Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          +SfzMVQWWljmNDd449RfROvWVT4nOAEZKGF6JmiIVdE=
Subject key identifier:   43:BA:DF:47:54:A3:58:5B:49:C6:F0:C4:AA:8F:85:C6:67:FE:AD:69
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       56655E1EC279A0794AD1C27729E705DBF0C444F3
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 04 Apr 2024 07:21:07 +0000
ROA not before:           Thu 04 Apr 2024 07:16:07 +0000
ROA not after:            Thu 03 Apr 2025 07:21:07 +0000
asID:                     265935
IP address blocks:        2804:401c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:65:5e:1e:c2:79:a0:79:4a:d1:c2:77:29:e7:05:db:f0:c4:44:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Apr  4 07:16:07 2024 GMT
            Not After : Apr  3 07:21:07 2025 GMT
        Subject: CN=43BADF4754A3585B49C6F0C4AA8F85C667FEAD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:6f:51:7f:c9:a6:9e:70:0b:d0:29:90:4b:
                    4f:d7:6a:53:72:69:8b:30:dc:6a:62:27:9c:13:e7:
                    51:10:51:a2:64:ff:03:eb:4f:63:95:10:b4:e8:84:
                    8c:2b:f0:f9:fc:70:c6:76:ea:f3:4d:8a:d8:48:7b:
                    33:ab:08:ad:c2:e4:9c:c6:7e:da:36:37:38:9f:51:
                    66:5c:e4:98:c1:60:43:be:09:fb:d0:7c:0a:81:43:
                    7f:cb:65:6d:78:1d:14:3e:6a:39:5f:73:a8:01:0f:
                    ae:d1:ea:da:3a:f0:55:7e:89:ed:fb:e9:0c:0f:1c:
                    a4:aa:3e:9d:a8:70:31:04:3d:b2:42:20:e3:03:9b:
                    73:cd:24:70:fd:22:8a:7d:fb:4d:d3:e9:fb:ed:e7:
                    7a:84:5c:1c:e8:46:ff:3c:a3:db:21:97:ee:a8:a1:
                    67:16:43:77:5f:07:92:e4:ec:88:21:e0:11:18:50:
                    d1:45:e4:fb:9f:4a:70:40:41:56:b0:4f:2b:a5:64:
                    db:70:9c:bb:77:21:89:fb:22:a2:50:3e:23:b8:bb:
                    ff:83:90:8c:79:93:36:33:ff:91:00:9e:c8:57:0e:
                    2b:8f:d4:d2:f6:f7:0d:ff:6a:01:2d:8d:f2:7c:7f:
                    ff:f0:02:0a:12:23:4c:b0:32:ad:e4:76:ab:f3:c0:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:DF:47:54:A3:58:5B:49:C6:F0:C4:AA:8F:85:C6:67:FE:AD:69
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:cf:77:3d:5e:32:e7:80:b6:c1:d2:8f:67:3c:ca:62:e7:
         15:06:1a:68:f4:e0:ef:1a:2d:c4:81:87:da:6a:03:40:16:15:
         96:8c:26:e9:3d:89:1e:ba:44:a0:02:ca:4c:ba:9f:c9:25:b6:
         d5:9f:e4:8a:55:2e:b2:53:e1:b1:39:23:d8:cf:cd:bb:81:64:
         15:5e:08:6c:1a:b9:62:4c:f1:92:56:c9:60:ce:5d:3e:00:00:
         a7:14:ce:09:ad:7e:87:b9:c3:e7:b7:26:00:fc:7e:11:dc:eb:
         0b:e5:94:e8:7e:42:b6:48:fe:c9:12:ed:45:17:4d:ae:10:2f:
         10:dd:57:d9:d9:a4:b2:d3:d8:fe:06:2e:c3:94:d6:d6:b8:20:
         87:95:98:e0:e8:fd:fe:f2:8c:84:e9:b4:fb:b3:e6:92:8f:eb:
         ff:5e:fe:81:36:53:db:cf:6b:89:bd:43:9f:26:fb:d9:a8:4d:
         f7:87:b2:af:4f:2b:cd:6e:d8:09:b2:e4:71:b6:fd:0f:73:16:
         59:21:30:7f:e5:86:d2:da:f8:4a:a9:bb:4b:6f:15:d2:a8:19:
         e7:56:0d:6c:c6:a4:1f:f9:94:d9:f4:88:97:d3:80:fd:d6:be:
         e7:d4:72:0e:6a:31:11:1d:11:37:6a:48:09:88:82:07:ba:97:
         85:35:c2:9a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVmVeHsJ5oHlK0cJ3KecF2/DERPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0
NjdGNUJEMzAeFw0yNDA0MDQwNzE2MDdaFw0yNTA0MDMwNzIxMDdaMDMxMTAvBgNV
BAMTKDQzQkFERjQ3NTRBMzU4NUI0OUM2RjBDNEFBOEY4NUM2NjdGRUFENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRW9Rf8mmnnAL0CmQS0/XalNy
aYsw3GpiJ5wT51EQUaJk/wPrT2OVELTohIwr8Pn8cMZ26vNNithIezOrCK3C5JzG
fto2NzifUWZc5JjBYEO+CfvQfAqBQ3/LZW14HRQ+ajlfc6gBD67R6to68FV+ie37
6QwPHKSqPp2ocDEEPbJCIOMDm3PNJHD9Iop9+03T6fvt53qEXBzoRv88o9shl+6o
oWcWQ3dfB5Lk7Igh4BEYUNFF5PufSnBAQVawTyulZNtwnLt3IYn7IqJQPiO4u/+D
kIx5kzYz/5EAnshXDiuP1NL29w3/agEtjfJ8f//wAgoSI0ywMq3kdqvzwIGnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ7rfR1SjWFtJxvDEqo+Fxmf+rWkwHwYDVR0j
BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ
NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC
RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv
MzIzODMwMzQzYTM0MzAzMTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM5MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQBzAMA0GCSqGSIb3DQEBCwUA
A4IBAQA40893PV4y54C2wdKPZzzKYucVBhpo9ODvGi3EgYfaagNAFhWWjCbpPYke
ukSgAspMup/JJbbVn+SKVS6yU+GxOSPYz827gWQVXghsGrliTPGSVslgzl0+AACn
FM4JrX6HucPntyYA/H4R3OsL5ZTofkK2SP7JEu1FF02uEC8Q3VfZ2aSy09j+Bi7D
lNbWuCCHlZjg6P3+8oyE6bT7s+aSj+v/Xv6BNlPbz2uJvUOfJvvZqE33h7KvTyvN
btgJsuRxtv0PcxZZITB/5YbS2vhKqbtLbxXSqBnnVg1sxqQf+ZTZ9IiX04D91r7n
1HIOajERHRE3akgJiIIHupeFNcKa
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org