Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa
File:                     323830343a336231383a3a2f33332d3333203d3e20323636313239.roa (raw, json)
Hash identifier:          EngerUyMQ4nNVk0YeJ7JaJAPCjcwOiCBjO9Vlb7Gw0A=
Subject key identifier:   A4:A9:DF:64:A2:01:C0:9B:A1:B0:13:7F:1D:B5:F9:6C:4B:BF:03:E8
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       779EB8BBE73E194EE74B7EBEAB269C3490CE01AA
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa
Signing time:             Wed 03 Apr 2024 18:32:19 +0000
ROA not before:           Wed 03 Apr 2024 18:27:19 +0000
ROA not after:            Wed 02 Apr 2025 18:32:19 +0000
asID:                     266129
IP address blocks:        2804:3b18::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:b8:bb:e7:3e:19:4e:e7:4b:7e:be:ab:26:9c:34:90:ce:01:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Apr  3 18:27:19 2024 GMT
            Not After : Apr  2 18:32:19 2025 GMT
        Subject: CN=A4A9DF64A201C09BA1B0137F1DB5F96C4BBF03E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:4c:88:4c:3e:07:e6:3a:85:0d:62:65:2c:
                    ac:34:97:b5:13:69:be:6e:7b:6a:1b:98:8c:bf:ed:
                    79:ff:dd:b3:60:87:25:b5:b9:2a:a5:c2:0d:aa:56:
                    74:a0:ee:27:9f:52:45:51:10:52:80:17:a0:23:d9:
                    ed:c8:ab:a2:ca:4f:76:1f:a2:76:43:2d:26:8c:cf:
                    42:8d:b2:79:af:36:76:36:e2:b7:13:7a:ba:b1:8b:
                    cd:e3:2e:2f:be:39:ad:fd:be:f6:a4:a1:ba:1e:bd:
                    ea:2d:47:bf:98:49:0c:4a:23:c4:9e:a3:ba:89:2f:
                    61:42:73:aa:ac:24:d7:17:5c:4a:62:30:24:5b:e2:
                    6f:69:db:36:28:d4:3d:13:2b:2a:07:6c:0f:36:68:
                    65:19:aa:fd:00:52:25:74:33:a1:16:9b:4e:4c:2f:
                    34:0f:a7:05:95:40:d8:d1:1f:29:3b:b9:ea:ec:32:
                    91:df:10:84:10:48:f4:05:81:eb:21:e6:38:34:66:
                    e2:bc:83:64:7a:79:e5:81:99:d4:02:2d:86:13:51:
                    b8:ca:00:b6:fe:d2:a1:aa:e5:ad:01:32:73:a7:11:
                    5b:4c:d9:69:f5:bb:2f:cf:50:83:38:a8:d4:97:10:
                    15:99:a1:01:a0:6c:aa:0d:0c:e0:73:b4:10:24:17:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A9:DF:64:A2:01:C0:9B:A1:B0:13:7F:1D:B5:F9:6C:4B:BF:03:E8
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:6c:21:77:01:c3:eb:55:25:23:a7:91:23:0b:b7:02:12:9f:
         8c:3c:01:87:0d:39:44:91:ba:89:02:f6:cb:97:1a:0f:62:23:
         fe:bd:ba:16:4d:cc:7e:89:a0:14:3e:87:63:fe:44:2b:bc:b7:
         bd:2c:d1:c1:be:5f:88:15:7c:4f:47:bc:89:03:51:7a:a1:3d:
         95:b3:39:24:77:5b:80:48:07:2b:8d:3e:57:64:f1:f6:79:1c:
         7a:f8:e9:c4:ef:35:d9:b1:f3:48:d0:84:46:0d:26:b5:72:eb:
         60:e7:15:f1:d7:7c:2b:00:38:71:41:94:bd:d8:f0:bf:88:89:
         31:79:00:29:a5:77:17:fe:89:0b:f6:38:9c:c0:11:10:58:f9:
         c5:3b:2c:be:56:1f:49:a5:b5:30:fd:03:5b:ca:7c:1d:5d:ab:
         b3:bf:a2:36:1a:90:97:70:6c:63:79:e0:de:bf:84:dd:21:35:
         2e:4b:11:7b:53:ca:29:5c:d7:c5:fa:22:f2:ba:2c:9e:9e:b4:
         ce:6e:8e:a6:ae:5d:6b:2c:d4:49:0e:e0:06:9d:96:d4:04:bb:
         07:61:94:24:24:a9:15:95:f5:8b:aa:04:bf:8b:5e:57:7a:25:
         fa:38:10:42:39:c1:04:2f:1f:52:3c:7f:f4:2b:03:98:16:b2:
         c4:26:7f:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd564u+c+GU7nS36+qyacNJDOAaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF
REI5RUU5RTAeFw0yNDA0MDMxODI3MTlaFw0yNTA0MDIxODMyMTlaMDMxMTAvBgNV
BAMTKEE0QTlERjY0QTIwMUMwOUJBMUIwMTM3RjFEQjVGOTZDNEJCRjAzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd30yITD4H5jqFDWJlLKw0l7UT
ab5ue2obmIy/7Xn/3bNghyW1uSqlwg2qVnSg7iefUkVREFKAF6Aj2e3Iq6LKT3Yf
onZDLSaMz0KNsnmvNnY24rcTerqxi83jLi++Oa39vvakoboeveotR7+YSQxKI8Se
o7qJL2FCc6qsJNcXXEpiMCRb4m9p2zYo1D0TKyoHbA82aGUZqv0AUiV0M6EWm05M
LzQPpwWVQNjRHyk7uersMpHfEIQQSPQFgesh5jg0ZuK8g2R6eeWBmdQCLYYTUbjK
ALb+0qGq5a0BMnOnEVtM2Wn1uy/PUIM4qNSXEBWZoQGgbKoNDOBztBAkF60TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpKnfZKIBwJuhsBN/HbX5bEu/A+gwHwYDVR0j
BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3
dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3
NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv
MzIzODMwMzQzYTMzNjIzMTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ7GAAwDQYJKoZIhvcNAQELBQADggEBAKpsIXcB
w+tVJSOnkSMLtwISn4w8AYcNOUSRuokC9suXGg9iI/69uhZNzH6JoBQ+h2P+RCu8
t70s0cG+X4gVfE9HvIkDUXqhPZWzOSR3W4BIByuNPldk8fZ5HHr46cTvNdmx80jQ
hEYNJrVy62DnFfHXfCsAOHFBlL3Y8L+IiTF5ACmldxf+iQv2OJzAERBY+cU7LL5W
H0mltTD9A1vKfB1dq7O/ojYakJdwbGN54N6/hN0hNS5LEXtTyilc18X6IvK6LJ6e
tM5ujqauXWss1EkO4AadltQEuwdhlCQkqRWV9YuqBL+LXld6Jfo4EEI5wQQvH1I8
f/QrA5gWssQmfzE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:49 2024 by rpki-client on console-fra.rpki-client.org