e7:5d:bd:97:9d:a0:2a:ae:08:da:c7:9d:
         45:6b:c3:05:2f:c3:39:ad:e3:fb:10:5e:67:39:c4:4a:f4:d3:
         d1:cf:2c:46:3f:76:47:7c:57:a2:f9:42:dd:bb:0f:9e:80:d1:
         f3:fa:26:6e:7d:44:9f:4e:f8:42:74:d8:f0:48:3f:66:30:3b:
         bd:04:f1:3d:73:cd:b3:e8:5c:05:a9:62:9a:6b:7f:2e:cc:1b:
         c8:2e:89:3a:8b:f4:ae:22:5e:cf:3f:6c:61:3f:cf:3b:00:d4:
         6f:45:c9:18:af:af:28:1e:e3:4d:b0:0c:8f:27:eb:b4:01:34:
         00:7e:78:5b:cb:9e:8c:c0:47:58:0a:7b:42:94:f1:e5:74:1a:
         4f:31:70:bc:b3:cb:bc:7f:11:32:b5:d3:5f:db:e8:ae:88:cb:
         ae:e1:58:4a:e0:8f:ea:56:10:df:55:2c:ae:d2:b0:92:7e:9a:
         a3:dc:eb:6f:92:fe:8a:7b:89:a3:81:8e:d0:3b:fd:7a:6a:42:
         57:59:da:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUR2Pj3Gwm1n9HAW0auEtreLcBCOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGQTcxOEE3Njg5RjcxOEFCQjRDNDZEMEQ5QjBBMEMw
MzY2NjI4MTAeFw0yNDA0MDQxODE3MzlaFw0yNTA0MDMxODIyMzlaMDMxMTAvBgNV
BAMTKDBGRDI5QTUxMkMyNEFCM0I0MEE5Rjg3MDQ4NkNFMDkxODlDRjM4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8FnGoQr2rDvE6RMQopf+J/kt
kRC8+QR67fbyrCLcRhe7pGg4deJNSz5wcadpmuHRTouDlfYsRcqmd8hu7BgHOVJB
fnMMf7I+4PvCZH+ftKi2dXRmttfC/fqj0oMkYVtfZ+vLs9lvHtOmFDQkwda65zbv
XwdGaqAK2i2gkh69phCRVfEqJJxGbU6k4L5qGQ/OxtCuKn62daIVcjX86pfcBtHK
QP064V/h3HCAjUyNd3G0fi6KeWpCh1frzFJZUyEdn7BfTkTq4oObE/Fs2Cvi/tOS
cYX9r6hxfpQWX5gub0m0V/9+68j12r+nEDWNk9v+QNtwPZ7M1y1LUlsIZt3XAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUD9KaUSwkqztAqfhwSGzgkYnPOEYwHwYDVR0j
BBgwFoAUGfpxinaJ9xirtMRtDZsKDANmYoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMS8xOUZBNzE4QTc2ODlGNzE4QUJCNEM0NkQwRDlCMEEwQzAzNjY2MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RkE3MThBNzY4OUY3MThB
QkI0QzQ2RDBEOUIwQTBDMDM2NjYyODEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzEv
MzIzODMwMzQzYTMxNjM2MjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBy8gDANBgkqhkiG9w0BAQsFAAOC
AQEAjTADcpC7qfxK803UqFZ+il8QthLus5Dir5GxVGkqOZWRyMBVm7x4PK81kdNn
m3xZao3r7OxUkuq+PKYn5129l52gKq4I2sedRWvDBS/DOa3j+xBeZznESvTT0c8s
Rj92R3xXovlC3bsPnoDR8/ombn1En074QnTY8Eg/ZjA7vQTxPXPNs+hcBalimmt/
LswbyC6JOov0riJezz9sYT/POwDUb0XJGK+vKB7jTbAMjyfrtAE0AH54W8uejMBH
WAp7QpTx5XQaTzFwvLPLvH8RMrXTX9vorojLruFYSuCP6lYQ31UsrtKwkn6ao9zr
b5L+inuJo4GO0Dv9empCV1naSA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:22 2024 by rpki-client on console-fra.rpki-client.org